Rommayo v0.2.9 · Public Alpha

Player update: confirmed EmulatorJS Exit returns to the library/file picker. A top-left Show/Hide touch controls button hides only the virtual gamepad, keeps the original toolbar available, and remembers your choice. The button stays inside the player’s fullscreen container. Native Android host regression checks passed on Retroid Pocket 5 with synthesized inputs; the Linux candidate passed real Steam Deck Desktop Mode core boot, fullscreen, toggle, Cancel/Exit and preference checks. Gaming Mode and physical inputs remain under test.

Android handheld update: native menus move focus explicitly with D-pad keys, HAT axes and the left stick. Focus stays visible when switching input methods, and game cards remain readable inside the selection outline. Hold a direction to repeat, A opens and B returns. Platform dialogs wait for a fresh A/B press so the opening press cannot immediately close them.

The Retroid Pocket 5 owner confirmed physical D-pad menu navigation and the Recent platform filter flow: A opens, D-pad moves, a fresh A selects and B cancels. Synthesized Android navigation checks also pass on Retroid Pocket 5 and Galaxy S24 Ultra. Physical gameplay bindings still require per-core checks; menu validation does not establish gameplay compatibility.

Android security follow-up: URL normalization uses a bounded linear slash trim, and transient popup routing disables JavaScript and local file/content access explicitly. Detailed CodeQL design alerts are documented in the security review.

Security update: malformed logout Origin headers and request targets return errors instead of crashing the web companion. Android authenticated downloads reject redirects and use the system save picker so the session cookie never follows a redirect to another host. Keep the app open until the picker appears.

Steam Deck update: original Steam library art and app icons, a visible Quit app control, save-before-exit guidance, and clickable EmulatorJS toolbar controls during Deck gameplay. A labeled action menu supports touch, F10 and a standard controller (L3 + R3, D-pad, A/B). The artwork helper preserves existing shortcut IDs and controls and requires Steam to be closed.

Rommayo automatically reopens the last remembered session using cookies, preserving the theme choice. No password is stored. Expired sessions ask you to sign in again.

Install Rommayo for Android, macOS Apple Silicon or Intel, Windows, and Linux/Steam Deck. Packaged apps do not need Node.js, npm or a development server. Downloads: https://rommayo.quentinmayo.com/#downloads.

This release handles RomM’s CSRF-protected logout and adds Remember login and Log out. Android and desktop retain a checked session between app restarts; an unchecked session is cleared before the next app launch. Android: Settings → Log out. Desktop: Log out in the toolbar or application menu. Logout contacts RomM, clears local authentication even if the server is unavailable, and preserves browser-local game saves and exported files. Passwords are never stored by Rommayo. The self-hosted web edition uses browser-session cookies when unchecked; browser session-restoration settings may retain them. Its Log out control ends the current session explicitly.

Android uses native, Steam-inspired library, search, recents, details and controller settings. WebViews handle gameplay and Full RomM. Desktop uses Electron and the full RomM interface. No games, BIOS files or keys are included. Physical Steam Deck and Xbox/retro-controller gameplay testing is pending.

Mac apps are ad-hoc signed, not Apple-notarized. Windows installers are unsigned. Linux AppImages require executable permission; Steam Deck users add the AppImage as a non-Steam app with --deck. Check SHA256SUMS.txt to verify downloaded assets.

Use only content you are authorized to access. Downloads and use are at your own risk. Independent of RomM and Valve.

Website: https://rommayo.quentinmayo.com · Support: https://buymeacoffee.com/quentinmayo

Rommayo v0.2.8 · Public Alpha

Android handheld update: native menus move focus explicitly with D-pad keys, HAT axes and the left stick. Focus stays visible when switching input methods, and game cards remain readable inside the selection outline. Hold a direction to repeat, A opens and B returns. Platform dialogs wait for a fresh A/B press so the opening press cannot immediately close them.

The Retroid Pocket 5 owner confirmed physical D-pad menu navigation and the Recent platform filter flow: A opens, D-pad moves, a fresh A selects and B cancels. Synthesized Android navigation checks also pass on Retroid Pocket 5 and Galaxy S24 Ultra. Physical gameplay bindings still require per-core checks; menu validation does not establish gameplay compatibility.

