Your data

Privacy notice

Last updated 5 October 2026

ROS Infinity is a free, non-commercial fan project. We keep as little about you as we can: no email address, no real name and no payment details.

What your account stores

• Your username. It is also your name for signing in to the game.
• Your password and recovery key, only as salted one-way hashes (scrypt). Nobody, including us, can read them back.
• Dates: when you created the account, your last sign-in, and when you last changed your password or recovery key.
• A failed sign-in counter, used to lock an account for a while after repeated wrong passwords.

Security log

We record sign-ins, failed attempts and account changes together with the IP address they came from. We use it only to stop attacks and abuse, and every entry is deleted after 30 days.

Cookies

One essential cookie keeps you signed in. It lasts 12 hours, or 30 days if you tick “Keep me signed in”, and it is removed when you sign out. There are no advertising or tracking cookies.

Website statistics

Visit counts come from Cloudflare Web Analytics, which works without cookies and does not build a profile of you.

Playing the game

When you play, our servers see your IP address and record connections and requests in their logs. Logs are deleted after 14 days.

Where your data lives

Account data is kept on our game server in Singapore, hosted by Vultr. The website and the connection to the account server run through Cloudflare. We don’t sell your data or share it with anyone else. Daily backups are kept for 14 days.

Your choices

On your account page you can change your password, make a new recovery key, sign out other browsers and delete your account. Deleting it erases the account, its sessions and its security log right away. We keep one entry noting that an account was deleted from your IP address, without your username, for 30 days to catch abuse. Copies in backups are gone within 14 days.

If you are in the Philippines, the Data Privacy Act of 2012 gives you the right to be informed about, access, correct and erase your personal data. For anything the account page can’t do, contact us on our Discord.

Changes

If this notice changes, the date at the top changes with it.