Skip to main content

LuaAuth privacy policy

Last updated: 03/03/2026

This privacy policy explains how we collect, use, disclose, and protect personal information in our website, API, and scripts protected by our service. This policy does not apply to the data collected or processed by third-part services we may use, those services are governed by their own privacy policies.

Scope

This policy applies when you:

  • create or use an account with our service.
  • use any scripts protected by our service.
  • access or interact with our website or API.

Information we collect

We collect information necessary to provide, maintain, protect, and improve our service. The types of data we collect include:

For script users (end users):

  • IP address.
  • Executor fingerprint (a unique identifier), executor name, and user agent.
  • Discord identifier (where provided).
  • Basic account information when applicable (e.g. username, account ID, in-game statistics)

For developers (account holders and integrators):

  • Any user data you submit through our API.
  • Contact details you provide (email address and discord ID)
  • Any data you supply to our API endpoints

How we use your data

we will only process personal data for purposes that are compatible with the reason it was collected.

We use collected information to:

  • operate, maintain, protect, and improve the service.
  • authenticate users and protect accounts.
  • enforce our TOS and prevent abuse.

Cookies and Local Storage

We use cookies and similar local storage mechanisms to support core functionality (e.g storing API keys or session identifiers) and to improve user experience.

Third parties and disclosures

We may share information with:

  • services providers and vendors who perform services on our behalf
  • where required by law, in response to legal process, or to protect our rights and users

We may integrate with third-party platforms (such as Luraph and Discord). These platforms have their own privacy practices, please review their policies before providing information through such integrations.

Account deletion

If you choose to delete your account we will remove the personal information accociated with it from our primary production database instantly. Certain data may remain in secure backup systems for a limited retention period (typically a few months). Such backup data is retained solely for disaster recovery, legal compliance, or legitimate business purposes.

Changes to this policy

We may update this policy from time to time. We will notify you of any changes made.