Last updated: 2026
We collect information you provide directly: your username, email address (optional), and order/payment details when you check out. Payment card details are never seen or stored by us — card payments are handled entirely by Stripe, and crypto payments by NOWPayments; we only receive confirmation that a payment succeeded. Your basket and a few display preferences (like currency and theme) are kept in your browser's localStorage, but your account, orders, and license data are stored on our server.
Your information is used to process orders, maintain your account, deliver purchased scripts/licenses, and respond to support requests. We do not sell your data or share it with third parties beyond the payment processors (Stripe, NOWPayments) needed to complete a transaction.
Passwords are hashed with bcrypt before storage — we never store or have access to your plain-text password. The site enforces HTTPS, and admin accounts support optional two-factor authentication. Every admin action is recorded in an internal audit log.
We use one strictly-necessary cookie (sf.sid) to keep you signed in — it's httpOnly, sent only over HTTPS in production, and contains no tracking data. Because it's strictly necessary for the site to function (you can't stay signed in without it), it doesn't require a cookie-consent banner under UK/EU rules. We do not use analytics or advertising cookies. Your basket contents and display preferences (currency, theme) are kept in your browser's localStorage, not in a cookie.
You can view your order history at any time from your account page. To permanently delete your account and associated data (orders, licenses, wishlist, reviews), go to your account page's Security section and use "Delete account" — this is instant and irreversible. If you'd like a copy of your data instead, or have any other request, contact us using the details below.
For questions about privacy, open a ticket on the discord server with the tag "privacy".
The ScripForge Discord bot is a separate service with its own terms of service. Please refer to the Discord Bot Terms of Service and/or the Discord Bot Privacy Policy for details.
We retain your data only as long as necessary for the purposes outlined in this policy. You can delete your data at any time by clearing your browser's localStorage.
We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page.