Purpura does not sell personal data and does not use advertising or analytics. Most of what the extension knows stays in your browser. A few features use the Purpura API at api.purpura.page: anonymous community server-region reports, optional public game reviews, shareable server links, item-value lookups, and color names. Posting a review publishes your review text, as described below. There is no separate Purpura account and no Roblox OAuth login.
What stays on your device
Purpura stores settings and cached data in Chrome extension storage. Settings kept in Chrome sync storage may be synchronized by Chrome if you have browser sync enabled. Review ownership credentials stay in local extension storage and are never synchronized by Purpura.
Purpura also generates one random installation identifier. It is a string of random characters and is not derived from your Roblox account, your device, your browser, or anything else about you. It exists only so the API can tell repeat requests apart when limiting abuse, and it is sent with API requests for that purpose alone. Clearing Purpura's extension data, or uninstalling Purpura, deletes it.
Community server regions
Purpura runs one small API at api.purpura.page. On a game page, Purpura may ask it which regions other users have already reported for that game, and it may report the region and the game version it manages to determine for that game's servers. This feature exists because Roblox may omit the datacenter of a full server. It is on by default, and it only works when people take part.
While the feature is on, Purpura sends the game ID, the server ID, the Roblox datacenter ID and game version when they could be determined, the game server's own network address when it could be determined, and the time of the observation. That is the entire payload, and it is batched. Purpura sends no username, no Roblox account or user ID, no email address, no device, browser, or operating system details, no location, and no record of anything you do elsewhere.
The network address in that payload belongs to the Roblox game server, never to you. It is trimmed to its /24 subnet before it is stored, a form like 128.116.45.0, which is enough to identify the datacenter a server sits in and nothing more. Individual server hosts are not recorded, and your own IP address is not part of this payload.
Reports join a shared ledger, which is the point of the feature: the regions other users have reported for a server become visible to other Purpura users, so everyone can see where a full server actually is. Every entry is attached to a game and a server, never to a person, and the ledger stores no identifier that could tie an entry back to the installation that reported it.
Region reports are deleted 30 days after they were last seen, and they stop being used to answer lookups at the same time. Roblox can move a server to a different datacenter, so a stale answer would be worse than no answer.
You can switch this off at any time in Settings, then Security, then Community Server Regions. With it off, Purpura sends no community server-region reports or ledger lookups. Datacenter-list requests and Game Reviews are separate features, and the Game Reviews switch controls review requests independently.
Game Reviews
Game Reviews adds a tab to game pages. Opening it requests public reviews from the API, and if you are logged in to Roblox the extension also fetches your own review using a private credential. No review is posted automatically. Publishing requires submitting the form and agreeing to make it public.
When you publish, Purpura sends the game universe ID, your Gameplay, Creativity, and Polish ratings, and the review text you wrote. The ratings are numbers and the review is text; nothing else about you is collected for reviews. Display names shown on reviews are pseudonyms derived from a local credential, not your Roblox username. Reviews are publicly readable by anyone and are not Roblox endorsements or verified developer statements. Review text is run through the Leo Profanity word filter before it is stored, but this is not comprehensive moderation, so do not submit personal information.
A random 256-bit ownership credential is created locally for each Roblox login used in this installation. Your Roblox user ID selects it locally and is not sent to the reviews API. The credential is transmitted over HTTPS for your review lookup, publishing, editing, and deletion, and the database stores its SHA-256 hash, never the credential itself, alongside your reviews. The pseudonym is derived from that hash. No Roblox cookies, passwords, or OAuth tokens are sent to Purpura. Reviews remain stored until deleted, so use Delete in the Reviews tab before uninstalling or clearing extension data. Turning off Settings, then Games, then Game Reviews stops review API requests but does not delete published reviews.
Share Server Links
Copy Link on a public server card sends only the game place ID and server instance ID to the API when clicked. Anyone with a short link can resolve its target, so links are not private invitations or access permissions. Opening a short link requests its target from the API, while opening a full link does not need an API lookup. The landing page launches Roblox only when you click Join. This feature is independent of Community Server Regions and Game Reviews.
The API stores a random short code, the two IDs, a creation time, and an expiry time. No Roblox user identity and no installation identifier are stored with the link. Short links expire 30 days after creation, and copying an existing unexpired link does not extend its lifetime. Expired links stop resolving immediately and are deleted by retention sweeps. There is no click-tracking record in the link database.
If creation fails, the extension offers a full link containing the game and server IDs without storing a link record. Full links have no stored expiry, but their server may close at any time. Turning off Settings, then Games, then Share Server Links removes its buttons and stops short-link creation requests from the extension. A request already in progress may finish, and existing links remain valid until expiry.
Trading protection and projected-item warnings
Unsafe Trade Protection is off by default. When you enable it, the extension reads your authenticated Roblox account and up to 10 newest outbound trades every 30 seconds while Chrome runs, evaluates them locally using Rolimon's market values (RAP for unvalued items), and may cancel offers at or above your configured loss threshold. Missing, stale, or invalid data prevents cancellation, and this is not guaranteed protection: a trade may complete before a check. Incoming Robux is valued after Roblox's 30% fee.
The API proxies public item values and projected flags from Rolimon's, caching them for two minutes. It sends only asset IDs. Trade details, Roblox cookies, authentication tokens, and trade partner identities are not sent to Purpura or Rolimon's. Cloudflare receives normal request network metadata.
The extension stores a local record of the most recent cancellation or error, including the account and trade IDs on a successful cancellation. It is overwritten by later records and can be removed by clearing extension data. Projected warnings request the viewed catalog asset ID and show Rolimon's projected flag with attribution. A missing warning is not proof that an item is safe.
Color names
Custom color names in the avatar editor are requested through the Purpura API, which proxies The Color API and caches results for one day. Only the hexadecimal color is sent. Roblox cookies and authentication headers are not forwarded, and no color request records are stored in the database. Cloudflare receives normal request network metadata.
Your IP address
Requests to the API are served by our hosting provider, Cloudflare, on our behalf. Like any web request, they carry your IP address. The API uses it to count requests and block abuse, and it is never stored with feature data, used to profile you, or used to follow you across sites. The only network address the region ledger holds is the game-server subnet described above, which is not yours.
Requests to Roblox
Purpura makes requests to Roblox endpoints as needed for extension features to function, such as fetching user profiles, game data, and thumbnails. These requests are made directly from your browser to Roblox's servers and are subject to Roblox's own privacy policy.
What is never done with your data
Personal data is not sold, rented, or shared with third parties, and it is not used for advertising or profiling. The server-region ledger does not contain your Roblox identity. Game Reviews is different: the review text you submit is intentionally published when you post a review.
Removing your data
If you stop using Purpura, disable or uninstall the extension. Delete any public reviews first if you want to remove them. Clearing local extension data removes ownership credentials and installation identifiers. Uninstalling does not delete reviews from the API.
Changes
This policy may be updated in future releases. If what Purpura collects ever changes, it will be described here and noted in the extension's changelog.