Privacy Policy
What Lobby stores, where it lives, and how to get rid of it.
Effective 22 August 2026. Version 2.
Lobby is a Windows desktop app for Roblox players, made by Lobby in Sweden. This policy describes what the app and its server actually do, and it was written against the database schema rather than from a template.
Contact for anything in this document, including data requests: support@getlobby.cc.
The short version
- Your Roblox login cookie never leaves your computer. It is stored by the app on your own machine and is never sent to Lobby's server, never written to a log, and never included in an export.
- Lobby's server stores your Roblox identity, the things you send through Lobby, and usage statistics.
- You can download everything we hold, and you can delete your account, from Settings > Accounts.
The website, getlobby.cc
Separate from the app, and worth stating on its own because it is a different question.
The website collects nothing. It has no analytics, no tracking pixels, no advertising scripts and no cookies. It loads no fonts, scripts or images from any other company - every file comes from getlobby.cc itself. It stores nothing in your browser. The only request it makes is for a small file on the same site containing the current version number, so the download button can show it.
You do not need an account to use the website, and there is nothing to sign in to.
What Cloudflare sees. The site is hosted on Cloudflare Pages, so Cloudflare receives the ordinary connection information any web host or internet provider receives: your IP address, the page requested, the time, and your browser's user-agent string. That is a function of how the web works rather than a choice made here, and it is used to serve the page and nothing else. Their privacy terms apply to that data.
The verification link. If you open a link from a Lobby email, the address of that page carries your six-digit code. That page is marked to be excluded from search engines, sends no referrer to any other site, and makes no network request at all - the code is handed to the app on your own computer and is checked by Lobby's server, not by the website.
What is stored on your own computer only
- Your Roblox session cookie (
.ROBLOSECURITY), used to act as you on Roblox when you ask the app to - launching a game, reading your inventory, buying an item. It is held by the app's main process in the operating system's own encrypted store where available. - Your settings, layouts, themes and local caches.
- Locally tracked playtime.
What is stored on Lobby's server
Your account
- Roblox user ID, username, display name and avatar picture
- Any custom profile picture, banner and social links you set
- Your subscription tier, role and account status
- Your email address, only if you provide one
- Account creation and last-seen times
What you send through Lobby
- Messages you send and receive, including attachments
- Images you upload (profile pictures, banners, guild icons, chat images)
- Guilds you belong to or own, and invitations
- Reactions, forum posts and news votes
Usage information
- Which features are used and when, to see what is worth improving
- Days you used the app, and session lengths
- Crash reports
- Security events (sign-ins, permission changes) and failed sign-in attempts
- API endpoint usage counts
Web profiles, at getlobby.cc/u/
Lobby can publish a profile page for your account at getlobby.cc/u/<your Lobby ID>, readable by anyone who has the link without signing in or installing anything.
What it shows, and this is the whole list: your display name and username, your profile picture and banner, your verification ticks, your subscription tier, your showcased badge, your follower and following counts, your Lobby ID, the month you joined, and any social links you chose to add.
What it does not show: your email address, your linked accounts, your messages, your guilds, and what you are playing right now. Live activity is deliberately not published to the open web even though the app shows it to signed-in members.
Turning it off. Settings, General, "Public web profile". Free at every tier. Turned off, the page answers "not found" to everybody, and it answers in exactly the same way as it does for a Lobby ID that never existed - so nobody can tell from the outside whether you opted out or never existed.
Accounts that existed before 22 August 2026 start with this switched OFF and stay off unless turned on. Accounts created after that date start with it on, because a profile link that only works after its owner finds a setting is not useful for putting in a bio.
Search engines are asked not to list these pages, using both robots.txt and a noindex tag. Your Lobby profile should not appear when somebody searches your name. That is a request that mainstream search engines honour and not a technical barrier: anyone holding the link can open the page, and the link can be forwarded.
Who can see it
Other Lobby users see what the product shows them: your profile, your name and picture, your guild membership, and the messages you send them. Nothing here is sold, and there is no advertising network.
Third parties that necessarily see some data:
- Roblox - the app talks to Roblox on your behalf. Roblox's own privacy policy applies.
- Sentry - crash and error reporting.
- Spotify - only if you connect it, and only for playback control.
- Discord - only if you enable rich presence, which publishes what you are doing to Discord.
- Cloudflare - carries traffic to Lobby's server and hosts this website, so it sees the connection metadata any network provider would.
- GitHub - a fallback host for app downloads. If an update comes from there rather than from Lobby's own server, that download reveals your IP to GitHub, as any download would.
How long it is kept
These are the actual windows the server enforces:
| Data | Kept for |
|---|---|
| Security and audit events | 180 days |
| Feature usage events | 365 days |
| API endpoint counts | 365 days |
| Failed sign-in attempts | 30 days |
| Crash reports | 90 days |
| Read notifications | 90 days |
| Ended sessions | 30 days |
| A deleted account's messages | 7 days (see below) |
Your account, messages and uploads are kept until you delete them or delete your account.
Your rights
If you are in the EU or UK you have rights under the GDPR: access, correction, erasure, portability, restriction, and objection. Lobby implements the two that need machinery:
- Access and portability - Settings > Accounts > Download my data gives you a JSON file of everything the server holds about you.
- Erasure - Settings > Accounts > Delete my account. Your name, picture, links, badges and uploads are removed immediately and every session is ended. Messages you sent remain in other people's conversations for 7 days, so their chats still read, and are then deleted along with what remains of the account. This cannot be undone; signing in again creates a new account.
You do not need to write to anybody to use either of those: both are in the app and both act immediately. For anything else, including correction or a complaint, write to support@getlobby.cc. You also have the right to complain to your local supervisory authority - in Sweden, Integritetsskyddsmyndigheten (IMY).
Legal basis
- Contract - your account, messages, guilds and uploads: the app cannot work without them.
- Legitimate interests - usage statistics, crash reports and security events, to keep the app working and to detect abuse. These are minimised and time-limited as above.
- Consent - optional integrations you turn on yourself: Spotify, Discord rich presence, and giving an email address.
Children
Roblox is used by children. Lobby does not knowingly collect data from anybody under 13. If you believe a child's data is held here, write to support@getlobby.cc and it will be removed.
Where data is held
Lobby's server and database run on hardware in Sweden, inside the EEA, so your data does not leave the EEA and no additional transfer safeguards are needed.
Changes
The effective date at the top changes when this document does. Material changes are announced in the app.