Data Use Policy

What this covers

This policy sets out how shipLua uses the data you and your games give it. You accept it with the terms of service. The privacy policy lists everything we collect and how long we keep it.

We use your data to run shipLua for you

Your studio’s data is used to give your workspace its dashboards, checks, alerts, AI answers and plans, billing and support, and to keep the service secure. Members of your workspace see it according to their roles. Workspaces are kept apart in the code and the database.

Our team can look at account and workspace records only to give support you ask for, to investigate abuse or security problems, or when the law requires it. Changes made through admin tools are recorded in the activity log.

We do not sell it or use it for ads

We do not sell your data, share it for advertising, or show it to other studios. Comparisons with other games use only public Roblox information and Roblox’s own benchmarks.

Your players’ data

• shipLua processes player data from the SDK and feedback form only for the developer who installed it, to show that developer their analytics.
• Players are pseudonymous: a keyed hash of the Roblox user ID that differs per experience. Raw Roblox IDs and names are not stored.
• While a workspace is open, raw events are deleted after 90 days and player feedback after 30 days by default, or on the schedule the developer sets (7 to 365 days).
• We never use player data for advertising, to profile individual players, or for any other customer.

Processing terms for player data

For player data, the developer who installs the SDK or feedback form controls the data and shipLua processes it for them. Where data protection law (such as the GDPR or UK GDPR) needs a processing agreement, these commitments are that agreement:

• We process player data only to provide shipLua to the developer, following the settings they choose, unless the law requires otherwise (we will tell them if it does, unless the law forbids it).
• Only people who need it to run shipLua can access it, and they are bound to keep it confidential.
• We protect it with the measures in the privacy policy: encryption in transit, per-experience pseudonymous keys, workspace separation and access logging.
• Our sub-processors are Render (hosting, United States) and, only for features the developer uses, Anthropic (AI). We update the list on this page before adding or replacing one, and developers can object by stopping use of the SDK.
• We help developers answer players’ requests to see or delete their data, and with security or impact assessments where needed.
• We tell the developer without undue delay if we learn of a breach affecting their players’ data.
• When the developer asks us at support@shiplua.com, we delete its player data within 30 days, except copies in short-lived backups. Removing an experience or closing a workspace hides the data but does not erase it yet. While a workspace is open, raw events expire after 90 days.
• We give developers the information needed to show these commitments are met and answer reasonable questions about them.
• Transfers to the United States are covered by the safeguards described in the privacy policy.

Scripts and place files

Uploaded place files and scripts sent from the Studio plugin are read in memory and not kept; only the findings and short masked excerpts are saved, plus, for AI fix suggestions, each proposed edit with the original lines it replaces. Scripts sent for AI review or fix suggestions are encrypted until the job runs and erased when it ends.

AI

• AI features send only the request and the studio data needed to answer it to Anthropic, which processes it for us. Under Anthropic’s commercial terms, API data is not used to train its models by default.
• shipLua never adds your password, your Roblox connection tokens, the API keys you give us or payment details to prompts. Questions you type and scripts you send go as written, after common credential formats are masked in scripts, so keep secrets out of what you send.
• We do not train AI models on your data.
• With your own Anthropic key in Studio, the key and the conversation go straight to Anthropic and never reach shipLua.
• AI proposes; people approve. AI never changes your game or your Roblox settings without the approval mode you chose.

AI improvement (optional, off by default)

Separately from accepting this policy, you can turn on AI improvement in Settings. If you do, shipLua may keep your AI investigations (question, tools used, answer, your feedback and what you decided) to improve its own prompts, examples and search. Player data is not included. Capture is not running yet; if you turn it on now, it applies once it ships. You can turn it off at any time: new capture stops, and captures we still hold are removed when you opt out or delete your account. Improvements already made from earlier captures cannot be undone.

Deletion

You can delete your account in Settings, and developers control how long player data is kept. Activity log entries and acceptance records are kept as security and legal records. Details are in the privacy policy.

Contact

Questions about how we use data: email support@shiplua.com or use the contact page.