Shopkeeper for Roblox Privacy Policy
Effective September 26, 2026
Shopkeeper for Roblox never reads, stores or sends your Roblox login cookie (.ROBLOSECURITY), your password or any other Roblox account data. It has no server of its own and does not collect analytics. The developer does not receive any of your data. The only outside service it talks to is ExtensionPay, and only to check whether you have paid for Pro.
Your Roblox login
Shopkeeper does not ask for the browser's cookies permission, so it cannot read your cookies. Roblox also marks its login cookie as HttpOnly, which means scripts on a web page cannot read it either.
Shopkeeper only runs on the Roblox Creator Hub (create.roblox.com). When you use it, it sends requests from that page to Roblox's own servers, the same servers the Creator Hub pages use. Your browser adds your normal Roblox login to those requests by itself, the same way it does when you use the Creator Hub without the extension. Shopkeeper also passes along Roblox's standard security token (called x-csrf-token), which Roblox requires for every change. That token is kept in memory while the page is open and is never saved or sent anywhere else.
What Shopkeeper reads from Roblox
When you open Shopkeeper on one of your experiences, it asks Roblox for the game passes and developer products in that experience: their IDs, names, descriptions, prices, whether they are on sale, their icons and, if you ask for them, the sales counts of the game passes. It also asks Roblox for the experience's name. It uses this information to show you the list and to build the preview of a change. It does not read your profile, friends, messages, inventory, Robux balance or anything else on your account.
When you click Apply on a preview, Shopkeeper sends the changes you approved to Roblox, one at a time. It only makes changes that you could make by hand in the Creator Hub.
What Shopkeeper stores
Shopkeeper stores the following in your browser's extension storage (in Chrome or Microsoft Edge) on your own computer:
- A history of the bulk changes you made with it: the experience ID and name, and for each item its ID, name and the old and new values that were changed. This is what makes Undo possible. It keeps the last 100 changes, and you can delete it at any time with "Clear history" in the History tab.
- Presets you save in the Create tab.
- Whether you have paid for Pro, so it does not need to check with ExtensionPay every time.
None of this is sent to the developer or to anyone else. Removing the extension deletes all of it.
Payments and Pro
Pro is sold through ExtensionPay, and payments are processed by Stripe. When you pay, you enter your email address and payment details on ExtensionPay's and Stripe's own pages, not inside the extension. Shopkeeper never sees your card details.
To know whether Pro is active, the extension keeps a random ExtensionPay key in your browser's synced extension storage and asks extensionpay.com for the status of that key. No Roblox data is ever sent to ExtensionPay. The developer can see the email address and payment status of paying users in the ExtensionPay dashboard, and uses them only to provide Pro and to answer support requests. ExtensionPay's and Stripe's own privacy policies describe how they handle your information.
Files
CSV exports are saved to your computer. CSV files and images you choose for an import are read on your computer, and the images are uploaded only to Roblox, as the icons of the items you create or update. Nothing is uploaded anywhere else.
What Shopkeeper does not do
- It does not sell, rent or share your data.
- It does not show ads or track you across websites.
- It does not run on any website other than create.roblox.com and extensionpay.com.
- It does not use your data for anything other than the bulk tools and providing Pro. This use of data follows the Chrome Web Store User Data Policy, including its Limited Use requirements, and the Microsoft Edge Add-ons developer policies.
Permissions
storage: saves the change history, your presets and your Pro status on your computer, as described above.- create.roblox.com: the extension's script runs on the Creator Hub so it can show its tools there and send the changes you approve to Roblox.
- extensionpay.com: lets ExtensionPay's payment page tell the extension that a payment has gone through.
Children
Shopkeeper does not collect personal information from anyone. It is not directed at children under 13, and payments through ExtensionPay are meant for adults or with a parent's permission.
Changes to this policy
If this policy changes, the new version will be posted on this page with a new effective date.
Contact
Questions about this policy can be sent to support@theantlerconvoy.com.