Android security follow-up: URL normalization uses a bounded linear slash trim, and transient popup routing disables JavaScript and local file/content access explicitly. Detailed CodeQL design alerts are documented in the security review.

Security update: malformed logout Origin headers and request targets return errors instead of crashing the web companion. Android authenticated downloads reject redirects and use the system save picker so the session cookie never follows a redirect to another host. Keep the app open until the picker appears.

Steam Deck update: original Steam library art and app icons, a visible Quit app control, save-before-exit guidance, and clickable EmulatorJS toolbar controls during Deck gameplay. A labeled action menu supports touch, F10 and a standard controller (L3 + R3, D-pad, A/B). The artwork helper preserves existing shortcut IDs and controls and requires Steam to be closed.

Rommayo automatically reopens the last remembered session using cookies, preserving the theme choice. No password is stored. Expired sessions ask you to sign in again.

Install Rommayo for Android, macOS Apple Silicon or Intel, Windows, and Linux/Steam Deck. Packaged apps do not need Node.js, npm or a development server. Downloads: https://rommayo.quentinmayo.com/#downloads.

This release handles RomM’s CSRF-protected logout and adds Remember login and Log out. Android and desktop retain a checked session between app restarts; an unchecked session is cleared before the next app launch. Android: Settings → Log out. Desktop: Log out in the toolbar or application menu. Logout contacts RomM, clears local authentication even if the server is unavailable, and preserves browser-local game saves and exported files. Passwords are never stored by Rommayo. The self-hosted web edition uses browser-session cookies when unchecked; browser session-restoration settings may retain them. Its Log out control ends the current session explicitly.

Android uses native, Steam-inspired library, search, recents, details and controller settings. WebViews handle gameplay and Full RomM. Desktop uses Electron and the full RomM interface. No games, BIOS files or keys are included. Physical Steam Deck and Xbox/retro-controller gameplay testing is pending.

Mac apps are ad-hoc signed, not Apple-notarized. Windows installers are unsigned. Linux AppImages require executable permission; Steam Deck users add the AppImage as a non-Steam app with --deck. Check SHA256SUMS.txt to verify downloaded assets.

Use only content you are authorized to access. Downloads and use are at your own risk. Independent of RomM and Valve.

Website: https://rommayo.quentinmayo.com · Support: https://buymeacoffee.com/quentinmayo

Rommayo v0.2.7 · Public Alpha

Android security follow-up: URL normalization uses a bounded linear slash trim, and transient popup routing disables JavaScript and local file/content access explicitly. Detailed CodeQL design alerts are documented in the security review.

Security update: malformed logout Origin headers and request targets return errors instead of crashing the web companion. Android authenticated downloads reject redirects and use the system save picker so the session cookie never follows a redirect to another host. Keep the app open until the picker appears.

Steam Deck update: original Steam library art and app icons, a visible Quit app control, save-before-exit guidance, and clickable EmulatorJS toolbar controls during Deck gameplay. A labeled action menu supports touch, F10 and a standard controller (L3 + R3, D-pad, A/B). The artwork helper preserves existing shortcut IDs and controls and requires Steam to be closed.

Rommayo automatically reopens the last remembered session using cookies, preserving the theme choice. No password is stored. Expired sessions ask you to sign in again.

Install Rommayo for Android, macOS Apple Silicon or Intel, Windows, and Linux/Steam Deck. Packaged apps do not need Node.js, npm or a development server. Downloads: https://rommayo.quentinmayo.com/#downloads.

This release handles RomM’s CSRF-protected logout and adds Remember login and Log out. Android and desktop retain a checked session between app restarts; an unchecked session is cleared before the next app launch. Android: Settings → Log out. Desktop: Log out in the toolbar or application menu. Logout contacts RomM, clears local authentication even if the server is unavailable, and preserves browser-local game saves and exported files. Passwords are never stored by Rommayo. The self-hosted web edition uses browser-session cookies when unchecked; browser session-restoration settings may retain them. Its Log out control ends the current session explicitly.

