privacy

ROFLEX uses official Roblox OAuth to confirm that you control the account being certified. We never ask for or receive your Roblox password. The app requests only identity scopes: openid profile.

Certification signals come from Roblox data that is publicly accessible for the authorized account: account age, public limited inventory/RAP, classic Roblox badges, group membership, public friend/follower counts, avatar, username history, and public presence. A private inventory stays private and is not scored as zero.

Your certificate is private by default. It appears on the Aura Wall, leaderboard, share page, and share image only after you explicitly publish it. Public pages contain only the details you chose to publish through that action.

Payments and storage: Lemon Squeezy processes payment information as our merchant of record. ROFLEX does not receive card details. New certificate and profile-cache records are encrypted at rest in Vercel Blob. We do not sell Roblox data, use it for AI training, or build cross-platform profiles.

Data deletion: Email hey@roflex.lol from the contact address you used with a certificate link or Roblox username. We will remove the certificate and its stored records.