Scriptory

Privacy Policy

Last updated: March 14, 2026

1. Information We Collect

When you use Scriptory, we may collect the following information:

  • Account data: Username, email address, and password hash when you register.
  • OAuth data: Profile information (name, email, avatar) from Google, Discord, or GitHub when you sign in with a social provider.
  • Content: Scripts, comments, and images you upload.
  • Usage data: IP addresses (hashed for analytics), page views, and script downloads for trending calculations.

2. How We Use Your Information

  • To provide and maintain the platform.
  • To authenticate your identity and manage your account.
  • To calculate trending scores and display relevant content.
  • To enforce our terms of service and moderate content.
  • To send transactional emails (verification codes, moderation notices).
  • To prevent abuse through rate limiting and CAPTCHA verification.

3. Data Storage

Your data is stored on servers provided by Supabase (PostgreSQL database and file storage) and Upstash (Redis cache). Passwords are hashed using bcrypt and are never stored in plain text. IP addresses used for view/download tracking are hashed and cannot be reversed.

4. Third-Party Services

  • Cloudflare Turnstile: CAPTCHA verification to prevent abuse.
  • Resend: Transactional email delivery.
  • Paddle: Payment processing for subscriptions.
  • Google AdSense: Advertising for free-tier users.
  • Roblox API: Game data and thumbnails.

5. Cookies

We use essential cookies for authentication (session tokens). We do not use tracking cookies. Third-party services (AdSense) may set their own cookies as described in their respective privacy policies.

6. Your Rights

You have the right to:

  • Access your personal data.
  • Correct inaccurate data by updating your profile settings.
  • Request deletion of your account and associated data.
  • Export your data upon request.

To exercise these rights, contact us at support@scriptory.gg.

7. Data Retention

Account data is retained as long as your account is active. View and download tracking data older than 48 hours is automatically purged. If you delete your account, personal data is anonymized within 30 days.

8. Changes

We may update this privacy policy from time to time. Significant changes will be communicated via a notice on the platform.