Privacy Policy

ScriptHub ("we", "us") is a platform for sharing and discovering scripts for GrowLauncher. This policy explains what data we collect, how we use it, and your rights over it. By using ScriptHub you agree to this policy.

When you log in with Discord OAuth2 we receive and store:

• Discord user ID, display name, and username
• Email address (if granted by you in the OAuth consent screen)
• Profile avatar, banner image, and accent color
• Your GrowLauncher role membership in our Discord server

We also store content you create: uploaded scripts, reviews, purchases, and account settings you configure (bio, motto, custom username).

• Authenticate you and maintain your session (7-day cookie)
• Verify GrowLauncher role to gate access to protected scripts
• Display your public profile and script listings to other users
• Calculate reputation tiers based on downloads and ratings
• Send you optional Discord DM notifications from our bot

We do not sell or share your personal data with third parties. Your Discord ID and username are visible to other ScriptHub users on public profiles and script pages. Email is never publicly displayed.

We interact with the Discord API to verify your role status. Discord's own privacy policy governs data held on their platform.

Your account data is retained for as long as your account exists. Session tokens expire after 7 days of inactivity and are deleted automatically. You may request account deletion at any time (see §7).

We use a single session cookie to keep you logged in. No tracking or advertising cookies are used.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Withdraw consent by revoking ScriptHub's Discord OAuth access

To exercise these rights, contact us via our Discord server.

Session cookies are protected against JavaScript access and cross-site request forgery, and are only transmitted over HTTPS in production. Encrypted scripts are stored with server-side encryption. We take reasonable measures to protect your data, but no system is 100% secure — keep your device and Discord account secure to protect your session.

We may update this policy as the platform evolves. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of ScriptHub after a change constitutes acceptance.