Privacy Policy
At ScriptBlox, accessible from scriptblox.com, one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collected and recorded by ScriptBlox and how we use it. If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us. This Privacy Policy applies only to our online activities and is valid for visitors to our website with regards to the information that they shared and/or collect in ScriptBlox. This policy is not applicable to any information collected offline or via channels other than this website.
Consent
By using our website, you hereby consent to our Privacy Policy and agree to its terms.
Information we collect
The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information. If you contact us directly, we may receive additional information about you such as your name and email address, the contents of the message and/or attachments you may send us, and any other information you may choose to provide. When you register for an Account, we may ask for your contact information, including items such as name and email address.
How we use your information
We use the information we collect in various ways, including to:
- Provide, operate, and maintain our website
- Improve, personalize, and expand our website
- Understand and analyze how you use our website
- Develop new products, services, features, and functionality
- Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the website, and for marketing and promotional purposes
- Send you emails
- Find and prevent fraud
Log Files
ScriptBlox follows a standard procedure of using log files. These files log visitors when they visit websites. All hosting companies do this and a part of hosting services' analytics. The information collected by log files include internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is for analyzing trends, administering the site, tracking users' movement on the website, and gathering demographic information.
Abuse prevention data
To prevent abuse and fraud, we record your account activity, such as signing up, logging in, commenting, and uploading or editing scripts, together with pseudonymized network and device identifiers: your IP address and browser identifier (the value of the "visitor" cookie) are transformed with a keyed one-way hash before they are stored, and the raw values are not kept. We also store your browser's user agent and coarse network information (country and network provider), and we keep moderation records of automated and human decisions that affect your account or content, including the reasons for them. This information is retained indefinitely, not for a fixed period. It is accessible to site staff, and moderation records (including the information above) are shared with site staff through a third-party service (Discord) as part of our moderation process.
When you create an account, sign in, upload or edit a script, post or edit a comment, like or dislike a script or a comment, or report whether a script works, we check whether your connection comes from a VPN, a proxy, a hosting or datacenter provider, Tor, or a school or office network, because those cannot be used for these actions. To do this we send your IP address to proxycheck.io, which tells us whether the address belongs to such a service; proxycheck.io handles it under its own privacy policy. We keep the answer for up to one hour (for comments, likes, dislikes and reports, for the rest of the day for your account), together with a short-lived count of recent checks from your network, stored under keyed one-way hashes of your IP address or its network prefix and not the address itself. When a sign-in, an upload, an edit, a comment, a like, a dislike or a report is refused, the refusal is kept in the moderation records described above, with your network provider and country but not your IP address. We apply the same assessment when deciding whether an action earns XP, using only the network information we already have and any answer we have already stored, so nothing extra is sent to proxycheck.io for it; when XP is withheld this way, that is kept in the moderation records described above as well.
When you create an account, we check whether the domain of your email address (the part after the @, never the whole address) belongs to a throwaway email service. We compare it with public lists of such services, which we download once a day, and we look up the domain's mail servers in DNS and its registration date in the public registration records of its registry (RDAP), which receive the domain name only. We keep those answers for up to 30 days, a count of first email verifications per domain for 3 days, and, for as long as we run this check, which mail servers each domain uses and the day each domain was first used here. When you first verify your email, we also keep your account in a list of recent accounts by email domain for 31 days. An account made with a throwaway email domain is suspended, including an account made before the domain was recognized as one; that suspension is kept in the moderation records described above, with the domain.
When you create an account, your browser also sends technical details about the device it runs on, such as its graphics chip, screen size, fonts, time zone and languages (some of them reduced to a short fingerprint in your browser), so that we can tell when one device creates many accounts. We store a keyed one-way hash of these details, your time zone with the countries that use it, and whether it matches the country of your network. We also set a cookie named "sbs" in every browser that visits ScriptBlox: a random browser identifier that we sign so it cannot be forged and use to recognise the same browser for abuse prevention and moderation, of which we store only a keyed one-way hash. All of this is kept with the abuse prevention data described above.
