Privacy
Last updated October 6, 2026
Roamlets is a browser extension with a pet that lives on the pages you visit. It is run by Iluvatar LLC ("we"). This page says what the extension and the website keep, and what they never collect.
On your device
- Your pet (its species, name, level and progress) is stored in your browser, by the extension.
- To know whether a site is new to your pet, the extension keeps a short SHA-256 hash of each site's hostname. Hostnames are never stored in clear, and full web addresses are never stored at all.
- The extension reads a page only to decide things like "was this a long read". Page text never leaves your device.
- For your pet's home plot, the extension counts what a page is built from (how much text, and how many images, links, headings, videos, code blocks and tables) and turns the counts into materials. Only the material totals are kept, in your browser.
What the extension asks our servers
- Every install, signed in or not, fetches a public settings file from roamlets.com about every six hours (game numbers such as how fast pets grow). The request carries no identifier, so we see what any web server sees: an IP address and the browser's user agent.
- Your pet itself is not uploaded. Its progress lives only in your browser, and it does not follow you between browsers.
If you sign in
- Signing in is optional. When you do, we store your email address so we can send you sign-in links.
- Once a day, and after an update, the extension checks in. We keep a random device id the extension makes up, the browser it runs in (Chrome, Edge or Firefox), the extension version, the user agent and when it last checked in, so an install can be signed out and so we notice when something breaks.
- We never receive the sites you visit or the pages you read.
Seeing other people's roamlets
When you are signed in and a page is open and you are active on it, your roamlet can meet other people's roamlets on the same site. For that the extension sends a room id, a random id for that browsing session, and a small encrypted note. The room id is derived on your device from the site's hostname with a one-way function; the hostname and the page address are not sent. The note holds your pet's species, growth stage, path and name, and is encrypted with a key only people on that same site can derive, so we cannot read it. Others see a pet and nothing else: not your name, not your email, and not which site you are on.
- Our server holds these in memory only, never in a database or in logs. They expire within about a minute of the tab going quiet, and when you close the tab or hide your roamlet on a site, the extension tells the server to drop them at once.
- Because the one-way function is public, someone holding a room id could test guesses of popular site names against it. They cannot learn pages or sites nobody guessed.
- It never runs on addresses without a real site name (localhost, IP addresses, internal names), on sites where you have hidden your roamlet, or when you are signed out.
What we never do
- We do not sell or rent your data, to anyone.
- We do not show ads, inside the extension or over the sites you visit.
- We do not use tracking pixels or third-party advertising trackers.
Service providers
Our servers run on Amazon Web Services, our sign-in email is sent through Amazon SES, and Cloudflare carries traffic to the website. They process data only to provide those services to us.
Deleting your data
Removing the extension deletes everything it stored in your browser. To delete your account and everything on our side, email [email protected] from the address you signed in with, and we will delete it.
Children
Roamlets is not directed at children under 13, and we do not knowingly collect their information.
Changes and contact
If this policy changes, we will update this page and the date above. Questions go to [email protected]. The operator is Iluvatar LLC.