Effective Date: 10 October 2026. This Privacy Policy describes how LOT (“Lua Obfuscation Tech”) processes data across the web dashboard, Build API, and Discord bot.
1. Data Processed
- Account Identity: Discord account ID and username, or Google subject identifier and display name.
- Two-Factor Security: AES-256-GCM encrypted TOTP secrets, HMAC-hashed recovery codes, and hashed session digests.
- Submitted Scripts: Raw Lua/Luau source is compiled in isolated temporary storage and wiped immediately upon build completion.
- Entitlements & Telemetry: Plan tier, daily build counts, redeemed gift key records, and anti-abuse IP logs.
2. Cookies
LOT uses strictly necessary HttpOnly, SameSite=Lax cookies for session security and OAuth/2FA state. No advertising trackers are used.
3. Account Erasure
Signed-in users can permanently delete their account, sessions, TOTP setup, API keys, and encrypted build artifacts at any time in Dashboard → Account.