Privacy and your work.

rbxlctr stores your email, a password hash, session records, credit transactions, game descriptions and saved thumbnails. Passwords are never stored in plaintext.

Descriptions and reference images are sent to our generation service to create your requested thumbnails. Unsaved reference uploads are processed for that request. References you explicitly save in a project remain private until removed or until the project or account is deleted; saved results belong to your private account history. If you choose Share to gallery on a thumbnail, it is shown publicly on the rbxlctr gallery (image and its name only, never your email) after the owner approves it; you can remove it at any time from your library. If you buy credits, Stripe handles the payment and shows us the pack, amount and time, not your card number. Account email is sent through our email delivery service for verification and recovery.

Saved thumbnails and their descriptions are retained for 90 days. Expired sessions and recovery links are removed automatically. Security rate-limit records use hashed scope identifiers. Operators can access necessary account data to operate and support the service. This includes the game descriptions you submit, their results and the thumbnails created; the owner’s views of descriptions, accounts and images are recorded in an audit log.

You can export your account and images or delete your account in Account settings. Live account deletion removes your account records and saved image files. Encrypted backups are retained for up to 30 days; recovery procedures must reapply deletions made after a backup. An upstream provider can retain information under its own processing agreement.

We use a necessary sign-in cookie. There are no advertising or third-party analytics trackers. Minimal first-party events record signup, verification, successful generation, downloads and return use without prompts or image contents; these events and feedback expire after 90 days. The optional feed preview shows popular games and their thumbnails from Roblox’s public lists; our server fetches them, so your browser does not contact Roblox for this and nothing about you is sent. Private drafts expire after 30 days of inactivity. Recovery links expire after 30 minutes; sessions expire after 14 days.

Contact the operator below for support, deletion questions or abuse reports.

Operator: rbxlctr. Support: contact support.