Privacy Policy

1. Introduction

Welcome to Blazar Scripts. We respect your privacy and are committed to protecting your personal data. This Privacy Policy will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you. This policy complies with the General Data Protection Regulation (GDPR) and applicable data protection laws.

2. The Data We Collect About You

Personal data, or personal information, means any information about an individual from which that person can be identified. We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

2.1 Identity and Contact Data

• Username: The display name you choose during registration.
• Email Address: Used for account recovery, administrative notifications, and communication regarding your account.
• Password Data: We store a securely hashed version of your password. We never store or have access to your plain-text password.

2.2 Discord Integration Data

Because our delivery and support systems rely heavily on Discord, we collect the following data when you voluntarily link your Discord account via the official OAuth2 API:

• Discord User ID: A unique numerical string (e.g., 123456789012345678) used to identify you globally across Discord. This is required to send you direct messages (DMs) containing digital product downloads.
• Discord Username: Fetched temporarily to confirm the link on your dashboard.
• Guild (Server) Information: We temporarily read the list of servers you are in to verify whether you are a member of the official Blazar Scripts Discord server. We do not save your server list in our database; it is only used for a one-time verification check during the linking process.

2.3 Transaction and Technical Data

• Transaction Data: Details about the scripts you have claimed, generated download tokens, and timestamps of your requests. We do not collect payment information (like credit card numbers) as all current products are free.
• Technical Data: Internet protocol (IP) address, browser type and version, time zone setting and location, and operating system used to access our website. This data is collected primarily in server access logs to prevent DDoS attacks and fraud.

3. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Contract Performance: Where we need to perform the contract we are about to enter into or have entered into with you (e.g., providing you access to a script and sending the download link).
• Legitimate Interests: Where it is necessary for our legitimate interests (e.g., preventing fraud, ensuring network security, preventing unauthorized redistribution/leaking of scripts).
• Support Services: To process and respond to support tickets you open on our dashboard.

4. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. Account data, including your purchase history and linked Discord ID, is kept indefinitely as long as your account is active, to ensure you retain lifetime access to your scripts.

Server logs (IP addresses) are generally rotated and permanently deleted after 30 to 90 days, unless required longer for the investigation of a security incident.

5. Cookies and Local Storage

Our website utilizes minimal cookies strictly necessary for the technical operation of the platform. We use PHP Session Cookies (e.g., `PHPSESSID`) to recognize your browser and maintain your logged-in state as you navigate between pages. We do not use third-party tracking cookies, analytics cookies (such as Google Analytics), or marketing/advertising cookies.

6. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered, or disclosed. All communication between your browser and our servers is encrypted using standard SSL/TLS technology (HTTPS). Furthermore, we limit access to your personal data to those administrators who have a business need to know.

7. Third-Party Links and APIs

This website interacts directly with the Discord API (operated by Discord Inc.) for authentication and messaging. Clicking on Discord integration links or enabling OAuth2 connections may allow Discord to collect or share data about you according to their own privacy policies. We do not control Discord's privacy policy and are not responsible for their privacy statements. We encourage you to read the privacy notice of every website you visit.

8. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:

• Request access: Receive a copy of the personal data we hold about you.
• Request correction: Have any incomplete or inaccurate data we hold about you corrected.
• Request erasure (Right to be forgotten): Ask us to delete or remove personal data where there is no good reason for us continuing to process it. Please note: Deleting your account will permanently destroy your script licenses and download history.
• Object to processing: Object where we are relying on a legitimate interest.

If you wish to exercise any of the rights set out above, please contact us by opening a Support Ticket in your dashboard.

9. Changes to the Privacy Policy

We keep our privacy policy under regular review. Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you via the dashboard or our Discord server. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.