Privacy Policy

Short version: VeraScripts LLC uses account, purchase, support, site, advertising, device-installation, and (where you use it) Vera Vision diagnostic data to operate the ecosystem. We do not sell personal information. A Zen identity is used transiently to build the device-specific stream and may also be retained in restricted device-binding and flash-history records; shortened fingerprints are used in support and audit views where applicable.

Who operates VeraScripts

VeraScripts LLC, a Kentucky limited liability company, operates verascripts.com and is responsible for the information described in this policy. Privacy and business inquiries can be sent to support@verascripts.com.

What we collect

• Discord account data: Discord ID, username, display name, email, and avatar identifier supplied through Discord OAuth
• Purchase and licence data: Whop user, product, plan, membership, licence key, amount, currency, status, timestamps, refund or dispute state, billing name, payment-method type, card brand, last four digits, and country when Whop supplies them
• Website and advertising telemetry: account ID when signed in, IP address, path, request method and status, duration, browser user-agent, referrer, TikTok click and browser identifiers when present, Meta/Facebook Pixel identifiers when active, and limited event metadata for page views, sign-in, checkout, purchases, claims, support, errors, and installation
• Flash records: account, product, version or payload hash, slot, time, status, firmware/protocol details, the device identity or serial needed for hardware binding and delivery, and a shortened SHA-256 fingerprint used in support or audit views where applicable
• Support data: messages and attachments you send through Discord, email, or a human ticket. The website Vera assistant stores answer-routing metadata such as question length, selected product/version, matched topics, citations, and escalation status; it does not put the raw website question in the site-event ledger
• Vera Vision diagnostics: if you opt into or use Vera Vision, the application can observe authorized gameplay/display frames to provide its local timing and controller features. It may create local diagnostic images or bundles, and an optional cloud diagnostic upload occurs only when enabled or initiated for support. Vera Vision is separate from Zen-only scripts, which do not capture gameplay frames.
• Affiliate data: profile and Whop identity details, tracked links, attributed sales and commission snapshots, payout-onboarding status, and submitted promotional links or content

What we don’t collect

• Your full card number, CVV, bank password, or other raw payment credentials; Whop processes payment
• Gameplay or console-memory data from Zen-only scripts. Device identity and serial data are separate installation/security records described above, not gameplay data.
• Zen-only scripts do not capture gameplay frames, K/D, ranking, or console memory. Vera Vision is different: it can process authorized display frames and local diagnostics as described above.
• Keystrokes, mouse movement, or session replays

How long we keep it

• Account and active licence records are kept while needed to provide access and support
• Routine website telemetry is subject to a rolling retention process; error, security, and operational records may be retained longer when needed to investigate an incident
• Purchase, refund, dispute, affiliate, flash-delivery, and support records may be retained as needed for accounting, evidence of delivery, fraud prevention, licence enforcement, and legal obligations, including after an account is closed
• Raw Zen serial values are used transiently while building the flash stream and may be retained in restricted device-binding and flash-history records for delivery, support, abuse prevention, and audit; shortened fingerprints are used in support or audit views where applicable. Vera Vision local diagnostics remain on your device unless you initiate an optional upload; uploaded diagnostic bundles are retained only as long as needed to investigate the support issue and then deleted under our operational retention process.
• The signed website session cookie expires 30 days after it is issued
• The first-party attribution cookie may remain for up to 400 days; affiliate and guest-checkout cookies remain for up to 30 days; browser-bound OAuth cookies remain for up to 10 minutes

Who sees your data

• VeraScripts staff and systems that need it to operate the store, installer, support, security, and affiliate program
• Whop for checkout, memberships, affiliate attribution, refunds/disputes, identity checks, and payouts
• Discord for sign-in, community roles, direct messages, and support tickets handled through Discord
• Meta/Facebook and TikTok for advertising delivery and measurement when the corresponding pixels or server events are active. These providers receive only the event fields configured for the relevant campaign, which may include page/referrer, IP address, user-agent, click identifiers, product/event details, value/currency, and hashed contact or account identifiers.
• Our hosting, network, font-asset, and AI service providers, limited to the data needed to deliver those services. When you communicate with Livvy, relevant message, account, purchase, and support context may be processed to draft and deliver support

Advertising measurement and reporting

When enabled, Meta/Facebook Pixel and TikTok Pixel/Events API measure visits, checkout activity, and verified purchases connected with advertising. This may use browser or click identifiers (including TikTok’s _ttp and ttclid), page URL and referrer, IP address, browser user-agent, event and product details, purchase value and currency, and available SHA-256-hashed email, phone, or pseudonymous account identifiers. Browser and server events use matching event identifiers where configured so the provider can deduplicate the same action.

VeraScripts LLC also uses TikTok’s Business API for internal, read-only campaign reporting from the VeraScripts advertiser account. We use those reports to compare spend and delivery with first-party website activity and verified purchases. We do not manage third-party advertiser accounts through this integration and do not use it to create, edit, pause, or publish campaigns, audiences, or creative.

Your rights

To request access, correction, deletion, or a copy of your data, email support@verascripts.com with "Privacy" in the subject. We may verify your identity first. Deletion is subject to records we must or reasonably need to retain for transactions, security, disputes, licence enforcement, or law. Rights required by applicable privacy law remain available.

Cookies

VeraScripts uses these first-party cookies:

• vs_s: a signed account session, Secure, HttpOnly, SameSite=Lax, for up to 30 days
• vs_at: a random first-party attribution and journey identifier, HttpOnly and SameSite=Lax, for up to 400 days
• vs_gc: a Secure, HttpOnly guest-checkout browser identifier for up to 30 days
• vs_aff: the verified affiliate attribution code for up to 30 days
• vs_oauth_discord and vs_oauth_whop: Secure, HttpOnly browser bindings used for up to 10 minutes to protect sign-in from cross-browser OAuth replay
• ttclid: a Secure first-party copy of a valid TikTok ad click identifier for up to seven days

For advertising measurement, Meta/Facebook and TikTok may set or read their own identifiers, including TikTok’s _ttp. Each provider controls the retention of identifiers it sets. Embedded Whop checkout, Discord sign-in, Vera Vision key or diagnostic services, and externally served fonts or assets may make requests to those providers and may be governed by their own storage and privacy practices.

Changes

The “updated” date above identifies the current policy. If you disagree with a change, contact us to request an export or deletion subject to the limits described above.