Android uses native, Steam-inspired library, search, recents, details and controller settings. WebViews handle gameplay and Full RomM. Desktop uses Electron and the full RomM interface. No games, BIOS files or keys are included. Physical Steam Deck and Xbox/retro-controller gameplay testing is pending.

Mac apps are ad-hoc signed, not Apple-notarized. Windows installers are unsigned. Linux AppImages require executable permission; Steam Deck users add the AppImage as a non-Steam app with --deck. Check SHA256SUMS.txt to verify downloaded assets.

Use only content you are authorized to access. Downloads and use are at your own risk. Independent of RomM and Valve.

Website: https://rommayo.quentinmayo.com · Support: https://buymeacoffee.com/quentinmayo

Rommayo v0.2.6 · Public Alpha

Security update: malformed logout Origin headers and request targets return errors instead of crashing the web companion. Android authenticated downloads reject redirects and use the system save picker so the session cookie never follows a redirect to another host. Keep the app open until the picker appears.

Steam Deck update: original Steam library art and app icons, a visible Quit app control, save-before-exit guidance, and clickable EmulatorJS toolbar controls during Deck gameplay. A labeled action menu supports touch, F10 and a standard controller (L3 + R3, D-pad, A/B). The artwork helper preserves existing shortcut IDs and controls and requires Steam to be closed.

Rommayo automatically reopens the last remembered session using cookies, preserving the theme choice. No password is stored. Expired sessions ask you to sign in again.

Install Rommayo for Android, macOS Apple Silicon or Intel, Windows, and Linux/Steam Deck. Packaged apps do not need Node.js, npm or a development server. Downloads: https://rommayo.quentinmayo.com/#downloads.

This release handles RomM’s CSRF-protected logout and adds Remember login and Log out. Android and desktop retain a checked session between app restarts; an unchecked session is cleared before the next app launch. Android: Settings → Log out. Desktop: Log out in the toolbar or application menu. Logout contacts RomM, clears local authentication even if the server is unavailable, and preserves browser-local game saves and exported files. Passwords are never stored by Rommayo. The self-hosted web edition uses browser-session cookies when unchecked; browser session-restoration settings may retain them. Its Log out control ends the current session explicitly.

Android uses native, Steam-inspired library, search, recents, details and controller settings. WebViews handle gameplay and Full RomM. Desktop uses Electron and the full RomM interface. No games, BIOS files or keys are included. Physical Steam Deck and Xbox/retro-controller gameplay testing is pending.

Mac apps are ad-hoc signed, not Apple-notarized. Windows installers are unsigned. Linux AppImages require executable permission; Steam Deck users add the AppImage as a non-Steam app with --deck. Check SHA256SUMS.txt to verify downloaded assets.

Use only content you are authorized to access. Downloads and use are at your own risk. Independent of RomM and Valve.

Website: https://rommayo.quentinmayo.com · Support: https://buymeacoffee.com/quentinmayo

Rommayo v0.2.5 · Public Alpha

Steam Deck update: original Steam library art and app icons, a visible Quit app control, save-before-exit guidance, and clickable EmulatorJS toolbar controls during Deck gameplay. A labeled action menu supports touch, F10 and a standard controller (L3 + R3, D-pad, A/B). The artwork helper preserves existing shortcut IDs and controls and requires Steam to be closed.

Rommayo automatically reopens the last remembered session using cookies, preserving the theme choice. No password is stored. Expired sessions ask you to sign in again.

Install Rommayo for Android, macOS Apple Silicon or Intel, Windows, and Linux/Steam Deck. Packaged apps do not need Node.js, npm or a development server. Downloads: https://rommayo.quentinmayo.com/#downloads.

This release handles RomM’s CSRF-protected logout and adds Remember login and Log out. Android and desktop retain a checked session between app restarts; an unchecked session is cleared before the next app launch. Android: Settings → Log out. Desktop: Log out in the toolbar or application menu. Logout contacts RomM, clears local authentication even if the server is unavailable, and preserves browser-local game saves and exported files. Passwords are never stored by Rommayo. The self-hosted web edition uses browser-session cookies when unchecked; browser session-restoration settings may retain them. Its Log out control ends the current session explicitly.