Security checks (knownprint)
When you sign up, log in, post or vote, the page reads technical characteristics of your browser and device with knownprint, open-source security software that ScriptBlox runs on its own server. It reads rendering digests (canvas, WebGL and emoji measurements, kept only as digests), audio measurements, device and browser attributes (screen, hardware, locale, browser version), capability lists (fonts, media features, permissions), signs of automation and your network address, as listed at scriptblox.com/.well-known/knownprint.json. It also stores a random visitor identifier, a first-party cookie named "kp_t" holding a random token (HttpOnly, up to 400 days), the security events with their verdicts, and your internal account identifier for the actions you take while signed in. It does not collect page content, keystrokes, email addresses or usernames. Nothing is read on other pages or actions.
We use it to protect accounts on ScriptBlox: to detect automated sign-ups, logins, posts and votes, attempts to return after a suspension, and multi-accounting. It is never used for advertising, audience building or profiling unrelated to the site's own integrity. ScriptBlox is the controller of this processing, on the basis of its legitimate interest in keeping the service usable and its moderation effective (GDPR Article 6(1)(f)); the reading of your device happens only on these four actions and is necessary for the service you asked for. No knownprint company receives the data. OVHcloud hosts the server, in Canada, and processes the data on ScriptBlox's behalf.
Raw technical data is kept for up to 30 days, security events and verdicts for up to 90 days, and the full network address for 30 days before it is shortened to its network prefix. A stemmed profile without raw values is kept until 400 days pass without a visit. Moderators see verdicts, reasons and related accounts. Nothing is sold or shared for advertising.
No decision with legal or similarly significant effects is taken about you solely by automated means: every account decision is a moderator's. You can ask for access, deletion, objection, restriction or rectification, or for human review and appeal of a decision, by contacting support@scriptblox.com. We find your data through your account, and deleting it removes your visitor's events, observations, tokens and list entries within minutes. You can also complain to your data protection authority.
Cookies and Web Beacons
Like any other website, ScriptBlox uses 'cookies'. These cookies are used to store information including visitors' preferences, and the pages on the website that the visitor accessed or visited. The information is used to optimize the users' experience by customizing our web page content based on visitors' browser type and/or other information. For more general information on cookies, please read more on the Cookie Consent website
Google DoubleClick DART Cookie
Google is one of a third-party vendor on our site. It also uses cookies, known as DART cookies, to serve ads to our site visitors based upon their visit to www.website.com and other sites on the internet. However, visitors may choose to decline the use of DART cookies by visiting the Google ad and content network Privacy Policy at the following URL – https://policies.google.com/technologies/ads
Playwire
All or partial advertising on this Website or App is managed by Playwire LLC. If Playwire publisher advertising services are used, Playwire LLC may collect and use certain aggregated and anonymized data for advertising purposes. To learn more about the types of data collected, how data is used and your choices as a user, please visit https://www.playwire.com/privacy-policy.
Third Party Privacy Policies
ScriptBlox's Privacy Policy does not apply to other advertisers or websites. Thus, we are advising you to consult the respective Privacy Policies of these third-party ad servers for more detailed information. It may include their practices and instructions about how to opt-out of certain options. You can choose to disable cookies through your individual browser options. To know more detailed information about cookie management with specific web browsers, it can be found at the browsers' respective websites.
CCPA Privacy Rights (Do Not Sell My Personal Information)
Under the CCPA, among other rights, California consumers have the right to: Request that a business that collects a consumer's personal data disclose the categories and specific pieces of personal data that a business has collected about consumers. Request that a business delete any personal data about the consumer that a business has collected. Request that a business that sells a consumer's personal data, not sell the consumer's personal data. If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.
GDPR Privacy RIghts
Third party vendors, including Google, use cookies to serve ads based on a user's prior visits to your website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to your users based on their visit to your sites and/or other sites on the Internet. Users may opt out of personalized advertising by visiting Ads Settings. (Alternatively, you can direct users to opt out of a third-party vendor's use of cookies for personalized advertising by visiting www.aboutads.info.)
Children's Information
Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity. ScriptBlox does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.