Privacy Policy
What Prova stores, why we store it, and how you can request deletion.
Last updated 10 September 2026.
Information
Prova identifies you through your Roblox account. We store the information needed to manage your licence, including your Roblox account, purchases, a secure hash of your key, and the experiences using it.
We don’t store your licence key, Roblox password, payment details, or information about your players. We also don’t use third-party analytics, scripts, or fonts. Cookies are only set when you sign in.
Who Operates Prova
Prova Services operates withprova.app and api.withprova.app. Not affiliated with Roblox Corporation. Reach us on the Prova Discord.
What We Store
Your Roblox User ID & Display Name
We use this to identify your Roblox account and link your licence to it.
While your account is linked to Prova.
A Roblox OAuth Token
It allows us to verify that you still own the required Game Pass when Roblox doesn’t make that information publicly available.
Encrypted and deleted when you unlink your Roblox account.
Your Prova Group Membership
We use this to verify that you meet the requirements to purchase and link your account.
While your account is linked to Prova.
A Secure Hash of your Licence Key
The hash lets us verify your licence without storing the original key. We keep the last four characters to help support identify the licence when needed.
While the licence exists. We don’t store the original licence key.
The Roblox Experiences Using your Licence
We record which experiences are using your licence so we can enforce the six-experience limit and manage your active experiences.
While the licence exists. This includes the experience ID, place ID, and last activity time.
Experience Ownership Information
We verify experience ownership with Roblox to make sure the licence is being used in an eligible experience.
Updated regularly to keep the information current.
Failed Licence Checks
We record failed licence checks to help detect invalid or unauthorized use.
This may include the time, experience, server ID, and reason for the failure.
Your Discord User ID (if used)
We use this to connect your Discord account to your linked Roblox account.
It is stored separately and can be deleted by unlinking your Discord account.
What We Never Store
- Your Roblox Password: Roblox handles authentication, so we never receive your password.
- Your Licence Key: we store a secure hash instead of the original key.
- Your Email Address: unless you contact us by email.
- Payment Information: purchases are processed through Roblox, and we don’t receive your payment details.
- Advertising or Tracking Data: we don’t use third-party advertising or tracking services.
- Information about players in your experiences. Our licence system doesn’t collect player data.
Cookies
We use three strictly necessary cookies, all created only when you sign in.
- prova_session
- Keeps you signed in and identifies your Roblox account. Expires after 12 hours.
- prova_oauth
- Temporary values used to secure Roblox sign-in. Deleted after 10 minutes.
- prova_csrf
- Helps protect forms from requests made by other websites.
Services We Use
Roblox handles sign-in and lets us verify your account, experience ownership, and Game Pass ownership.
Cloudflare hosts the site and stores our database.
Discord stores your Discord user ID only if you use the bot.
We don’t sell your data, share it for advertising, or send it to analytics providers.
Roblox Permissions
- openid: lets us identify your Roblox account.
- profile: lets us show your Roblox display name in the dashboard.
- user.inventory-item:read: lets us verify whether you own the required Game Pass, including when your inventory is private.
These permissions don’t let us post, join groups, or make changes to your Roblox account.
How Long We Keep Your Data
We keep your customer record, licence, and experience list while your licence is active because they are required for it to work.
We may keep records of refused licence checks to help prevent abuse. These records don’t currently have a fixed deletion schedule.
Deletion. You can request deletion through the Prova Discord using a Discord account linked to your Roblox account. We will remove your customer record, stored Roblox token, and Discord link within 30 days. Deleting your account also revokes your licence, so Prova products will stop working in your experiences.
Your Choices
- A copy of the data we hold about you.
- A correction to your data.
- Deletion of your data.
- To unlink your Discord account at any time.
Children
Prova provides development tools for people who run Roblox experiences. The service isn’t directed at children, and we don’t knowingly create customer records for anyone under 13.
Changes
If we begin storing new information, this policy will be updated and the date at the top will change.