rucko.gg

Last updated 23 Sept 2026.

An account is a username and a password

That is the whole of it. rucko.gg does not ask for an email address, a phone number, a date of birth or your real name, and it never sends you anything, because it has nowhere to send it. The consequence is worth knowing before you sign up: a forgotten password cannot be reset by you. The only way back in is a one-time link minted by a developer, so pick a password you will not lose.

Your password itself is never stored. What is stored is a scrambled form of it (a scrypt hash and a random salt) that cannot be turned back into the password, by us or by anyone who takes the database.

What is stored

Your account: username, the usernames you have used before (held for 30 days after you leave them), the scrambled password, your bean’s colours, scale and what it wears, your profile page’s background, stickers, frame, colour and font, your bio, your privacy switches, when you signed up and roughly when you were last seen.
Friends: who you are friends with, and who asked whom.
What you make: your games’ names, descriptions, pictures, scenes and scripts, drafts included, plus the conversations you had with the genie while building them.
What you upload: pictures, sounds and models, kept with your account on them.
Where you have played: which games, how many visits, how long, and when you were last in each one.
What you do in games, for 90 days: each time you open a game’s page or play it, which game, when, for how long, what kind of device (a phone, a tablet or a computer, as your browser says), which part of this site brought you there, and what you bought and earned there. After 90 days only each game’s daily totals are kept, with nobody in them.
Votes and badges on games, and the badges you have earned.
Money: an append-only list of every slopshekel that came in or went out of your account, and a row for each checkout you start.
Sessions: one row for each device you are signed in on, with a short description of the browser (“Chrome on Windows”) and when it was last used. The token that keeps you signed in is stored only as a hash.

You can read all of it back at any time: Settings, Privacy has download my data, which hands you one JSON file of everything above. It carries no secrets and nothing belonging to anyone else.

Who can see what

Public to anyone: your username, your bean and what it wears, your profile page’s decoration, your bio, your badges, the games you have published, a strip of your friends, the day you joined, and how much you have played in total.
The makers of a game: totals for their own game, never who: how many played it each day and for how long, how many came back, from which part of the site, on what kind of device, and what was bought.
Private to you: which games you have played, your slopshekels and the money list, your sessions, your drafts, and the conversations you had with the genie.
Your choice: whether other people see you online and which game you are in, and whether strangers may ask to be your friend. Both are in Settings, Privacy; switching presence off makes you look offline to everyone but yourself.

Playing without an account

You are counted in a game’s totals without a name. Each day your address and your browser are turned into a code that stays the same for that day only; the key that makes it is thrown away two days later, so after that nobody, us included, can work out whose code it was. Your address itself is not kept.

Cookies

One cookie: the one that keeps you signed in. There is no advertising, no third-party tag and nothing that follows you to other sites. What the makers of a game are shown is counted on this site’s own servers from what they already see, with no cookie and nothing stored in your browser. Logging out throws the cookie away.

Payments

Slopshekels are bought through Stripe. Your card details are typed on Stripe’s own page and never reach this site; what comes back is only whether the payment succeeded and which pack it was for. Stripe keeps its own records under its own privacy policy.

Moderation

Developers can take a published game off the site and block an uploaded file, so that neither is served or found any more. The record of what was uploaded and by whom stays, because that is the point of a record. Nobody reads your drafts or your genie conversations for fun, but a developer with database access can technically see everything listed above: this is a small site, not a vault.

Deleting your account

Settings, Delete account does it at once, and it cannot be undone. What happens, exactly:

Your username, bio, bean and password are wiped. The account row stays behind with a name like “deleted-1234” that nobody can sign up with, so the money records stay whole.
Sessions, reset links, friendships, votes, badges, play history, everything you got from the catalog, your profile page’s decoration and in-game purchases are deleted. Records of catalog sales stay, with no name on them.
What you did in games over the last 90 days loses your name: what is left says only that someone played.
Pictures, sounds and models you uploaded are removed, and their files go unless somebody else had uploaded the same bytes; the picture on a badge you made stays with the badge, for whoever earned it. Anything the genie generated for you stays in the shared library with no name on it.
Your games are taken off the site with their pictures and their genie conversations, and their addresses are never reused.
Notes you left in the developer notebook stay, with no author.
The money list is kept without your name on it. Your slopshekels are gone; they have no cash value and cannot be paid out.
The name you leave is held for 30 days, then anyone may take it.

Take the copy of your data first if you want one: afterwards there is nothing to give you.

Adults only

rucko.gg is for people aged 18 or over, and you confirm that when you sign up. If you find an account that clearly belongs to a child, say so and it will be closed. See the terms of use.

When this changes

This page is changed as the site changes, and the date at the top moves with it. There is no mailing list to announce it on, so it is worth a look now and then if you care.

Getting in touch

rucko.gg is a small site run by the people whose accounts carry the blue tick: jimmy, builderman and rucko. There is no company, no support desk and no email address: message one of those accounts, or a developer you already know, and say what is wrong.

The report button on someone's page reaches the site's admins, who read every report. Whatever an admin does to an account, a game or someone's money is written in a log that cannot be changed afterwards, with who did it and why.