Privacy Policy

This Privacy Policy (the “Policy”) describes the manner in which getlava (“getlava,” “we,” “us,” or “our”) collects, receives, processes, stores, uses, discloses, retains, and otherwise handles information in connection with your access to and use of the website located at getlava.cc and all associated services, subdomains, application programming interfaces, loader scripts, key-management systems, and integrations (collectively, the “Service”). By accessing or using the Service, you acknowledge that you have read and understood this Policy and you consent to the collection, processing, and use of your information as described herein and as further described in our Terms of Service, into which this Policy is incorporated by reference. If you do not agree, you must discontinue use of the Service.

1. Scope and Consent

This Policy applies to the getlava website, loader, key system, game scripts, administration tools, and related APIs. Necessary processing used to authenticate access, fulfill purchases, maintain security, or provide a feature you request occurs as part of operating the Service. Optional website analytics require your affirmative choice in the consent prompt. In-game diagnostic telemetry begins only after the loader displays its notice and you choose to continue. Where applicable, we rely on consent, performance of a contract, legal obligations, and legitimate interests as the relevant legal bases for processing.

2. Categories of Information We Collect

We collect information required to provide and secure the Service, including Key and device-binding records, payment and entitlement records such as customer, checkout, subscription, renewal, cancellation, refund, and expiration identifiers and timestamps, purchase email addresses, Roblox user identifiers for in-game purchases, Discord linkage data, security logs, and request metadata. Payment card details are collected and handled by Stripe or the applicable platform, not stored by getlava. If you allow diagnostic telemetry, we also collect: (a) in-game identity, including Roblox username, display name and user ID; (b) pseudonymous identifiers, consisting of one-way hashes of the HWID, Key, session token, and network address rather than those raw values in the telemetry tables; (c) technical context, including country, timezone, executor, platform, device category, browser user agent, screen class, game, universe, place, job, approximate ping and frame rate; (d) usage events, such as page views and selected buttons or features, without form values; and (e) diagnostic errors, including the error message, stack trace, time, game, and associated session context. Website telemetry does not create a hardware fingerprint and does not read form contents, clipboard contents, or raw Keys.

3. How and Why We Use Information

We use the information we collect for any lawful purpose, including without limitation to: issue, validate, bind, lock, reset, throttle, expire, or revoke Keys; bind Premium Keys to a single device via HWID; detect, investigate, prevent, and respond to fraud, sharing, resale, automation, circumvention, chargebacks, and other abuse; process and reconcile payments and entitlements; route, geo-target, optimize, and verify completion of advertising and link-monetization gateways; verify entitlements and assign or revoke Discord roles; operate, secure, maintain, debug, and improve the Service; enforce our Terms of Service; comply with legal obligations and respond to lawful requests; and conduct analytics and business operations. You acknowledge and agree that we may collect and use whatever information we reasonably determine necessary or useful for these purposes.

4. Cookies, Local Storage, and Similar Technologies

We use strictly necessary cookies or local storage for authentication, payment and key-system progress, security, and your privacy choice. Optional website analytics start only after you select “allow analytics” in the consent prompt. Selecting “necessary only” prevents the optional website telemetry session from being created. You may clear local storage to reset the choice; the prompt will be shown again. Necessary storage may still be used where required to deliver a feature you request.

5. Disclosure of Information

We may disclose, share, or transfer information: (a) to Third-Party Services and processors that perform functions on our behalf, including Stripe, Inc. (payment processing), Cloudflare, Inc. (hosting, content delivery, and security), Discord (account linkage and role management), and advertising or link-monetization providers (free-Key routing); (b) to comply with applicable law, regulation, legal process, or enforceable governmental or platform request; (c) to enforce our Terms, protect our rights, property, or safety, or those of our Users or the public, and to investigate or prevent fraud, security, or abuse; and (d) in connection with, or during negotiations of, any merger, financing, acquisition, reorganization, sale of assets, or insolvency, in which information may be transferred as a business asset.

6. Legal Basis and International Transfers

Where applicable, we process personal data on the bases of consent, performance of a contract, compliance with legal obligations, and our legitimate interests in operating, securing, and monetizing the Service. The Service is operated using globally distributed infrastructure, and your information may be stored and processed in jurisdictions other than your own, which may provide different levels of data protection. By using the Service, you consent to such cross-border transfer, storage, and processing.

7. Data Retention

Diagnostic session, event, and error records are retained only while reasonably useful for reliability, product analytics, support, or security review and may be aggregated or deleted periodically. Active-session status is based on recent heartbeat time and is not a claim that a person remains online after heartbeats stop. Authentication, payment, entitlement, blacklist, and fraud-prevention records may be retained longer where necessary to provide access, resolve disputes, prevent abuse, or comply with law. Pseudonymization reduces exposure but does not make a record anonymous where it can still be linked to an account or session.

8. Security

We employ reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission or storage is completely secure, and we cannot and do not guarantee the absolute security of any information. You use the Service and provide information at your own risk.

9. Your Choices and Rights

You may decline optional website analytics from the consent prompt and may end use of the in-game loader instead of consenting to its diagnostic notice. Depending on your jurisdiction, you may also have rights to request access to, correction of, deletion of, or restriction of certain personal data, or to object to certain processing. Requests may be submitted through our official Discord support channel and may require identity verification. We may retain records where necessary or permitted for security, fraud prevention, payment, entitlement, legal, or dispute-resolution purposes.

10. Children's Privacy

The Service is not directed to individuals under the age of majority in their jurisdiction or below any applicable minimum digital-consent age. We do not knowingly collect personal data from such individuals. If we become aware that we have collected such data without appropriate consent, we may delete it; however, we accept no liability arising from any User's misrepresentation of age.

11. Third-Party Services and Links

The Service interoperates with and may contain links to Third-Party Services that are governed by their own privacy policies, which we do not control and for which we assume no responsibility. We encourage you to review the privacy practices of any Third-Party Service you use in connection with the Service.

12. Changes to this Policy

We reserve the right, at any time and in our sole discretion, to modify, amend, or update this Policy. Any changes are effective upon posting of the revised Policy, and your continued use of the Service following such posting constitutes acceptance of the revised Policy. It is your responsibility to review this Policy periodically.

13. Contact

Questions regarding this Policy may be directed to us through our official Discord. This Policy constitutes the entire understanding regarding the handling of information in connection with the Service and supersedes prior representations on the subject.

Important Legal Disclaimer

getlava™ is an independent third-party service and is not related to cheating, hacking, or any violations of Roblox Terms of Service. Use of our services is at your own discretion and risk. All product names, logos, and brands are property of their respective owners.