SPECTRA
Legal
Privacy Policy
Last updated: 20 August 2026
This policy explains what SpecProtect ("Spectra", "we") collects and how we use it. We aim to collect the minimum needed to run the service.
1. What we collect
- Discord account data — your Discord ID, username, and avatar, obtained when you log in with Discord. We also read your list of servers only to link servers you administer to your account.
- Account settings — your plan/tier, and a salted hash of your optional 4-digit PIN (never the PIN itself).
- Scripts — the obfuscated output of scripts you upload. We do not store your raw source unless you explicitly opt in to the source vault.
- Keys & licensing — key hashes, which Discord account redeemed a key, and the device identifier (HWID) and Roblox account bound to a key on first use, so licensing works.
- Server (guild) data — protection settings and an incident log for servers where the bot is active.
- Payments — a record of tier purchases (method, amount, status). We do not store card numbers; card payments are processed by our payment provider.
- Usage logs — obfuscation events are logged as {account, tier, timestamp} only — never the script content.
2. What we do NOT collect
We do not collect passwords (login is via Discord OAuth), we do not store raw script source outside the opt-in vault, and we do not store payment card details. Script source and obfuscated output are never written to logs.
3. How we use it
Solely to operate the service: authenticate you, obfuscate and deliver your scripts, enforce licensing (keys, whitelists, device/account binding), run bot protection features, process payments, and prevent abuse. We do not sell your data or use it for advertising.
4. Sharing
We share data only with the infrastructure and payment providers needed to run the service (e.g. hosting, and the payment processor for card transactions), and where required by law. Per-buyer watermarks embedded in delivered scripts exist to trace leaks and are visible only to the script's seller and us.
5. Retention & deletion
We keep data while your account is active and as needed for the above purposes. You can delete individual scripts from your dashboard (PIN-gated). To delete your account and associated data, contact us through our Discord server.
6. Security
PINs are stored only as salted hashes, keys only as hashes, and script delivery uses single-use, expiring credentials. No system is perfectly secure, but we take reasonable measures to protect your data.
7. Changes & contact
We may update this policy; the "last updated" date reflects the latest version. Questions or requests? Reach us through our Discord server. See also our Terms of Service.