1. Introduction

At xbcqfuscator, we take your privacy and proprietary algorithms seriously. This Privacy Policy outlines what information we process, how we safeguard your data, and our strict commitment to never store your source code.

2. Your Source Code & Scripts

We never store your source code.

• Your Lua source code is processed entirely in volatile server memory
• Original code is immediately discarded as soon as bytecode compilation completes
• We do not analyze, train models on, or share your proprietary logic
• For hosted scripts, only the obfuscated output binary is retained for CDN distribution

3. Information We Collect

Account Credentials: Username, email address, and encrypted authentication tokens. Passwords are secure and never stored in plain text.

Usage & Tokens: Token balance, redemption history, and obfuscation metadata (e.g. timestamp and selected options), without recording code content.

Payment Details: Payments are handled externally and securely by Gumroad. When you buy tokens, Gumroad issues a license key which you redeem on our platform. We never collect, process, or store credit card numbers, billing addresses, or financial data on our servers.

4. How We Use Information

We use your data solely to:

• Provide, operate, and maintain the obfuscation engine and CDN hosting
• Manage user balances, authentication sessions, and API access keys
• Detect and prevent platform abuse, denial-of-service, and fraudulent transactions
• Comply with applicable legal and financial compliance obligations

5. Data Storage & Security

We deploy strict security controls across all infrastructure: internal databases, storage servers, and backend services communicate exclusively over isolated, encrypted WireGuard VPN tunnels with zero public exposure. We enforce TLS 1.3 encryption in transit, encrypted persistence at rest, firewalled Global data centers, and least-privilege administrative access.

6. Third-Party Services

We only interface with trusted infrastructure partners essential for operations:

• Gumroad: Secure external checkout, digital invoicing, and license key issuance
• Cloudflare: DDoS mitigation, CDN distribution, and Turnstile bot protection
• Groq: Fast, stateless AI inference for the documentation assistant (ephemeral processing with zero training on your queries)
• PostHog: Privacy-preserving telemetry and diagnostic metrics

7. Your GDPR & Privacy Rights

Under GDPR and applicable privacy regulations, you have the right to request access to your personal data, rectify inaccuracies, or exercise full account deletion (Right to Erasure / Article 17) directly from your account Settings at any time, or by contacting us.

8. Contact Us

For privacy inquiries, data requests, or manual assistance, contact us at mail@xbcq.lol.