Android uses native, Steam-inspired library, search, recents, details and controller settings. WebViews handle gameplay and Full RomM. Desktop uses Electron and the full RomM interface. No games, BIOS files or keys are included. Physical Steam Deck and Xbox/retro-controller gameplay testing is pending.

Mac apps are ad-hoc signed, not Apple-notarized. Windows installers are unsigned. Linux AppImages require executable permission; Steam Deck users add the AppImage as a non-Steam app with --deck. Check SHA256SUMS.txt to verify downloaded assets.

Use only content you are authorized to access. Downloads and use are at your own risk. Independent of RomM and Valve.

Website: https://rommayo.quentinmayo.com · Support: https://buymeacoffee.com/quentinmayo

Rommayo v0.2.4 · Public Alpha

Install Rommayo for Android, macOS Apple Silicon or Intel, Windows, and Linux/Steam Deck. Packaged apps do not need Node.js, npm or a development server. Downloads: https://rommayo.quentinmayo.com/#downloads.

This release handles RomM’s CSRF-protected logout and adds Remember login and Log out. Android and desktop retain a checked session between app restarts; an unchecked session is cleared before the next app launch. Android: Settings → Log out. Desktop: Log out in the toolbar or application menu. Logout contacts RomM, clears local authentication even if the server is unavailable, and preserves browser-local game saves and exported files. Passwords are never stored by Rommayo. The self-hosted web edition uses browser-session cookies when unchecked; browser session-restoration settings may retain them. Its Log out control ends the current session explicitly.

Android uses native, Steam-inspired library, search, recents, details and controller settings. WebViews handle gameplay and Full RomM. Desktop uses Electron and the full RomM interface. No games, BIOS files or keys are included. Physical Steam Deck and Xbox/retro-controller gameplay testing is pending.

Mac apps are ad-hoc signed, not Apple-notarized. Windows installers are unsigned. Linux AppImages require executable permission; Steam Deck users add the AppImage as a non-Steam app with --deck. Check SHA256SUMS.txt to verify downloaded assets.

Use only content you are authorized to access. Downloads and use are at your own risk. Independent of RomM and Valve.

Website: https://rommayo.quentinmayo.com · Support: https://buymeacoffee.com/quentinmayo

Rommayo v0.2.3 · Public Alpha

Install Rommayo for Android, macOS Apple Silicon or Intel, Windows, and Linux/Steam Deck. Packaged apps do not need Node.js, npm or a development server. Downloads: https://rommayo.quentinmayo.com/#downloads.

This release adds Remember login and Log out. Android and desktop retain a checked session between app restarts; an unchecked session is cleared before the next app launch. Android: Settings → Log out. Desktop: Log out in the toolbar or application menu. Logout contacts RomM, clears local authentication even if the server is unavailable, and preserves browser-local game saves and exported files. Passwords are never stored by Rommayo. The self-hosted web edition uses browser-session cookies when unchecked; browser session-restoration settings may retain them. Its Log out control ends the current session explicitly.

Android uses native, Steam-inspired library, search, recents, details and controller settings. WebViews handle gameplay and Full RomM. Desktop uses Electron and the full RomM interface. No games, BIOS files or keys are included. Physical Steam Deck and Xbox/retro-controller gameplay testing is pending.

Mac apps are ad-hoc signed, not Apple-notarized. Windows installers are unsigned. Linux AppImages require executable permission; Steam Deck users add the AppImage as a non-Steam app with --deck. Check SHA256SUMS.txt to verify downloaded assets.

Use only content you are authorized to access. Downloads and use are at your own risk. Independent of RomM and Valve.

Website: https://rommayo.quentinmayo.com · Support: https://buymeacoffee.com/quentinmayo

Rommayo v0.2.2 · Public Alpha

Install Rommayo for Android, macOS Apple Silicon or Intel, Windows, and Linux/Steam Deck. Packaged apps do not require Node.js, npm or development-server commands. Get the installer for your device from Assets below, or use https://rommayo.quentinmayo.com/#downloads.

