Privacy Policy

Last updated: November 29, 2025

1. Introduction

At xbcqfuscator, we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your personal information when you use our Lua code obfuscation service.

2. Information We Collect

We collect the following types of information:

Account Information

  • Username
  • Email address
  • Password (encrypted and stored securely via PocketBase authentication)
  • Account creation date

Usage Information

  • Token balance and purchase history
  • Obfuscation history (metadata only, not your source code)
  • Service usage statistics

Payment Information

  • Payment transactions are processed through Gumroad
  • We do not store your credit card or payment details
  • We only receive confirmation of successful payments
3. Your Source Code

We do not store your source code.

When you submit code for obfuscation:

  • Your source code is processed in memory
  • It is immediately deleted after the obfuscation process completes
  • We do not retain any copies of your original source code
  • We do not analyze, share, or use your code for any purpose other than obfuscation

Hosted Scripts

If you choose to host your obfuscated script:

  • Only the obfuscated output is stored on our servers
  • Your original source code is still deleted immediately
  • Hosted scripts are accessible via unique URLs
  • You can delete hosted scripts at any time from your dashboard
4. How We Use Your Information

We use your information to:

  • Provide and maintain the obfuscation service
  • Manage your account and token balance
  • Process payments and purchases
  • Send important service updates and notifications
  • Improve our service and user experience
  • Prevent fraud and abuse
  • Comply with legal obligations
5. Data Storage and Security

We implement industry-standard security measures to protect your data:

  • All user credentials are stored using PocketBase authentication
  • Passwords are encrypted and never stored in plain text
  • Data transmission is encrypted using HTTPS/TLS
  • Access to user data is restricted to authorized personnel only
  • Regular security audits and updates
6. Data Sharing and Third Parties

We do not sell, trade, or rent your personal information to third parties. We only share data with:

  • Gumroad: For payment processing (they have their own privacy policy)
  • Umami Analytics: For privacy-focused, anonymized usage statistics
  • Cloudflare Turnstile: For bot protection on authentication pages
  • Legal authorities: When required by law or to protect our rights

We do not share your obfuscated scripts or any other data with third parties for marketing or advertising purposes.

7. Cookies and Tracking

We do not use cookies for authentication. Instead, we use the browser's localStorage to store your authentication token securely on your device.

Analytics

We use Umami Analytics, a privacy-focused analytics platform that:

  • Does not collect personal information
  • Does not use cookies
  • Does not track you across websites
  • Collects only anonymized usage statistics (page views, referrers, device types)
  • Is GDPR compliant

CAPTCHA

We use Cloudflare Turnstile for bot protection on login and registration pages:

  • Turnstile is a privacy-focused alternative to traditional CAPTCHAs
  • It does not collect personal information
  • It verifies you're human without solving puzzles
  • Data processed by Cloudflare is subject to their privacy policy
8. Your Rights

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct your account information
  • Deletion: Delete your account and associated data
  • Opt-out: Unsubscribe from non-essential communications

To exercise these rights, contact us at mail@xbcq.lol

9. Data Retention
  • Source code: Deleted immediately after obfuscation
  • Hosted scripts: Retained until you delete them or close your account
  • Account data: Retained while your account is active

When you delete your account, we remove all personal data except what we're legally required to retain.

10. Children's Privacy

Our service is not intended for users under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

11. International Users

Your data may be processed and stored in servers located in various countries. By using our service, you consent to the transfer of your information to countries outside your residence, which may have different data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or service announcements. Continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us:

Email: mail@xbcq.lol