Last reviewed: 25 September 2026
In brief
You can read this website without creating an account. We do not use advertising, visitor analytics, tracking pixels or embedded social feeds. Site search runs in your browser; the search words you type are not submitted to our search server.
Who is responsible?
Lowry Community Academies is an independent online education roleplay community on Roblox. This notice covers this website, including Staff Hub authentication. This website is operated under the name Lowry Community Academies. You can reach the community team through our Discord server. For privacy enquiries, ask how to contact the website operator privately; do not share personal information in public channels. Discord may require an account. It does not cover activity on Roblox or any separate community applications or records, which need their own privacy information where applicable.
Information used to deliver the website
When your browser requests a page or image, our hosting provider, Cloudflare, processes connection and request information. This can include your IP address, requested URL, request time, browser information and security signals. This is used to deliver the requested content and protect the service.
We do not save search histories or write visitor information to application logs. Staff Hub sign-in uses Roblox OAuth. We receive your Roblox user ID and check your group membership, role and numeric rank on the server. We do not receive your Roblox password or request your email.
Staff Hub sessions
For restricted staff access we store your Roblox user ID, group ID, role, rank, verification and expiry times, and session security values in Cloudflare Durable Objects. Sessions expire after eight hours and are deleted on logout or a failed eligibility check. Eligibility is checked on a protected request once the last check is five minutes old. Access is blocked if verification is unavailable. Temporary sign-in records expire after ten minutes. Expiry alarms remove active records; provider backups and security records may have separate retention. Roblox tokens are used temporarily to verify identity, then revocation is requested; they are not stored in sessions or sent to your browser.
Search and information you enter
Search downloads a list of public pages and matches your words on your device. Search terms stay in the current page and are not added to the address bar, cookies or browser storage by this site. Avoid entering private information into search. There are no contact, registration or payment submission forms on this website.
Purpose and lawful basis
Request information is used for website delivery and security. The operator must confirm and document the applicable UK GDPR lawful basis before finalising this notice. We do not treat visiting the site as consent to tracking or other optional processing.
Network-error reporting on the live domain
The live hosting configuration was observed sending Cloudflare Network Error Logging instructions on 25 September 2026. Compatible browsers may send diagnostic reports about network failures to Cloudflare. Disabling this optional host-level reporting remains outstanding. See the cookies policy for details.
Providers and international processing
Cloudflare provides hosting and network security. Its global infrastructure may process information outside the UK. The operator must confirm its applicable processing agreement, transfer safeguards and account settings. See Cloudflare's privacy information.
All images, fonts and scripts used by this site are local resources or system fonts. Roblox and Discord links are not embedded feeds. Choosing Staff Hub login redirects you to Roblox and causes our server to contact Roblox authentication and group APIs. Their own policies apply on their websites.
How long information is kept
Search words are held only in the current page's memory. The application does not persist them. The Cloudflare log-retention setting for this website is 24 hours, as confirmed by the website operator. This period applies to the logs covered by that setting; it does not establish a retention period for any separate Cloudflare security records or browser-held network reporting policies.
Children and young people
We do not ask visitors for their age, school, address, location or other personal details. We do not use profiling, personalised advertising or geolocation. If you need help understanding this notice, ask a trusted adult. Any future account, community or pupil service will need its own privacy assessment and appropriate notice.
Your rights and complaints
Depending on the circumstances and lawful basis, you may have rights to access and correct your personal information, request deletion or restriction, object to processing, and receive portable data. Where consent is used, you may withdraw it. These rights have conditions and exceptions.
You can complain to the Information Commissioner's Office. See our cookies policy for information about storage technologies.