Privacy Policy

Short version: we use account, purchase, support, site, and flash-delivery data to operate VeraScripts. We do not sell personal information. A Zen identity is used transiently during installation, but the flash ledger stores a shortened SHA-256 fingerprint rather than the raw serial.

What we collect

• Discord account data: Discord ID, username, display name, email, and avatar identifier supplied through Discord OAuth
• Purchase and licence data: Whop user, product, plan, membership, licence key, amount, currency, status, timestamps, refund or dispute state, billing name, payment-method type, card brand, last four digits, and country when Whop supplies them
• Website telemetry: account ID when signed in, IP address, path, request method and status, duration, browser user-agent, referrer, and limited event metadata for sign-in, checkout, claims, support, errors, and installation
• Flash records: account, product, version or payload hash, slot, time, status, firmware/protocol details, and a shortened SHA-256 fingerprint derived from the Zen identity
• Support data: messages and attachments you send through Discord, email, or a human ticket. The website Vera assistant stores answer-routing metadata such as question length, selected product/version, matched topics, citations, and escalation status; it does not put the raw website question in the site-event ledger
• Affiliate data: profile and Whop identity details, tracked links, attributed sales and commission snapshots, payout-onboarding status, and submitted promotional links or content

What we don’t collect

• Your full card number, CVV, bank password, or other raw payment credentials; Whop processes payment
• The raw Zen serial in the flash ledger. The raw device identity is used transiently to build the device-specific flash stream, then the server logs the shortened fingerprint described above
• Any data about your gameplay, K/D, ranking. The scripts run on the Zen, not on your console or PC, so we have no access to any of that
• Keystrokes, mouse movement, or session replays

How long we keep it

• Account and active licence records are kept while needed to provide access and support
• Routine website telemetry is subject to a rolling retention process; error, security, and operational records may be retained longer when needed to investigate an incident
• Purchase, refund, dispute, affiliate, flash-delivery, and support records may be retained as needed for accounting, evidence of delivery, fraud prevention, licence enforcement, and legal obligations, including after an account is closed
• The signed website session cookie expires 30 days after it is issued

Who sees your data

• VeraScripts staff and systems that need it to operate the store, installer, support, security, and affiliate program
• Whop for checkout, memberships, affiliate attribution, refunds/disputes, identity checks, and payouts
• Discord for sign-in, community roles, direct messages, and support tickets handled through Discord
• Our hosting, network, font-asset, and AI service providers, limited to the data needed to deliver those services. When you communicate with Livvy, relevant message, account, purchase, and support context may be processed to draft and deliver support

Your rights

To request access, correction, deletion, or a copy of your data, email support@verascripts.com with "Privacy" in the subject. We may verify your identity first. Deletion is subject to records we must or reasonably need to retain for transactions, security, disputes, licence enforcement, or law. Rights required by applicable privacy law remain available.

Cookies

VeraScripts sets one essential signed session cookie, vs_s. It is Secure, HttpOnly, SameSite=Lax, and expires 30 days after issue. Embedded Whop checkout, Discord sign-in, and externally served fonts or assets may make requests to those providers and may be governed by their own storage and privacy practices.

Changes

The “updated” date above identifies the current policy. If you disagree with a change, contact us to request an export or deletion subject to the limits described above.