RomRoster
RomRoster privacy policy
Last updated: 2026-10-07
RomRoster has no account. Your devices, your game list, and your passwords never leave your own phone and network. The only thing the developer's server ever sees is the proof of a Pro purchase on Android, described below.
What stays on your device
- Your list of devices and games.
- The passwords you enter for your handhelds, kept in the phone's secure storage (iOS Keychain or Android Keystore).
What leaves your device, and where it goes
- To your own handhelds, on your own network: RomRoster connects to the devices you tap, signs in, and reads folder listings and a few small parts of game files to identify them. It never writes to those devices.
- To your other RomRoster installs: paired installs on the same Wi-Fi exchange the game list over an encrypted connection. Passwords are never sent.
- Cover art, only if you turn it on: RomRoster requests images from Nintendo's eShop image server, Steam, GameTDB, and the libretro thumbnail server. Those services see the request for a specific game's image and your IP address, as with any web request. Nothing else is sent to them.
- Purchases: handled by Apple or Google. On Android, when you buy or restore RomRoster Pro, the app sends Google's purchase token and a random install id to the developer's licence server (
kep.canonspike.com), which asks Google whether the purchase is real and returns a signed licence. The server stores the order id, the token, and the install id, to stop one purchase being shared without limit. It receives no name, no email, and nothing about your devices or games. If you never buy Pro, nothing is sent.
What RomRoster does not do
- No analytics, no advertising, no tracking, no crash reporting service.
- No selling or sharing of data.
Your choices
- Turn cover art off under More to stop all image requests.
- Remove a device to delete its list and its saved password.
- Delete the app to delete everything.