Privacy Policy
Last Updated: May 2026
1. Introduction
Welcome to Zencript. We respect your privacy and are committed to protecting your personal data. This Privacy Policy details exactly how we collect, process, store, and share your information when you use our platform to discover, share, and interact with Roblox scripts, codes, and developmental blogs. By logging in or browsing Zencript, you consent to the data practices described in this document.
2. Information We Collect
To provide you with a seamless and personalized experience, we collect information across several categories:
- Account & Authentication Data: When you sign up using our Magic Link (Email), Google, or GitHub authentication, we collect your email address, primary display name, and profile picture provided by the OAuth provider. This is managed securely through Firebase Authentication.
- Profile Data: Information you voluntarily add to your Settings page, including your custom username, bio, gender, country, date of birth, and linked social media accounts.
- User-Generated Content: Any text, code, scripts, Markdown formatting, or comments you submit. We also store links to GIFs you select via our Tenor API integration.
- Analytics & Interaction Data: To power our 'Insights' feature for creators, we track post views. When you visit a post, we securely process your IP address to determine your country/region and analyze your traffic source (e.g., Discord, YouTube, Direct). This data is aggregated to help creators understand their audience.
- Device & Local Storage Data: We utilize your browser's Session Storage and Local Storage to cache game data, user profiles, and search histories. This strictly reduces database reads and provides you with a lightning-fast UI experience.
3. How We Use Your Information
Zencript does not sell your personal data. We use the information we collect strictly for operational and platform-enhancement purposes:
- Platform Functionality: To authenticate your identity, maintain your session, and allow you to seamlessly interact (like, save, comment, follow) across the site.
- Creator Insights: We aggregate view counts, interactions, and geographic data so script developers and bloggers can view their performance metrics on their dashboard.
- Security & Moderation: To enforce our Terms of Service. If a user uploads malicious scripts or violates community guidelines, we use account data and action logs to issue warnings, bans, or content removals.
- Communications: To send you strictly necessary transactional emails, such as secure Magic Login links via our email provider (Resend). We do not send marketing spam.
4. Third-Party Services and Integrations
To build a robust platform, Zencript relies on trusted third-party infrastructure. By using our platform, your data may interact with these services:
- Google Cloud & Firebase: Used for our core database (Firestore) and user authentication. They store your encrypted account details and post data.
- Bunny.net (CDN): When you upload avatars, profile banners, or post thumbnails, these files are processed and hosted on BunnyCDN's secure edge servers for rapid global delivery.
- Tenor API: Used to fetch and serve GIFs within our comment and reply sections. We only send search queries to Tenor; no personal account data is shared with them.
- Roblox API: We fetch public game metadata (thumbnails, visits, creator names) when you link a Roblox Game ID. This does not involve your personal Zencript data.
5. Data Retention and Deletion
You have full control over your content's lifecycle on Zencript:
- Content Trashing: When you delete a post, it is moved to your 'Trash'. It remains hidden from the public but is retained in our database for 30 days to allow for restoration. After 30 days, or if manually deleted from the Trash, it is permanently wiped from our servers.
- Account Deletion: You can permanently delete your account via the 'Danger Zone' in your Account Settings. Initiating this action will instantly wipe your profile, personal data, and remove identifying links to your uploaded content.
- Data Caching: Cached data on your device (SessionStorage) clears automatically when you close your browser tab or manually log out of Zencript.
6. Your Privacy Rights (GDPR & CCPA Compliance)
Depending on your location, you may have specific rights regarding your personal information. Zencript honors these global standards for all users:
- Right to Access & Rectification: You can view and edit all your personal data, including your username, bio, and social links, directly from your Profile Settings.
- Right to Erasure (Right to be Forgotten): You may delete your account and content at any time. Once deleted, it cannot be recovered.
- Right to Portability: You may request an export of the scripts and blogs you have authored. Please contact our support team to facilitate this.
- Opt-Out of Tracking: You can manage visibility settings (Public, Unlisted, Private) for your posts to limit public exposure.
7. Children's Privacy (COPPA)
Zencript is explicitly not designed for or targeted at children under the age of 13. We do not knowingly collect Personally Identifiable Information (PII) from anyone under 13. If you are a parent or guardian and believe your child has created an account and provided us with personal data, please contact us immediately. We will take swift action to permanently purge the account and associated data from our systems.
8. Policy Updates and Contact Information
We may periodically update this Privacy Policy to reflect new platform features, legal requirements, or security protocols. When significant changes occur, we will notify users via an on-site system announcement.
