Privacy Policy

1. Information We Collect

VelaWare operates on a principle of data minimization. We only collect and process information that is necessary to authenticate developers, manage projects, deliver scripts, and display execution analytics.

Specifically, the information handled by VelaWare includes:

• Account Credentials: Your email address and securely hashed password required to register, authenticate, and manage your account.
• Projects, Scripts & Version Data: The project names, script names, semantic version tags, Luau/Lua source payloads, and release notes you intentionally create and publish on the platform.
• Roblox Game ID Mappings: The Roblox Universe IDs / Game IDs that you attach to your scripts to enable automatic script resolution via the Universal Loader.
• License Key Data: License key strings, project associations, expiration timestamps, and key statuses configured by project owners.
• Execution Telemetry: When an authorized script payload is successfully retrieved via VelaWare loader endpoints, our system records a privacy-preserving execution event consisting of:
  • Timestamp of the delivery request
  • Script ID and Project ID
  • Coarse country code and region (derived from trusted CDN/proxy edge headers without logging raw IP addresses)
  • Browser category (Chrome, Edge, Firefox, Safari, Other)
  • Operating system category (Windows, macOS, Linux, Android, iOS, Other)
  • Device category (Desktop, Mobile, Tablet, Other)
  • Roblox executor environment (e.g. Solara, Wave, Delta, Codex, MacSploit, or Other, where detected)
  • Server-side response resolution time in milliseconds

2. How Information Is Used

We use the collected information solely to:

• Authenticate your account and enforce project ownership boundaries.
• Store, version, and deliver your published Luau scripts to your authorized loaders.
• Resolve incoming Universal Loader requests by matching current Roblox Game IDs with your attached script configurations.
• Calculate and display aggregate execution analytics (such as today, this week, this month, and lifetime deliveries) on your developer dashboard.
• Maintain the operational reliability, security, and integrity of the Service.

3. Data Storage & Infrastructure

VelaWare stores database records, accounts, and script data using Supabase, a dedicated database and authentication infrastructure provider. All database tables are secured using PostgreSQL Row-Level Security (RLS) policies, ensuring that project owners can only view, modify, or delete their own resources.

4. Third-Party Services

VelaWare does not sell, lease, or monetize your personal data. We work with trusted third-party infrastructure providers to operate the platform:

• Supabase: Provides cloud database storage, authentication, and secure access controls.
• Hosting Infrastructure: Provides global edge deployment, SSL/TLS termination, and web delivery.

These service providers process data only as necessary to fulfill their platform functions under strict security standards.

5. Data Security

We implement industry-standard safeguards to protect your account and script data:

• All web traffic and loader requests are encrypted in transit via HTTPS/TLS.
• Passwords are cryptographically salted and hashed.
• Database access is partitioned through strict Row-Level Security (RLS) policies.
• Sensitive administrative database keys are never exposed to client-side code.

6. Data Retention & Deletion

Your projects, scripts, versions, Game ID mappings, and associated records are retained for as long as your account remains active.

When you delete a script or project through the dashboard, its underlying records, versions, and Game ID mappings are permanently deleted from our database. You may also request complete account deletion at any time.

7. User Rights & Choices

As a VelaWare developer, you have control over your data:

• You can review, export, or modify your scripts, version histories, and mappings at any time directly through the dashboard.
• You can remove individual Game ID mappings or detach them from your scripts whenever needed.
• You may request deletion of your account and associated data by contacting us.

8. Changes to the Privacy Policy

We may update this Privacy Policy from time to time to reflect updates to our platform architecture or operational practices. Modifications will be posted on this page with an updated “Last updated” timestamp. We encourage you to review this page periodically.

9. Contact Information

If you have any questions, inquiries, or requests regarding this Privacy Policy or our data practices, please reach out through the official platform channels at velaware.xyz.