About RoSignal
Product and permissions overview · Last updated September 5, 2026
RoSignal is a creation and productivity tool for Roblox creators and studios. It gives a creator one place to manage the ongoing lifecycle of the experiences they own: changing live configuration values without shipping a new build, rolling a change out gradually, sending operational messages to running servers, moderating disruptive players, scheduling routine operational work, and automating those same operations on a trigger. Analytics exist inside RoSignal only as supporting context for those decisions — the product people pay attention to is the management and automation layer.
App category
RoSignal belongs in Creation & Productivity Tools: it is a digital service used for content creation and the management of an experience's lifecycle after publish. Its primary functions write operational state to a creator's own experiences. It is not primarily a data-analysis product, and it is not a marketing, monetization, or social product.
Permissions we request, and why
openidIdentifies the creator who is signing in, so RoSignal can create and secure their workspace.
Never used to look up accounts other than the signed-in creator.
profileReads the signed-in creator's username, display name, and avatar so the workspace and audit logs show who performed each action.
Never used to collect profile data about players or other users.
universe-messaging-service:publishPublishes the creator's own operational updates — live configuration values, scheduled operational messages, and moderation commands — to the running servers of experiences the creator owns or is authorized to manage. This is the delivery channel that makes the tooling work without a code push and a full restart.
Never used to message experiences the signed-in creator does not own or manage, never used to read player data, and never used to deliver third-party or advertising content.
universe.user-restriction:readReads the existing ban list for the creator's own experience so the moderation console shows the true platform state — who is currently restricted, until when, and with what reason — instead of a separate copy that can drift out of sync.
Never read for experiences the signed-in creator does not own or manage, and never used to build profiles of players outside the creator's own moderation records.
universe.user-restriction:writeApplies and lifts bans on the creator's own experience through Roblox's official restriction API, so a ban issued in RoSignal is enforced by the platform at join time instead of relying on custom in-game code the creator has to write and maintain.
Never used to restrict players in experiences the creator does not own or manage, never applied automatically without a creator-configured rule or explicit action, and every action is recorded in an audit log with the account that performed it.
universe:readReads the name and basic metadata of experiences the creator manages, so the dashboard can show a private or friends-only experience under its real name instead of a numeric placeholder. Without it, Roblox's public API simply hides those names.
Never used to read experiences the signed-in creator does not own or manage, never used to read player data, and never used for anything beyond displaying the experience's own name to its creator.
universe.analytics:readReads an experience's first-party Roblox analytics (daily active players, sessions, session length) so the creator's dashboard can show those metrics next to the events their own game code reports — the same numbers they already see in Creator Hub.
Never used to read analytics for experiences the signed-in creator does not own or manage, never used to read data about individual players, and never sold or shared with anyone.
group:readReads the roles of a group the creator links to their own experience, so the dashboard can show the real role list and the creator can pick which role a player should hold.
Never used to read groups the signed-in creator cannot already administer, and never used to build profiles of group members.
group:writeMoves members of the creator's own linked group between roles — promoting a player who reached a milestone, ranking a whole player segment at once, or applying a rank change from a creator-configured automation. This replaces the manual, per-player rank work studios otherwise do by hand.
Never used on groups the creator does not administer, never used to change ranks at or above the creator's own rank (Roblox blocks this too), never used to post, purchase, or change group settings, and every rank change is recorded in an audit log with the account or rule that caused it.
Sign-in only requests the two identity permissions. Everything else is requested separately, from the page that needs it. The messaging publish permission is requested from the Messages, Live config or Moderation page, only when a creator chooses to push updates into their own running servers. The two user-restriction permissions are requested from the Moderation page, and only when a creator chooses to have Roblox enforce their bans — creators who never moderate are never asked for them. The two group permissions work the same way: they are requested from the Group ranks page, only when a creator chooses to manage their own group's roles from RoSignal. The universe read permission is requested from the experiences list, only when a creator chooses to fix placeholder names on private experiences they manage. The analytics permission is requested from the Analytics page, only when a creator chooses to see Roblox's first-party metrics there.
RoSignal requests no other scopes. We do not request restricted player data, we do not sell or share any data with third parties, and every authorized experience can be disconnected by the creator at any time.
How it works
Creators sign in with Roblox, add a small open listener to their experience, and manage the live lifecycle from the RoSignal dashboard. See the full product walkthrough on the How it works page.
Safety, access control, and data handling
- Owner authorization. A creator can only act on experiences returned by their own Roblox authorization.
- Role-based team access. Owner, Admin, Developer, and Viewer roles limit who can publish changes to a live experience.
- Audit logs. Every config change, message, and moderation action records who performed it and when.
- Rate limits and cooldowns. Automations enforce cooldowns, hourly run caps, and loop protection, and can be dry-run before going live.
- Data stored. Roblox account identifiers, encrypted OAuth tokens, the experiences a creator authorizes, and the configuration, schedules, and logs the creator creates. Deleting a workspace deletes this data.
Full details are in our Privacy Policy and Terms of Service.
Contact
For review questions or support, reach us on Discord at thunder_thigh or in the RoSignal Discord server. The product itself lives at rosignal.app.
