Privacy

Who we are

Bronze Reborn is a fan-run website for the Roblox game Brick Bronze. It shows whether the game is up, keeps the join link working and keeps backups of save files. It is not affiliated with Nintendo, Game Freak, The Pokémon Company or Roblox.

What we store

• Save backups. When the game saves your file, the game's servers can send a copy here. Each backup holds your Roblox user ID, the save data the game keeps for you, the ID of the game it came from, when it was saved and why it was sent (for example, when you left). You don't type anything on this website for this to happen.
• Game status. Public information about the game that Roblox gives out: whether it is up, its name, player count and visits. We keep a history of up and down times.
• If you sign in with Roblox: your Roblox user ID, username, display name and the web address of your avatar picture, plus when you first and last signed in, and your sign-in session (see "Your browser" below). We use this only to show you your own backups on My Saves.
• Delete requests. If you press "Ask to delete my backups" on My Saves, we store your user ID, username and when you asked, so the team can do it.
• News posts written by the team.

We do not collect email addresses, passwords, real names or payment details. You don't need an account to use this website. Signing in is only needed to see your own backups.

Discord numbers

The member and online counts shown for the Discord server are public numbers that Discord gives out for an invite link. We don't get anything about you from Discord.

Why we keep it

Roblox sometimes takes the game down. The backups are here so your save isn't lost when that happens: when the game moves to a new place, the new game can find your latest backup and offer it to you. The status history is there so everyone can see when the game was up or down.

How long we keep it

• We keep the latest 5 versions of each save file. When a newer one arrives, the oldest is deleted.
• Once a night, a copy of the whole database is uploaded to a private Discord channel that only the team can see, so it can be restored if our server breaks. Those nightly copies include the save backups, the Roblox profile details above and delete requests, but not sign-in sessions.
• Sign-in sessions end after 30 days, or straight away when you press Sign out. Your user ID, username, display name and avatar address stay until you ask us to delete them.
• If you want your backups deleted, sign in and press "Ask to delete my backups" on My Saves, or ask us in our Discord server. The team then deletes them by hand. This doesn't touch your save on Roblox.

Who can see it

Only the team. We don't sell or share your data. Save data is only handed back to the game's own servers (which need a secret key) so they can restore your file. It is never shown publicly. The site only shows totals, like how many players have a backup. When you sign in, My Saves shows you a summary of your own backups (for example trainer name, badges, Pokédex and party). Nobody else can see yours.

Your browser

This website has no ads or analytics, and it sets no cookies unless you sign in. Signing in with Roblox uses two cookies, only for that:

• bb_oauth: set when you press "Sign in with Roblox" and removed when you come back from Roblox (it lasts at most 10 minutes). It checks that the sign-in coming back is the one your browser started.
• bb_session: keeps you signed in for 30 days. It is a random code that scripts on the page can't read (HttpOnly) and that is only sent over HTTPS. We store only a scrambled (hashed) form of it. Pressing Sign out deletes the session and the cookie.

To stop abuse, our server looks at your IP address for a short time, in memory, to limit how many requests one address can make. The page loads fonts from Google Fonts and Pokémon sprite images from GitHub (raw.githubusercontent.com), so those services see your IP address when your browser asks them for those files. When you're signed in, your avatar picture is loaded from Roblox's image servers (rbxcdn.com). The site runs behind Cloudflare.

Sign in with Roblox

You can sign in with Roblox to see your own backups. You sign in on Roblox's own page, so we never see your Roblox password. We only ask Roblox for your basic profile ("openid" and "profile"): your user ID, username, display name and avatar. Roblox also gives our server two access codes (tokens) for that. We use them once, during sign-in, to read your profile. Then we ask Roblox to cancel the long-lived one, and the short-lived one runs out by itself within 15 minutes. We don't store either of them.

Contact

Questions, or want something deleted? Ask the team in our Discord server (see the Community page).