Privacy Policy

Effective Date: June 14, 2026

1. Information We Collect

We collect only the data necessary to provide and secure the Obscurau platform.

Account Details: We store your email address and a secure hash of your password. We use this to authenticate your sessions and send billing notices.

Payment Information: We do not collect or store full credit card numbers. We route all transactions directly to our payment gateways, which return a secure token that we link to your account.

Server Logs: We log incoming IP addresses, browser user agents, and API request metadata. We retain these logs for 30 days to debug compiler errors and block network attacks.

2. Source Code Handling

We process your Lua and Luau source code entirely in system memory. The compiler reads the input, generates bytecode, and returns the compiled output over the network. Once the response transmits, the system overwrites the memory containing your source.

We do not write unencrypted scripts to persistent storage. We do not use submitted code to train language models. We do not analyze your logic for proprietary algorithms.

3. Third-Party Infrastructure

We rely on specialized vendors to operate our network. These companies only process the data required to perform their specific functions.

Cloudflare: Routes all incoming web traffic and logs IP addresses to provide security and caching.

DigitalOcean / AWS: Hosts our application servers and databases.

Email Services: Delivers account verification and password reset emails. They receive your email address solely for transmission purposes.

4. Data Sharing and Law Enforcement

We do not sell your personal data to advertisers or data brokers. We share your information with external parties only if compelled by a legally binding court order or subpoena. If we receive such a request, we will attempt to notify you via your registered email address before complying, unless a gag order prohibits us from doing so.

5. Your Rights and Controls

You can manage your data directly from the Obscurau dashboard. You have the right to download a full export of your billing history and configurations, update your email address or payment methods at any time, and delete your account. Account deletion permanently removes your email, password hash, and API keys from our active databases.

To exercise these rights, use the tools provided in your dashboard settings. If you cannot access your account, email help@obscurau.net from the address associated with your registration.

6. Security Practices

We encrypt all connections between your client and our servers. We restrict database access to internal IPs and require multi-factor authentication for administrative staff.

No internet service is completely immune to breaches. You must maintain strong passwords and secure your API keys to prevent unauthorized access.

7. Contact Information

If you have questions about this Privacy Policy or how we handle your data, please contact us at help@obscurau.net.