Roblox Community Standards

Security & Safeguards · Restriction or exception

Cheating and scams: no exploits for unfair advantage and no phishing links

Roblox does not allow cheating, exploits, or misleading content or schemes. The examples are using or sharing exploits to help yourself or others gain an unfair advantage anywhere on the platform, and posting misleading links for the purpose of gaining unauthorized access to others' accounts or information, on Roblox or elsewhere (phishing). Sharing an exploit is covered as well as using one, and the phishing item reaches links aimed at accounts outside Roblox.

Supporting quotations

Cheating and Scams

Roblox doesn’t allow cheating, exploits, or misleading content or schemes, including:

Using or sharing exploits to help yourself or others gain an unfair advantage anywhere on the platform

Posting misleading links for the purpose of gaining unauthorized access to others’ accounts or information, either on Roblox or elsewhere (i.e., phishing)

Qualifications & exceptions

• The phishing item is defined by purpose: links posted 'for the purpose of gaining unauthorized access'.
• The list is introduced with 'including'.

Security & Safeguards · Context

Security section: how players and creators must treat others' information and protect digital security

The Security section says everyone must feel digitally as well as physically safe, and describes how players and creators should treat others' information and protect their own and others' digital security. To help maintain a safe metaverse, Roblox does not permit the practices that follow: sharing personal information (age-dependent), directing users off-platform, misusing Roblox systems, and disruptive content and behavior.

Supporting quotations

Security

For our community to thrive, everyone must feel digitally safe as well as physically safe. This section describes how players and creators should treat others’ information and protect their own and others’ digital security.

To help maintain a safe metaverse, Roblox does not permit:

Qualifications & exceptions

• The section addresses both players and creators.

Security & Safeguards · Context

Privacy Policy, account-security help and third-party app policy are separate documents, not supplied

The section points to three other documents: the Privacy Policy for how Roblox handles personal information; a help page on keeping accounts secure, including enabling two-step verification; and a creator third-party app policy for third-party app developers and usage. None of these is part of this document, so Roblox's data handling practices and the third-party app rules are not analyzed here.

Supporting quotations

For information about how Roblox handles your personal information, please visit the

For more information on how to keep your account secure - including how to enable additional security features such as two-step verification - visit our help page

For more information for third party app developers and third party usage – visit our creator third party app policy

Not stated here

• The Privacy Policy, the account security help page and the Creator Third Party App Policy are linked but not supplied.

Security & Safeguards · Restriction or exception

External links only through Social Links (age check, 16+); other efforts to direct users off Roblox prohibited

Users may not link to, share or display URLs of any external websites or services, except by using the Social Links feature on Game, Group or User detail pages. To access Social Links, users must complete Roblox's age check process and be at least 16 years old. Any other effort to direct users off Roblox to an external website or service is prohibited. Certain Roblox-operated surfaces are treated separately (c51).

Supporting quotations

Directing Users Off-Platform

You may not link to, share, or display URLs of any external websites or services except by using the Social Links feature on the Game, Group, or User detail pages. Users must complete Roblox’s age check process and be at least 16 years old to access the social links feature.

Any other efforts to direct users off of Roblox to an external website or service are prohibited.

Qualifications & exceptions

• The Social Links exception is limited to the Game, Group or User detail pages and to users who are age-checked and at least 16.
• DevForum, Talent Hub, Partnered content on Moments and some approved Advertising content are treated separately (c51).

Not stated here

• What the age check process involves is not described here.

Cross-references

• contrast (model-proposed): 'Advertising' defined: paid promotion or off-platform calls to action; must follow the Advertising Standards — Reviewed tension: content with calls to action for specific off-platform products counts as Advertising subject to the Advertising Standards, while the Security section prohibits directing users off Roblox except via Social Links and separately treated surfaces (c51). Approved advertising delivered through Roblox systems is the stated bridge; other cases are not addressed.
• contrast (model-proposed): Commerce: Commerce Standards apply; eligible developers may sell physical products via authorized Shopify stores — Reviewed tension: eligible developers may link to authorized Shopify stores to sell physical products in their games, while the Security section bars linking to or displaying URLs of external services except through Social Links. The document does not say how the Commerce permission fits the link rule; the Commerce Standards (unsupplied) may resolve it.
• has exception (model-proposed): DevForum, Talent Hub, Partnered Moments content and approved ads may carry external links not allowed elsewhere — DevForum, Talent Hub, Partnered content on Moments and some approved advertising may carry approved external links that the general off-platform link rule forbids elsewhere.

Security & Safeguards · Restriction or exception

DevForum, Talent Hub, Partnered Moments content and approved ads may carry external links not allowed elsewhere

DevForum, Talent Hub, Partnered content on Moments, and some approved Advertising content delivered through Roblox's advertising systems are treated separately from the general off-platform link ban. They may have other links to external websites and services approved for use that are not permissible elsewhere on Roblox. This is an exception for specific Roblox-operated surfaces, and the links there must still be 'approved for use'.

