Privacy Policy

1. Information we collect

We may collect the following categories of information:

• Account information: email address, username, avatar, password hash, registration date, email verification status, password reset metadata, and account settings.
• Public profile information: username, avatar, bio, published scripts, likes, and other profile information you choose to make public.
• User-generated content: script titles, descriptions, Lua code, thumbnails, tags, selected game/place, changelog, comments, likes, votes, bookmarks, reports, complaints, and related metadata.
• Technical information: IP address, user agent, browser type, device information, operating system, language, approximate location, pages visited, referral source, timestamps, and security logs.
• Analytics information: events such as page views, clicks, scroll depth, form interactions, search queries, sessions, and other usage data.
• Advertising and cookie information: cookies, local storage identifiers, advertising identifiers, ad impressions, frequency-capping signals, and anti-fraud signals.
• Support and moderation information: messages sent to support, abuse reports, copyright complaints, moderation actions, appeals, and related correspondence.

We do not store your plain-text password. Passwords are stored as password hashes.

We do not keep a separate user login history as a regular account feature. However, technical logs may still include security-relevant timestamps, IP addresses, user agents, and related events when needed for site security and abuse prevention.

2. How we use information

We use information to:

• create, verify, and manage user accounts;
• provide login, email verification, password reset, and profile features;
• allow users to publish, edit, delete, search, like, bookmark, report, and comment on scripts;
• display public profiles, published scripts, authorship information, ratings, views, and other public metadata;
• detect spam, malware, phishing, account abuse, policy violations, and other harmful activity;
• review reports, moderate content, enforce our Terms and Content Policy, and protect users;
• improve search, recommendations, site performance, design, and user experience;
• measure traffic, page views, clicks, scroll behavior, form interactions, and site usage;
• display, measure, personalize where permitted, and prevent fraud in advertising;
• respond to support, abuse, copyright, and account deletion requests;
• comply with legal obligations and protect our legal rights.

3. Public user content

Bobloscript includes user-generated content. Information that you publish may become public, including your username, avatar, bio, published scripts, script metadata, comments, likes, and other public profile details.

Do not publish private information, personal data, passwords, tokens, cookie values, session identifiers, API keys, or confidential information. If you publish content, you are responsible for ensuring that you have the right to publish it and that it complies with our Terms, Content Policy, and applicable law.

4. Account registration, email, and OAuth

Users can register with email and password. Email verification is enabled. Password reset is available. Users may change their email address.

OAuth login may be available only for users outside Russia and may depend on third-party provider availability. If you use an OAuth provider, that provider may share basic account information with us, such as an identifier, email address, username, or avatar, depending on the provider and your settings.

Users cannot delete accounts directly from account settings. You may request account deletion by contacting support@bobloscript.com. Account deletion requests are processed within 3–7 days, unless we need to retain limited information for security, legal, abuse-prevention, copyright, or moderation purposes.

5. Yandex Metrica

We use Yandex Metrica counter ID 90512392 for analytics. Yandex Metrica may collect information about page views, sessions, traffic sources, approximate location, device and browser information, clicks, scroll behavior, form interactions, and other usage events.

The following Yandex Metrica features are enabled:

• Webvisor;
• click map;
• scroll map;
• form tracking.

E-commerce tracking is disabled.

For users in the European Economic Area, the United Kingdom, and Switzerland, Yandex Metrica and Webvisor are not started before the user gives the required analytics consent. We also use masking or exclusion settings where appropriate to avoid intentionally recording sensitive form input such as passwords.

6. Advertising partners

We use or may use advertising partners to display ads, measure ad performance, prevent fraud, limit ad frequency, and personalize ads where legally permitted and consented to.

Adfinity.pro

We use Adfinity.pro to display advertising, including sticky, catfish, banner, and native ad formats. Adfinity.pro and its partners may process cookies, IP addresses, browser and device data, advertising identifiers, page context, ad interaction data, and anti-fraud signals. Adfinity.pro may use personalized advertising where legally permitted and where required consent has been obtained.

Adfinity.pro Privacy Policy: https://adfinity.pro/privacy-policy

Google AdSense

We plan to use Google AdSense, including Auto Ads. Google and its partners may use cookies or similar technologies to serve ads, measure ads, prevent fraud, and personalize ads where permitted.

For users in the European Economic Area, the United Kingdom, and Switzerland, Google AdSense is not started before the required advertising consent. Personalized ads are used only after consent where consent is required.

Users may manage or opt out of personalized ads through Google ad settings and browser controls where available.

7. Cookies and local storage

We use cookies, local storage, and similar technologies for:

• essential functions such as login, security, sessions, and preferences;
• analytics, including Yandex Metrica;
• advertising, including Adfinity.pro and Google AdSense;
• fraud prevention, frequency capping, and performance measurement;
• UI preferences such as theme or interface settings.

For users in the European Economic Area, the United Kingdom, and Switzerland, we show a cookie banner and do not start Yandex Metrica, Webvisor, Adfinity.pro, or Google AdSense before the required consent is given.

For more information, see our Cookie Policy.

8. Sharing of information

We may share information with:

• service providers that help us host, secure, maintain, analyze, and operate the site;
• analytics providers such as Yandex Metrica;
• advertising partners such as Adfinity.pro and Google AdSense;
• moderation, security, and anti-abuse tools;
• legal, regulatory, or law-enforcement authorities when required by law or necessary to protect rights, users, and the service;
• a successor operator if the site is transferred, sold, reorganized, or merged.

We do not sell user account databases as a standalone product. Advertising partners may process data for advertising as described in this Privacy Policy and our Cookie Policy.

9. Data retention

We retain information only as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Typical retention periods:

• account data: until the account is deleted or no longer needed;
• published content: until deleted by the user or removed by moderation;
• technical logs: up to 12 months;
• reports and moderation records: up to 24 months;
• backups: up to 90 days;
• copyright and legal records: as long as needed to handle claims, disputes, repeat infringement, or legal obligations.

Some information may remain in backups or moderation/legal records for a limited time after deletion.

10. Security

We use reasonable technical and organizational measures to protect user information, including password hashing and access controls. No online service can guarantee absolute security. Users are responsible for keeping account credentials secure and for reporting suspicious activity.

11. International processing

Bobloscript has a worldwide audience and is operated from Russia. Your information may be processed in Russia and other countries where our service providers, analytics providers, advertising partners, hosting providers, or infrastructure providers operate. These countries may have data protection laws different from those in your country.

12. Your choices and rights

Depending on your location, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. You may also have the right to complain to a data protection authority.

To make a request, contact support@bobloscript.com. We may need to verify your identity before processing requests.

13. Children

Bobloscript is not intended for children under 14. Users under 18 should use the site only with permission from a parent or legal guardian. If you believe a child under 14 has provided personal information, contact us at support@bobloscript.com.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date. Continued use of the site after updates means that you accept the updated policy, where permitted by law.

15. Contact

For privacy, account deletion, abuse, copyright, or support requests, contact:

Email: support@bobloscript.com