How LAB uses your data

The short version

This page tells you what LAB keeps about you, why, and for how long.

LAB is made by Valor Studio Ltd, a company in the UK. We follow UK data protection law and the ICO Children’s Code.

• We never show you adverts.
• We never sell your data.
• We never record your screen or track every click.

We will update this page before we start collecting anything new.

Want all the detail? Read our full Privacy Policy at /privacy.

What we collect

• A LAB account ID. It is a random code we make for you, not your name.
• Your Roblox user ID, username, display name and profile picture, when you sign in. We use them to sign you in, publish your games and show your name.
• What you type to the builder, like “add a lava floor”, and what the AI writes back.
• The games you make: their settings, scripts, models, pictures and music.
• A record of each build and publish, and each saved version of your game.
• Which building blocks you add, remove or search for, and how far you got in the lessons.
• Error reports from your published games, so we can see what broke. They include players’ Roblox user IDs, not their names.
• Stats about your published games from Roblox, like visits and players.
• Usage events, like when you sign in, start a build or publish a game. They carry your LAB account ID, never your name.
• The pages you visit in LAB, and when you press Play on your game.
• For each request you type, they carry its length and a code that spots repeats, never the words.

Your Roblox sign-in, and any Roblox API key you add, are kept locked (encrypted).

We use the cookies LAB needs to sign you in.

We also set lab_sid, a cookie that groups the usage events of one visit. It runs out after 30 minutes without activity.

We do not use advertising cookies.

Why we collect it

• To run the builder and publish your games.
• To find and fix problems.
• To keep LAB safe and stop misuse.
• To learn which requests lead to working games, so we can make LAB better.

Who we share it with

We only share data with companies that help us run LAB:

• Roblox signs you in and puts your games on Roblox.
• Anthropic runs Claude, the AI that reads your requests and writes your game’s code.
• Google runs Gemini, the AI that makes 3D models, maps and pictures for your game.
• Fly.io runs the computers LAB lives on. Your account and games are stored in Amsterdam, in the EU.
• PostHog counts the usage events, so we can see where LAB works and where it gets stuck. Its servers are in the EU.

Some of these companies are based in the USA. We use legal safeguards so your data stays protected there too.

If you share a building block with everyone, other creators see your Roblox display name next to it.

We never sell your data or give it to advertisers.

How long we keep it

• Your account and your games: until you ask us to delete your account.
• That includes your builder chat and everything you typed, like world ideas and picture requests.
• It also includes the record of your builds, publishes and building blocks.
• Archiving a game only hides it. It does not delete it.
• Error reports: we keep each one for 30 days and then delete it.
• Usage events: 12 months, then they are deleted.

How to delete your data

Email privacy@valorstudio.co and ask us to delete your LAB account. Tell us your Roblox username so we can find it.

We delete your account, your games and everything you typed.

A parent or carer can ask for this for you.

You can also ask us for a copy of your data, or to fix something that is wrong. We will reply within one month.

Deleting your LAB account does not delete your Roblox account. Games you already published stay on Roblox until you remove them there.

Questions or worries

Email privacy@valorstudio.co. A parent or carer can email us too.

Not happy with our answer? You can tell the ICO, the UK’s data protection watchdog, at ico.org.uk.