Supporting quotations

DevForum, Talent Hub, Partnered content on Moments and some approved Advertising content delivered through Roblox's advertising systems are treated separately and may have other links to external websites and services approved for use that are not permissible elsewhere on Roblox.

Qualifications & exceptions

• Only 'some' approved Advertising content qualifies, and only when delivered through Roblox's advertising systems.
• The links must be approved for use; the exception does not permit arbitrary links on those surfaces.

Not stated here

• Who approves the links and by what process is not stated.

Cross-references

• exception to (model-proposed): External links only through Social Links (age check, 16+); other efforts to direct users off Roblox prohibited — DevForum, Talent Hub, Partnered content on Moments and some approved advertising may carry approved external links that the general off-platform link rule forbids elsewhere.

Security & Safeguards · Restriction or exception

Misusing Roblox systems: no bypassing safety systems, ban evasion, VPN access evasion or account takeover

Roblox maintains systems to keep users safe and secure, and prohibits attempts to bypass them, to gain unauthorized access to Roblox or to others' accounts or information, or otherwise to violate its platform security requirements. Under 'Evading Safety and Security Systems' the examples are: attempting to circumvent safety systems, including by hiding violative elements of assets or building in-game functionality for users to evade safeguards; creating or using an account to avoid enforcement action taken against another account; using VPNs to mask location in order to gain unauthorized access to Roblox, including to a specific feature or account; unauthorized attempts to access another person's account or remove their account security features; offering access to your account or soliciting access to another's for the purpose of evading enforcement or safety systems; failing to use the required PolicyService and TextChatService APIs to declare features covered by Roblox policy, such as text chat; and third-party applications or services conducting kicks and bans within a game without using the Roblox Kick and Ban API.

Supporting quotations

Misusing Roblox Systems

Roblox maintains many systems to keep our users safe and secure, and we prohibit attempts to bypass these systems, gain unauthorized access to Roblox or to others’ Roblox accounts or information, or to otherwise violate our platform security requirements, including by:

Evading Safety and Security Systems

Attempting to circumvent our safety systems, including by hiding violative elements of assets or creating in-game functionality for users to evade safeguards.

Creating or using an account to avoid enforcement action taken against another account

Using VPNs to mask your location in order to gain unauthorized access to Roblox, including to a specific feature or account

Any unauthorized attempts to access another person’s account or remove their account security features

Offering access to your Roblox account or soliciting access to another’s Roblox account for the purpose of evading enforcement action or safety systems

Failing to use required

to declare features in your game that are covered by Roblox policy, such as text chat

Third party applications and/or services conducting kicks and bans within a game without utilizing Roblox provided Kick and Ban API

Qualifications & exceptions

• The VPN item is tied to purpose: masking location 'in order to gain unauthorized access'; VPN use as such is not stated as prohibited.
• The account-access item is tied to the purpose of evading enforcement action or safety systems.
• The API items place obligations on creators (declare covered features; use the Roblox Kick and Ban API).

Not stated here

• The PolicyService and TextChatService API references are linked but not supplied.

Cross-references

• qualified by (model-proposed): Accounts, settings and controls vary by region; chat may be disabled; no video chat anywhere — Chat and voice chat may be disabled in a user's region, so the text chat feature that creators must declare through the required APIs may not exist for every user.

Security & Safeguards · Restriction or exception

Disruptive content and behavior: no disruptive bots, obfuscated or hidden scripts, false reports, or raids

Also listed under misusing Roblox systems: using bots or other automation programmed to run disruptive tasks; uploading content containing obfuscated code or hidden scripts that mislead end users or create disruptive games for them; falsely reporting other users or games, or encouraging others to do so; and invading or flooding games or groups to disrupt the game or its reputation. The automation and code items are tied to disruption or misleading users, not to automation or obfuscation as such.

Supporting quotations

Disruptive Content and Behavior

Using bots or other automation that is programmed to run disruptive tasks

Uploading content that contains obfuscated code or hidden scripts that mislead end users or create disruptive games for them

Falsely reporting other users or games or encouraging others to do so

Invading or flooding games or groups in an effort to disrupt the game or its reputation

Qualifications & exceptions

• Bots are covered when 'programmed to run disruptive tasks'.
• Obfuscated code or hidden scripts are covered when they mislead end users or create disruptive games.

Security & Safeguards · Context

Creator guidance for compliant bundles and safe text chat is linked, not supplied

The Security section closes with two pointers for creators: guidelines for creating bundles that comply with these policies, including requirements for clothing and accessories (the marketplace policy), and guidance on how to safely offer text chat in a game (migrating from legacy chat). Both are separate linked documents and are not analyzed here.

Supporting quotations

For more information about creating bundles that comply with these policies, including requirements for clothing and accessories, please review the guidelines

For more information about how to safely offer text chat in your game, please see

Not stated here

• The marketplace policy and the in-experience text chat guidance are linked but not supplied.