RoZur — Privacy Policy

RoZur is a free, open-design browser extension that enhances the Roblox web experience. This page explains exactly what data it touches and what it does not do.

TL;DR

• RoZur runs entirely in your browser.
• We do not collect, transmit, sell, or share any user data.
• We do not use analytics, telemetry, or tracking pixels.
• All settings and cached data live in chrome.storage and IndexedDB on your device only.

Data we access

RoZur reads data only from Roblox's official public APIs while you are logged in, using your own browser session. The categories accessed are:

• Inventory & limiteds — to compute RAP and net worth.
• Trade data — to display value verdicts on the trade page.
• Friends list & presence — to show online status (in-game, in-studio, online).
• Game pages — to display server lists, top games tracking, and "passes spent" totals.
• Public profile data — display name, follower count, badges.

None of this data leaves your browser.

Data we store locally

• Your preferences (theme, custom background, music volume, etc.) in chrome.storage.sync.
• Local caches of inventory & limiteds prices (24-hour expiry) in chrome.storage.local.
• Music files you drag-and-drop into the RoZur player, in IndexedDB on your device.
• Optional Discord webhook URL you provide, used only by you to post your own trade-ad images.

Third-party services

Rolimons (read-only public data)

RoZur queries api.rolimons.com for public RAP and demand data on limiteds. Only public limited-item IDs are sent — no user identity. Their privacy policy: rolimons.com/privacy.

Discord webhooks (opt-in)

If you add a Discord webhook URL in Settings, RoZur will POST your generated trade-ad image to that webhook only when you press the "Post" button. The webhook URL is stored locally and never seen by us.

YouTube embeds (optional)

The music player can embed youtube-nocookie.com iframes if you choose to use YouTube tracks. YouTube's privacy policy applies to those embeds: policies.google.com/privacy.

Data we do NOT collect

• No personally identifiable information (PII)
• No browsing history outside Roblox
• No payment data
• No location, IP geocoding, or device fingerprints
• No analytics or telemetry — there are no outbound calls to RoZur servers

Permissions explained

• storage: settings + caches.
• alarms: periodic refresh of friend presence, limiteds prices, playtime tracker.
• notifications: alert you when a wishlisted item drops in price.
• contextMenus: right-click "Add to wishlist", "Open in Net Worth".
• scripting: re-inject the UI on Roblox SPA navigation.
• Host permissions on Roblox/Rolimons/Discord: see the corresponding sections above.
• <all_urls>: required so a user-pasted custom background URL from any image host can be fetched and converted to a data-URL locally.

Open source & security

RoZur's source code is included verbatim in the extension package — every script is auditable. We do not download or evaluate any remote code at runtime.

Children's privacy

Roblox itself is open to users 13+. RoZur does not collect, store, or transmit any personal data, regardless of the user's age.

Changes to this policy

If we ever change anything material in this policy, the "Last updated" date will reflect it. The latest version is always at this URL.

Contact

Questions or concerns? Email us at privacy@rozur.xyz.

RoZur is an independent project and is not affiliated with, endorsed by, or sponsored by Roblox Corporation. "Roblox" is a trademark of Roblox Corporation.