Privacy Policy for Scripters

Last Updated: November 24, 2025

Thank you for using Scripters ("we," "us," or "our"). This Privacy Policy explains how we collect, use, store, and protect your information when you use our developer portfolio platform at https://scripters.top (the "Service").

By accessing or using Scripters, you agree to the terms of this Privacy Policy. If you do not agree with these practices, please do not use our Service.

1. Information We Collect

1.1 Information from Third-Party Services

GitHub Data: When you sign in with GitHub OAuth, we collect:
- Your GitHub username, email, and public profile information
- Public repository data (names, descriptions, languages, stars, forks)
- Contribution activity and commit statistics
- Programming language breakdown across your repositories

LeetCode Data: If you choose to connect your LeetCode account, we collect:
- LeetCode username
- Problems solved (by difficulty: Easy, Medium, Hard)
- Contest rankings and ratings
- Submission statistics and badges

1.2 Personal Data You Provide

- Display name, bio, tagline, location, and website URL for your profile
- Social media links (Twitter, LinkedIn, GitHub, etc.)
- Profile customization preferences (theme, block layout)
- Email address (from GitHub OAuth for account communication)

1.3 Payment Information

For Scripters Pro purchases:
- Payment processing is handled entirely by Stripe, our trusted payment processor
- We do not store credit card numbers, CVV codes, or banking information on our servers
- We retain transaction records (purchase date, amount, Stripe customer ID) for account management

1.4 Analytics and Usage Data

We collect non-personal data to improve the Service:
- Visitor analytics on public profiles (page views, referrers, visit duration, geographic location)
- Device type, browser type, operating system, and screen resolution
- IP addresses (anonymized after 30 days)
- Cookies and similar tracking technologies for authentication and preferences

2. How We Use Your Information

We use collected data for the following purposes:

2.1 Service Delivery
- Display your GitHub and LeetCode statistics on your public profile
- Automatically refresh your stats nightly to keep your portfolio current
- Render customizable profile blocks and themes
- Enable profile sharing at scripters.top/[username]

2.2 AI-Powered Features
- Generate weekly insights about your coding activity using OpenAI GPT-4
- Create AI-enhanced resume summaries (Pro users only)
- Provide personalized growth coaching suggestions via email
- Power the interactive chatbot on your profile (Pro users only)

2.3 Analytics and Improvement
- Track visitor engagement on your public profile
- Provide you with analytics dashboards showing profile performance
- Improve our Service based on usage patterns
- Debug technical issues and optimize performance

2.4 Communication
- Send transactional emails (account creation, password resets, purchase confirmations)
- Weekly growth tips and feature updates (you can opt out anytime)
- Critical service announcements and security updates

3. Data Sharing and Third-Party Services

We do not sell, trade, or rent your personal information. We share data only with the following trusted partners:

3.1 Essential Service Providers
- GitHub: For OAuth authentication and repository data fetching
- Stripe: For secure payment processing (Pro tier purchases)
- OpenAI: For AI-powered insights and resume generation (data is not stored by OpenAI)
- Upstash Redis: For caching to improve performance and reduce API rate limits
- Resend: For transactional and marketing emails
- MongoDB Atlas: For secure database hosting

3.2 Legal Requirements
We may disclose your information if required by law, subpoena, or court order, or to:
- Comply with legal processes
- Protect the rights, property, or safety of Scripters, our users, or the public
- Prevent fraud or security threats

4. Data Retention and Deletion

4.1 Active Accounts
- Your profile data is retained as long as your account is active
- GitHub and LeetCode stats are refreshed nightly and older data is overwritten
- Analytics data is retained for 90 days for Pro users, 30 days for free users

4.2 Account Deletion
You can delete your account at any time from your dashboard settings. Upon deletion:
- Your public profile is immediately removed from scripters.top/[username]
- Personal data is deleted within 30 days
- Anonymized analytics data may be retained for service improvement
- Payment records are retained for 7 years for tax compliance (as required by law)

4.3 Data Export
You can export all your profile data in JSON format from your dashboard at any time. This includes:
- Profile information and customization settings
- GitHub and LeetCode statistics snapshots
- Analytics data and visitor insights

5. Data Security

We implement industry-standard security measures to protect your information:
- All data transmission is encrypted using TLS/SSL
- Passwords are never stored (GitHub OAuth handles authentication)
- Database access is restricted and monitored
- Regular security audits and updates
- API keys and sensitive credentials are stored securely using environment variables

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but take all reasonable precautions.

6. Cookies and Tracking Technologies

We use cookies for:
- Authentication: Keeping you logged in securely via NextAuth.js
- Preferences: Remembering your theme and layout choices
- Analytics: Understanding how visitors interact with public profiles

You can control cookies through your browser settings. Disabling cookies may limit some functionality of the Service.

7. Children's Privacy

Scripters is not intended for users under 13 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at support@scripters.top.

8. Your Rights (GDPR Compliance)

If you are in the European Economic Area (EEA), you have the following rights:
- Right to Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Export your data in a machine-readable format
- Right to Object: Opt out of certain data processing activities
- Right to Withdraw Consent: Unsubscribe from marketing emails at any time

To exercise these rights, contact us at support@scripters.top.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:
- Know what personal data we collect and how we use it
- Request deletion of your personal data
- Opt out of the sale of personal data (we do not sell data)
- Non-discrimination for exercising your privacy rights

10. International Data Transfers

Scripters is hosted on Vercel's global infrastructure. Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place to protect your data in compliance with applicable laws.

11. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. Significant changes will be communicated via:
- Email notification to your registered address
- Prominent notice on our website
- Update timestamp at the top of this policy

Continued use of Scripters after changes constitutes acceptance of the updated policy.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data:

Email: support@scripters.top
Alternative: bartzalewskidev@gmail.com

For general inquiries about Scripters, visit our website at https://scripters.top.

By using Scripters, you acknowledge that you have read, understood, and agree to this Privacy Policy.