24 hour notes
Notes are short updates shared with your verified followers and accepted chat connections. A chat connection's notes appear only while their accepted conversation remains in your inbox. Pending requests do not qualify. Blocked accounts cannot view each other's notes. Notes stop appearing after 24 hours; expired records are removed by the scheduled cleanup, while infrastructure backups may retain earlier copies under their backup retention. You can replace or remove your own note. Notes are stored as text, are not end to end encrypted, and are not sent to AI services. Messaging someone from a note still follows the usual message request and block rules.
Direct messages
Direct messaging is in a staged rollout. Message text is encrypted on Larziy servers, not end to end encrypted. When media sharing is available, selected files support PNG, JPG, MP3 and MP4, with browser voice recordings handled separately. All attachments are limited to 10 MB per file, scanned for malware and normalized in an isolated Vercel environment before being stored privately with encryption. Files that cannot pass these checks are not delivered. Private conversations and attachments are not sent to AI services or Larziy Assistant, and there is no automatic profanity filter. Participants can block accounts and report concerns. Messages and their attachments are removed from active storage during daily cleanup once they are more than 30 days old, from both participants' conversations. A newer reply remains but loses its expired quoted message. Failed cleanup is retried; infrastructure backups may retain earlier copies under their separate schedules, and Larziy cannot remove copies a participant has downloaded. Conversation membership, request consent, blocks, quota records and reports may remain separately to operate messaging and prevent abuse. Public profile moderation is separate. The planned owner access process requires a recorded reason and access audit; private message content review is not enabled.
Profile visibility
Verified public profiles may display Roblox username, display name, avatar, badges, creator types, showcases, links, follower counts, and other information creators choose to add.
Roblox data usage
Larziy uses Roblox identifiers and public Roblox data to verify ownership, refresh usernames and avatars, sync eligible showcases, and keep public profile URLs accurate.
Uploaded media
Profile banners, backgrounds, and custom showcase images are checked automatically before publication. Google Gemini may process a normalized copy of the image to identify safety risks. For supported animated GIF banners and backgrounds, every decoded frame of the normalized animation is sent for review; animation is preserved only after approval. Images with uncertain or prohibited signals stay private until they are reviewed, rejected, or approved. Profile audio is stored separately and is not part of this image review system.
Player post images
A player-finder post may include one PNG or JPG image. When you choose Check image, Larziy validates and normalizes the file and sends that image to Google Gemini for a structured safety check. Only an approved image can be attached to a published post. Uncertain results, rejected images and failed checks cannot be published, and do not automatically ban your account. Uploaded image files are stored privately; approved images are served only while their post is visible and active. Unused uploads expire after 30 minutes. Files from closed or expired posts become eligible for scheduled cleanup after one day; failed deletions are retried. Limited upload identifiers, hashes and safety decisions may remain for quota enforcement and abuse prevention. Copies someone has already downloaded and infrastructure backups are outside this immediate cleanup.
Media review and retention
Automated image decisions may temporarily prevent publication or restrict new media uploads. Authorized Larziy admins can review disputed decisions, and creators may request one review of an automatic decision. Allowed quarantine copies are deleted after publication. Rejected files are normally deleted after the appeal window and a short safety period, while pending files remain until a decision. Moderation metadata may be kept longer to prevent abuse and preserve an audit record.
Public text review
Larziy normalizes public profile text to detect disguised abuse and may send the submitted text to Google Gemini for a structured safety assessment. The final publication decision follows Larziy rules and may be reviewed by an authorized admin. Previous public text remains visible while a new value is waiting for review. Rejected text is normally removed after 30 days, while limited moderation records, appeals, and confirmed strike history may be retained longer for safety and audit purposes.
Analytics
Larziy may track profile views, follows, shares, and outbound clicks for analytics that only the profile owner can see. Private analytics are not shown on public profiles.
Reports
Authenticated users can submit reports about Larziy profiles. Reports may include the reporter profile, reported profile, category, description, and an optional evidence URL. Reports are used for safety and moderation, restricted to authorized admins, and may be retained for abuse prevention and audit records.
Sessions and security
Larziy uses an essential, secure owner session cookie to keep verified owners signed in. For account protection and abuse investigations, Larziy records meaningful security events, masked network addresses, approximate country or region data supplied by trusted infrastructure, browser and device summaries, and privacy preserving session identifiers. Larziy does not record passwords, cookie values, authorization tokens, or precise location. Reversible network addresses are encrypted and retained for no more than 30 days when configured. Only the owner can reveal a retained address, must provide a reason, and every reveal is audited. Masked security events normally expire after 90 days unless they are required for an active investigation.
Warnings and restrictions
Larziy stores private warning and account restriction records when moderation is required. These records include the reason shown to the user, dates, status, and private administrative notes. Moderation history is not displayed on public profiles.
Larziy Assistant
When you use Larziy Assistant, your messages and a limited set of relevant public profile details may be sent to Google Gemini to generate a response. Larziy does not send passwords, cookies, authentication tokens, IP addresses, private reports, admin notes, or security session data to the model. Conversations are kept for up to 30 days unless you clear them sooner. Limited usage records may be retained for 90 days for quotas, reliability, and abuse prevention. Assistant conversations are not sold.
Third party services
Larziy uses infrastructure and APIs including Supabase, Vercel, Roblox services, Google Gemini, and optional Spotify embeds. Google Gemini may process Assistant messages and normalized profile or player-post images for the purposes described in this policy. These services process data according to their own policies.
Contact and changes
Questions about privacy can be sent through the Contact page. Larziy may update this policy as the platform changes.