This packaging update gives both Mac builds valid ad-hoc code signatures and verifies them during release. Mac apps are not Apple-notarized and Windows installers are unsigned; operating-system publisher checks can apply. Linux users make the AppImage executable. Steam Deck users add it as a non-Steam app with --deck.

Android has a native Steam-inspired library, search, platform filters, recents, details and controller settings. WebViews handle gameplay and Full RomM. Desktop uses Electron with the full RomM website. Sign in with your existing server URL, username and password. Session cookies stay on your device; passwords are not saved by the companion.

No gameplay changes are included in this packaging patch. Android retains the previous fix preserving local game saves when forgetting login sessions. Intel Mac sign-in was checked under Rosetta; physical Intel, Steam Deck, Xbox/retro-controller gameplay and universal core compatibility remain pending. See the compatibility matrix in the repository.

All packages have SHA-256 checksums in SHA256SUMS.txt. No ROMs, BIOS files, keys or games are included. No third-party ROM sourcing/download support. Use only content you are authorized to access; downloads and use are at your own risk. Rommayo is independent of RomM and Valve.

Website: https://rommayo.quentinmayo.com · Support: https://buymeacoffee.com/quentinmayo

Rommayo v0.2.1 · Public Alpha

Install Rommayo and connect to your existing RomM server. No Node.js, npm or development server is required for the packaged apps.

Device	Direct download
Android 10+	Signed APK
macOS Apple Silicon	M-series DMG
macOS Intel	Intel DMG
Windows x64	Windows installer
Linux x64 / Steam Deck	AppImage

SHA-256 checksums · Website & setup · Support the developers ☕

Open the Mac DMG or Windows installer. On Linux, make the AppImage executable. Steam Deck users can add it as a non-Steam game with --deck launch options. Desktop packages are unsigned and macOS apps are not notarized; operating-system publisher checks can apply.

Android includes a native Steam-inspired library, cover grids, search, platform filters, recents, details, settings and controller navigation. WebViews handle gameplay and Full RomM. Desktop uses Electron with the full RomM website and an optional blue theme. Sign in with your server URL, username and password; passwords are not saved by the companion, and session cookies stay on your device.

v0.2.1 preserves Android's local game saves when forgetting login sessions. Desktop asks before leaving a running game or unsaved page. The Intel Mac asset was added alongside the existing v0.2.1 binaries and its sign-in UI was checked under Rosetta; physical Intel hardware testing remains pending. Existing platform binaries are unchanged.

This is a public alpha. Physical Steam Deck/controller testing, provider-specific SSO and all-platform gameplay certification remain open. See the compatibility matrix. No ROMs, BIOS files, decryption keys or games are included; no third-party ROM sourcing/download support is provided. Use only content you are authorized to access; transfers and use are at your own risk.

Rommayo v0.2.0 · Public Alpha

Your whole RomM, wherever you press play.

The public alpha includes Android, Linux/Steam Deck, Windows, macOS Apple Silicon, and a self-hosted web companion. Connect with your RomM server URL, username and password, then use the full RomM website with an optional Steam-inspired blue theme. Passwords are not saved by the wrapper; native/browser cookies keep your session.

Desktop navigation now shows a Stay / Leave confirmation when a running game or unsaved page blocks navigation, instead of silently ignoring Home or Reload.

• Android: install the signed APK on Android 10+. Remove any earlier debug installation before switching to the release signing identity.
• Steam Deck/Linux: use the x64 AppImage; add it as a non-Steam game with --deck launch options.
• Windows/macOS: initial desktop packages are unsigned; normal OS publisher/security prompts may apply.
• Web: see docs/web.md in the source for Node.js and Docker setup.

This is a public alpha, not universal emulator certification. Physical Steam Deck/controller testing, provider-specific SSO flows and all-platform gameplay certification remain open. Check docs/compatibility.md for tested coverage and browser limitations.

No ROMs, BIOS files, decryption keys or games are included. No third-party ROM sourcing/download support is provided. Use only content you are authorized to access; transfers and use are at your own risk.