PRIVACY
POLICY

Account Data: When you sign in with Roblox, we receive your Roblox user ID, display name, username, and profile picture from Roblox's OAuth 2.0 service. We do not collect passwords, payment details, or sensitive personal information beyond what Roblox provides during authentication.

Product & License Data: Lithora Studios products may collect limited technical data including license identifiers, whitelisted Place IDs, Roblox UserIds or game identifiers, usage patterns, and tamper detection signals. This data is collected solely for license enforcement and product integrity monitoring as described in Section 5 of our Terms of Service.

Usage Data: We may collect basic usage data such as pages visited and actions taken within your account portal. This is used to improve our services and is not shared with third parties for advertising purposes.

Your Roblox account information is used solely to authenticate you, manage your licenses and product access, and display your profile within the Lithora Studios platform.

Technical product data is used exclusively for license enforcement, tamper detection, and product integrity monitoring as described in our Terms of Service.

We do not use your data for advertising, marketing profiling, or sale to third parties under any circumstances.

Account data is stored securely using Supabase, a GDPR-compliant database platform. We implement industry-standard security measures to protect your data from unauthorized access, alteration, or disclosure.

Session data is stored as a signed, HTTP-only cookie on your device and expires after 7 days of inactivity. This cookie is not accessible to JavaScript and cannot be read by third-party scripts.

We do not store Roblox OAuth tokens beyond the initial authentication exchange. Access tokens are used only to retrieve your profile information and are not persisted.

Roblox: We use Roblox's OAuth 2.0 service for authentication. By signing in with Roblox, you are also subject to Roblox's own Privacy Policy and Terms of Use. We are not responsible for data practices of Roblox or any other third-party service.

Supabase: We use Supabase as our database provider. Supabase is GDPR-compliant and processes data solely on our behalf in accordance with a data processing agreement.

We do not integrate third-party advertising networks, analytics platforms, or data brokers into our services.

We use a single HTTP-only session cookie (ls_session) to keep you signed in. This cookie is not accessible to JavaScript and is cleared when you sign out or after 7 days of inactivity.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies of any kind.

Staff sessions use a separate HTTP-only cookie (ls_staff_session) under the same terms. Both cookies are cryptographically signed and cannot be forged.

Lithora Studios does not sell, rent, or trade your personal information to any third party.

We may disclose information if required by law, court order, or to protect the rights, property, or safety of Lithora Studios, its users, or the public.

In the event of a business transfer or acquisition, user data may be transferred as part of that transaction. You will be notified via a notice on our website prior to any such transfer.

We retain your account data for as long as your account is active or as needed to provide services. License and enforcement records may be retained indefinitely for the purposes of tamper detection and blacklist enforcement.

You may request deletion of your personal data at any time by contacting us via Discord or email. Upon a valid deletion request, all personally identifiable information associated with your account will be permanently removed within 30 days, except where retention is required by law or necessary for ongoing enforcement actions.

Access & Portability: You may request a copy of the personal data we hold about you at any time by contacting our support team.

Correction: If you believe any data we hold about you is inaccurate, you may request a correction through our support channels.

Deletion: You may request deletion of your account and associated personal data as described in Section 7.2. Note that certain enforcement-related records may be retained.

EEA & California Users: Users in the European Economic Area and California may have additional rights under the GDPR and CCPA respectively. Contact Lithora Studios support to exercise applicable rights. Certain data processing necessary for license enforcement cannot be opted out of while actively using our products.

Lithora Studios products are intended for users aged 13 and older in accordance with Roblox's minimum age requirements. Users under 18 require verifiable parental or guardian consent as described in our Terms of Service.

We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately and we will take steps to delete such information.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Changes will be posted at this URL with an updated revision date.

Continued use of our services after changes are posted constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.

For any privacy-related questions, data access requests, or deletion requests, contact us at hello@lithorastudios.com or through our Discord server at discord.gg/yRqXUXwr6b.

We aim to respond to all privacy-related inquiries within 14 business days.