Privacy

This website

• No ads, and nothing sold to anyone. You can read every page without signing in, and browsing sets no cookies.

• Only if you sign in: one cookie is set, to keep you signed in. It holds a random token and nothing about you. Signing out deletes it.

• Visitor statistics. We use Cloudflare Web Analytics to count visits and see which pages are read. It doesn't use cookies and doesn't track you across other websites. See how Cloudflare Web Analytics works.

• Hosting. The site is served through Cloudflare, which handles every request (including your IP address) to deliver the pages and protect the site from attacks. See Cloudflare's privacy policy.

• Fonts and images are all served from this site. Your browser doesn't contact any other service to show these pages.

• Downloads come from GitHub. When you download PhasmaStrap, GitHub's privacy statement applies.

Accounts

An account is optional. PhasmaStrap works fully without one, and you only get one by choosing to sign in.

• What we keep. Your Discord user ID, your Discord display name and a link to your Discord avatar. That is everything. We never see your Discord password, your email address, your servers or your messages.

• Why. So the same account works on this site and in the app, and so we can find your account when you ask for help.

• Your account ID is a random code. It identifies your account for support without revealing who you are, which is why it is safe to paste in a public channel.

• If you link a Roblox account later, we keep your Roblox user ID and username too. Nothing else, and never your Roblox password or cookie.

• Deleting it. Ask in the Discord server and your account and everything attached to it is removed.

• Nobody else gets it. This data stays on this project's own server. It is not sold, shared or used for advertising.

Your public profile

Every account has a profile page at phasmastrap.com/u/ followed by your name. It only gathers what is already public in one place.

• What it shows. The name on your account, your avatar, roughly when you joined, and the presets and screenshots you published that were approved. If you have linked a Roblox account it shows that username; if not, your Discord name.

• What it never shows. Your account ID, your Discord or Roblox user ID, your settings backups, private share links, your friends, or what you play.

• Hiding it. Press "Hide my profile" on your account page and the page is gone for everyone. What you published still shows your name in the gallery until you remove it.

• Search engines are asked not to list profile pages.

Things you store or send while signed in

Each of these only happens with an account, and only when you use the feature.

• Settings backups. When you press Back up, or turn on automatic backups, the app uploads your settings, FastFlag profiles and custom themes, with the name of your PC so you can tell backups apart. If you choose to include everything, your friend notes and games library go with them. The newest five are kept and only you can read them.

• Shared screenshots. A screenshot you share from the app is stored with its name and your account. It appears on the screenshots page with your name once it has been looked at and approved. Remove it at any time.

• Parties. While you are in a party, its members see your name, your avatar, the game you are in and its server, so they can follow you. A party lives in the server's memory only and is gone when everyone leaves.

• Server details. When you play in a public server, the app reports that server's ID, where its datacenter is, when you joined and left, and your average frame rate. This is kept per server, not per person, and fills in the region, uptime and frame rate other players see in the server list. Private servers are never reported.

• Friendship dates. Roblox does not say when two people became friends, so when the app sees a new friend on your linked Roblox account it stores the two Roblox user IDs and the date. Signed in users can ask for the date of a friendship, and nothing else about it.

Share links and the gallery

When you copy a share link for a FastFlag profile or a crosshair, the code behind it is stored on this server so the short link can work. Publishing to the gallery is a further, deliberate step on top of that.

• What a link holds. The share code itself and the name you gave it. That is the same thing you would have pasted into a chat as a long code: the flags or the crosshair, nothing about your PC or your Roblox account.

• Who can read it. Anyone with the link. The seven characters are random, so a link is unguessable in practice, but it is not a secret: treat it the way you would treat the long code.

• Links are not listed. A link you copy stays out of the gallery unless you publish it. Nothing lists it, and nothing but the link itself finds it.

• What publishing adds. The description you type and the name on your account, both shown publicly. If you have linked a Roblox account, the gallery shows that username; if not, it shows your Discord name.

• Making a link signed out. You can, and then nothing connects it to you, and it shows no author. Publishing to the gallery does need an account, because the gallery shows who made things.

• Links that go unused expire. A link nobody ever imports is deleted after 90 days. One that has been imported, or published, is kept until you remove it.

• Taking it back. Unlist or remove anything you made at any time, from the app or your account page.

The PhasmaStrap app

Your settings, clips, screenshots and play history stay on your PC. The app connects to other services only to do what you ask of it:

• Updates: it asks api.phasmastrap.com (or GitHub, if that's unavailable) for the newest version, and downloads updates from GitHub.

• Roblox: it downloads Roblox and talks to Roblox's own services, for example for server lists, game names and thumbnails.

• Features you turn on contact the services they need, for example Discord for Rich Presence, or a location lookup when you choose to see where a server is.

• Anonymous statistics: unless you turn off "Enable sending of analytics" (Settings, Account and backup, under Privacy), the app reports installs, upgrades and uninstalls, the Roblox channel you use, failed downloads, and counts of features being used (a clip saved, a preset shared or imported, low end mode turned on), and sends its log if the app crashes. Counts only: never what was in a clip, a preset or a share code. These go to api.phasmastrap.com, this project's own server. No IP address is stored with them, and crash logs are kept only while they're useful for fixing the bug. If you are signed in, your account ID is stored alongside them so we can help when you report a problem; if you are not signed in, there is nothing to connect them to you.

• Crash reports: "Send crash reports" in the same place is off unless you turn it on. With it on, a crash sends the error, the last 200 lines of the app's log, and your Windows and PhasmaStrap versions, with your account ID if you are signed in. The log replaces your Windows user folder with a placeholder before it is sent.

• Server lists: when you open a game's server list, the app sends the IDs of the servers Roblox listed to api.phasmastrap.com to ask what is known about them. This works signed out, and nothing about you is stored with it.

Questions

Ask in the Discord server.