Skip to content
Privacy

What we keep, in plain words

Last updated October 26, 2026. Questions: hello@commishy.app.

What we store

  • Your email address, to sign you in and to tell you about requests and messages on your account.
  • For developers and verified clients: your public Roblox user id, username and display name, read from Roblox's public API after you prove the account with a bio code. We never ask for a Roblox password and we don't store the bio code after it matches.
  • What you write on Commishy: your profile, portfolio links, packages, requests, messages, deal records and reviews.
  • Public Roblox data about work you add: game names, visit counts and thumbnails, fetched from Roblox when shown.
  • The waitlist: your email, whether you're hiring or a developer, and an optional Roblox username.

What we don't do

  • We don't sell your data or share it with advertisers.
  • We don't hold or move money. The deal record on a request is a written note of what you agreed; payment happens between you and the other person by the route you chose.
  • We don't read your Roblox account beyond its public profile.

Cookies

  • One cookie, for signing you in. It holds your session and nothing else. There are no advertising or tracking cookies.
  • Page analytics come from Vercel Web Analytics, which counts visits without cookies and without identifying you.

Who else touches it

  • Supabase hosts the database and sign-in. Vercel hosts the site. Resend delivers email. Anthropic processes the text you type into the Brief helper to draft a brief; it isn't used to train models.
  • Roblox provides the public account and game data shown on profiles. Commishy isn't affiliated with Roblox Corporation.

What's public

  • Developer profiles are public: name, Roblox username, headline, bio, portfolio, packages, reviews, jobs done and rehire rate.
  • Requests, messages and deal records are private to the two people on them.
  • Reviews you write appear on the developer's public profile with your name.

Deleting your account

  • You can delete your account from your dashboard at any time. It removes your profile, portfolio, packages, requests, messages and reviews. Reviews you wrote about other people are removed too.
  • Waitlist emails can be removed by writing to hello@commishy.app.

How long we keep it

  • As long as your account exists. Delete the account and it goes, apart from server logs, which roll off within 30 days, and records we must keep by law.
  • We note when you agreed to the terms, and which version, so we can show it if there's ever a dispute.

Children

  • Commishy is for people 13 and over. Under 18, a parent or guardian agrees to the terms for you and should be involved before you take or pay for a job. If we learn an account belongs to someone under 13, we remove it.

Contact

  • hello@commishy.app. The person running Commishy is based in Thailand.