1. About this policy
This policy explains what information playtest collects, why we need it, who helps us process it, and what you can do about it. playtest lets Roblox creators grade their game thumbnails and titles, then test them live and keep the one that performs best.
It covers the playtest website, the dashboard, and the playtest Chrome extension. When we say "playtest", "we" or "us", we mean playtest. When we say "you", we mean the person using it.
playtest is an independent tool. It is not affiliated with, sponsored by, or endorsed by Roblox Corporation. Roblox is a trademark of Roblox Corporation.
2. Information we collect
When you log in with Roblox
You sign in with "Log in with Roblox", which uses Roblox's official OAuth 2.0 sign in. Roblox shows you exactly what you are sharing before you agree. We receive:
- Your Roblox user ID, username, display name and avatar.
- The experiences (games) you choose to grant us access to. You pick them on the Roblox screen, and we only see those.
- Permission for these scopes: openid and profile (who you are), universe.analytics:read (your game's analytics), and universe:write and universe.place:write (so we can change thumbnails and rename titles during a test you start).
- The OAuth tokens Roblox gives us. We store them encrypted in Supabase Vault.
Open Cloud API key (optional)
Some features need a Roblox Open Cloud API key, which you can create and paste in. We use it only to upload and swap thumbnails for your own game. It is stored encrypted, and you can delete it from your settings at any time. We recommend restricting the key in Roblox so it only works on the experience you are testing.
Data about your games
For the games you connect, we read data from Roblox such as thumbnail impressions, plays, retention, and genre benchmarks. We use it to run your tests and show you how each thumbnail or title is doing.
Thumbnails and titles you test
When you set up a test, we store the images and titles you add so we can upload them to Roblox and compare their results.
Billing details
If you buy a paid plan, Stripe handles your payment. We store your Stripe customer ID, subscription ID, your plan, and its renewal status. We never see or store your full card number.
Push notifications
If you turn on notifications, we store your browser's push subscription (an endpoint address and encryption keys) and a short device label so you can tell your devices apart.
Basic technical data
Like most websites, our hosting provider keeps short-lived server logs, such as IP address, browser type and the time of a request. We use them to keep the service running and secure.
3. What we never collect
- We never store full card numbers. Stripe keeps those.
- We do not use advertising trackers, and we do not sell your data.
- We do not read data from games you have not granted to us.
4. How we use your information
We use your information only to run playtest. That means:
- Signing you in and keeping your session secure.
- Running the tests you start: uploading thumbnails, switching the live thumbnail, and renaming titles on your game.
- Showing your results, signals and benchmarks in the dashboard and the extension.
- Sending the notifications you turned on, such as when a test finds a winner.
- Handling your subscription, plan limits and AI credits.
- Preventing abuse, fixing bugs, and keeping the service within fair usage limits.
- Answering you when you contact us.
We do not use your data for advertising, and we do not build profiles to sell.
5. The thumbnail grader and AI look test
Thumbnail grader
The grader on our homepage runs entirely in your browser. Your image is not uploaded to us to calculate the score.
AI look test
When you choose to run an AI look test, we send that image and title to Google's Gemini API, which rates how it might look to players. Google processes this data under its Gemini API terms. We only send it when you start the test. Each plan has a daily number of AI credits, and we keep a count of how many you have used.
6. The Chrome extension
The playtest extension is built to touch as little as possible:
- It reads only playtest's own sign-in cookie, so it knows who is logged in.
- On roblox.com and create.roblox.com, it reads the page you are viewing so it can show scores and previews next to your games.
- It never reads your Roblox cookies.
- It caches data locally in your browser for up to 30 minutes, so it does not have to ask our servers every time.
9. Where your data is processed
playtest and the services above may store and process data in the United States and other countries. Their privacy rules may differ from where you live. We pick providers that use standard security and data protection agreements.
10. How we keep it safe
- Roblox OAuth tokens and Open Cloud API keys are stored encrypted in Supabase Vault.
- All traffic to playtest uses HTTPS.
- Database access rules mean each account can only read its own data.
- We keep access to production systems limited to the people who need it.
No online service can promise perfect security. If we learn of a breach that affects your data, we will tell you and take steps to fix it.
11. How long we keep it
- We keep your account data while your account is open.
- When your account is deleted (you can ask us on our Discord server), we remove your data within 30 days.
- Billing records are kept for as long as tax and accounting laws require.
- Server logs are kept for a short time and then deleted automatically.
12. Your choices and rights
You are in control of your data. You can:
- Disconnect playtest from your Roblox account in your Roblox settings.
- Delete your Open Cloud API key from playtest at any time.
- Turn notifications off from the bell icon or in your browser settings.
- Cancel your plan in the billing portal.
- Ask us for a copy of your data, or ask us to correct or delete it.
To make a request, message us on our Discord server. Depending on where you live, you may have extra rights under laws like the GDPR or CCPA. We will honor them, and we will not treat you differently for using them.
13. Children and teens
Many Roblox creators are young, so we take this seriously. You must be at least 13 years old to use playtest.
- If you are under 18, you need permission from a parent or guardian.
- A parent or guardian must handle any paid plan.
- We do not knowingly collect personal information from anyone under 13.
If you think a child under 13 has used playtest, contact us on our Discord server and we will delete their data.
14. Changes to this policy
If we change how we handle your data, we will update this page and the date at the top. For big changes, we will also let you know in the dashboard or on Discord before they take effect. You can always read our Terms of Service for the rules of using playtest.
15. Contact
Questions about privacy, or want to make a request? Message us on our Discord server. We read every message.