Privacy
Your data and Rivet
Rivet keeps only what it needs to sign you in, send builds to your Studio and count credits. No ads, no analytics, no tracking, and nothing is sold.
Last updated 7 November 2026
What Rivet keeps, and why
| What | Why | How long |
|---|---|---|
| Your Roblox user ID, username and display name, when your Roblox account was made, your chosen style, and when you joined and last used Rivet | To sign you in, show your name, use your style, and give free credits to Roblox accounts at least 30 days old | Until you delete your account |
| That you confirmed you are 16 or older, and when | Rivet is only for people aged 16 or older | Until you delete your account |
| The AI apps you connect (for example Claude): the app's name and web address, when you connected it and when it last used Rivet | So only the apps you allowed can use your Rivet, and you can disconnect them | Until you disconnect the app, then 30 more days |
| Your linked Roblox Studio: the place's name and IDs, and when it last checked in | To send builds to the right Studio | Until you unlink it, then 30 more days |
| Your builds: the request your AI app sent, the build itself (its objects, scripts and style), and whether and where you applied it | So a build can wait in Studio until you look at it and click Apply, and your AI app can improve it later | Until you delete your account |
| Your credits and a list of every credit change | To count credits | Until you delete your account |
| A scrambled (hashed) form of your Roblox ID for each month | To give the free credits only once a month per Roblox account | Until the month ends, even if you delete your account |
| Steps in progress: signing in, connecting an app, linking Studio | To finish each step safely | 5 to 10 minutes, then deleted within two days |
| Rate-limit counters: a shortened, scrambled (hashed) form of your IP address, or your account, and a count | To protect Rivet from abuse and overload | At most one hour, then deleted within a day |
Codes and keys are kept only in scrambled (hashed) form, and they expire: an AI app's key after one hour, its renewal key after 30 days. Rivet never sees your Roblox password. You sign in on Roblox's own page, Rivet reads your account details once, and then it gives up its access to your Roblox account at once.
Rivet needs these details to work. Apart from the free-credit rule above, it makes no automatic decisions about you.
Cookies
Rivet sets two cookies, both needed to sign in, and nothing else. __Host-rivet keeps you signed in for up to 30 days, or until you sign out. __Host-rivet-signin protects a sign-in with Roblox for 10 minutes. Neither is used for tracking, so there is no cookie banner.
Legal bases
Providing the service you signed up for (Art. 6(1)(b) GDPR), and Rivet's legitimate interest in keeping the service safe, working and fair (Art. 6(1)(f) GDPR) for the rate limits, the monthly free-credit check and the connection data below.
Who else handles data
- Cloudflare, Inc. hosts the website and its database and works on Rivet's behalf under its Data Processing Addendum. Cloudflare takes part in the EU-U.S. Data Privacy Framework, and the addendum includes the EU Standard Contractual Clauses. Its network also handles connection data, such as IP addresses, to deliver and protect the site.
- Roblox Corporation runs Sign in with Roblox, under its own privacy policy.
- Your AI app (for example Claude by Anthropic or ChatGPT by OpenAI) is your own: your chats follow that app's terms and privacy policy. Rivet receives only what the app sends to Rivet's tools.
Deleting your data
Delete your account at any time on your dashboard, under Account. Everything of yours goes at once, except the monthly hash above, which goes when the month ends. Cloudflare's database recovery keeps deleted data for up to 7 more days, then it is gone for good.
Your rights
You have the right to know what Rivet keeps about you, to have it corrected, deleted, limited or handed to you in a portable form, and to object to its use. Your dashboard shows your connected apps, your linked Studio and your credits, and Delete account removes everything at once. You can also complain to a data protection authority, in particular in the EU country where you live or work.
Changes
If Rivet starts keeping something new, this page changes first, with a new date.