Privacy Policy
Last updated: [DATE]. Controller: [OPERATOR LEGAL NAME], [ADDRESS]. Contact: [privacy@thescriptroad.com].
What we collect
| Data | Why | Kept |
|---|---|---|
| Username, email, password hash | your account, login, notifications | until you delete the account |
| Posts, uploads, likes, messages | running the forum | until deleted (backups up to [30] days) |
| IP address, browser, visit times | security, spam and ban-evasion checks | [IP addresses anonymised after 180 days] |
| Profile extras (devices, public tip address) | shown on your profile, if you fill them in | until you remove them |
| Your adult confirmation (the box you ticked) | keeping the forum adults-only | until you delete the account |
| A visitor's adult confirmation (your yes to the adults-only question, before you have an account) | not asking you again on every page | in your own browser only, until you clear its site data; we never receive it |
| Private prize wallet address | paying contest prizes; seen only by you and staff | until you remove it |
| Download history and "watched" state | your library filters (unseen, downloaded) | until you clear it or delete the account |
| Paid scripts: what you unlocked, from whom, until when, and the payment's crypto transaction ID or Ko-fi payment ID | unlocking what you paid for; the creator sees your username, your tier and its end date | until you delete the account [or 2 years after the unlock ends] |
| A scrambled (hashed) copy of the email you paid with on Ko-fi | matching a creator's Ko-fi payment to your account; we never keep the email itself | as above |
| Creators' payment details (public wallet addresses, Ko-fi webhook token) | showing buyers where to pay, checking payments | until you remove them |
| Your profile page: layout, chosen looks, song and web links, uploaded stickers and wallpapers | shown to other members on your profile | until you change or delete them, or delete the account |
| Who visited your profile, and when | shown only to you, the profile's owner. Staff visits aren't recorded | 30 days, at most the latest 50 visitors |
| Banner ads you saw or clicked (which banner, where, when, your account) | counting views and clicks for advertisers; they only get totals, never who | until you delete the account [or 1 year] |
Profile visits: when you open someone's profile, its owner can see your username and when you visited (each profile says so). Their visitor counter goes up by one, at most once a day. You can't visit invisibly; if you'd rather not be seen, don't open the profile.
What we never collect: your device's playback activity or script usage. The toy player runs in your browser and sends nothing about your sessions to us. We also don't collect videos you pick for analysis, which stay on your PC, or payment card details (Ko-fi handles those; we only get Ko-fi's payment notice: the amount, the name and message you gave, and your email, which we scramble). A downloaded paid script may carry a small hidden mark that identifies the buyer's account, so leaks can be traced.
Image metadata (EXIF, GPS) is stripped from uploads automatically.
Age and country
We don't check IDs or take photos. You confirm you're an adult by ticking a box, and we store only that you ticked it.
We also look at the country your connection comes from (via Cloudflare) to keep the site closed where adult content is illegal. We don't store it. Your browser also uses it to know whether to ask you about ExoClick's ads.
Who we share it with
Only service providers that run the site, under contract:
- [SERVER HOST] for servers ([COUNTRY])
- Cloudflare for DNS, the CDN, file storage and the legal pages
- SoundCloud, when a song plays on a profile. Its player loads only once music starts: on your first click on that profile (unless you switched profile music off) or when you press play
- [Amazon SES] for sending email. Emails never include post content.
- [Akismet] for spam checks, if enabled
Ads from ExoClick. Our ad partner ExoClick (ExoClick S.L., Spain) shows ads on the forum. In the EU, the EEA, the UK and Switzerland the forum asks you first, once per device, and nothing loads from ExoClick until you say yes. Everywhere else the ads show unless you switch them off (below). When they show, your browser loads them straight from ExoClick, which then sees your IP address, your browser and the page the ad is on, and sets its own cookies to count views, limit how often you see an ad and choose which ads to show. We never send ExoClick your username, email or anything else from your account. If you say no, nothing loads from ExoClick and you only see our own banners. Allow them or switch them off any time, in any country: "Ad choices" under an ExoClick ad, or ask me again. ExoClick's own policy: https://www.exoclick.com/privacy-policy/
We don't sell data. Our own banner ads are plain pictures served by the forum itself; those advertisers get no data about you, only how often their banner was shown and clicked. ExoClick's ads are the one exception (above). We disclose data to authorities only when the law requires it, and we always report child sexual abuse material.
Cookies
The forum itself only sets the cookies needed for login and security, and no analytics cookies [unless you add privacy-friendly analytics; update here]. Advertising cookies come only from ExoClick, where its ads show (see "Who we share it with": only after your yes in the EU, EEA, UK and Switzerland; you can switch them off anywhere). Your answer is kept in your browser, not on our servers.
Your rights
You can download your data (Profile → Activity → Download), edit it, or delete your account at any time. EU/UK users also have the right to object, restrict processing and complain to their data-protection authority. Contact [privacy@thescriptroad.com]. We answer within 30 days.
Changes
We'll post changes here and announce major ones on the site.