1. Introduction
Welcome to MzScript's. This Privacy Policy ("Policy") describes how MzScript's ("Company," "we," "us," or "our") collects, uses, processes, discloses, and protects your personal information when you access or use our website and services (collectively, the "Services"). We are committed to protecting your privacy and maintaining the highest standards of data protection in accordance with applicable laws and regulations.
This Policy applies exclusively to information collected through our Services and does not apply to information collected offline, through other channels, or by third parties not controlled by us. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Policy.
If you have any questions, concerns, or requests regarding this Policy or our data practices, please contact us at mastersmzdirect@gmail.com.
1. Agreement and Acceptance
By accessing and using our Services, you expressly acknowledge that you have read, understood, and consent to the collection, use, processing, and disclosure of your personal information as described in this Policy. If you do not agree with the terms of this Policy, you must immediately discontinue use of our Services.
Where required by applicable law (including but not limited to the General Data Protection Regulation "GDPR" and the California Consumer Privacy Act "CCPA"), we will obtain your explicit, informed consent before collecting or processing certain categories of personal data, particularly sensitive personal information. We implement cookie consent mechanisms and opt-in procedures to ensure compliance with applicable consent requirements.
2. Age Restrictions and Children's Privacy
Our Services are intended solely for individuals who are at least 18 years of age or the age of majority in their jurisdiction of residence, whichever is greater. By accessing or using our Services, you represent and warrant that you meet this age requirement.
We do not knowingly collect, solicit, or maintain personal information from individuals under the age of 18, and we do not knowingly allow such persons to register for or use our Services. If we become aware that we have collected personal information from a person under 18 without proper parental consent, we will take immediate steps to delete that information and terminate the associated account.
If you are a parent or legal guardian and believe that your minor child has provided us with personal information without your consent, please contact us immediately at mastersmzdirect@gmail.com with the subject line "Minor Data Removal Request," and we will promptly investigate and take appropriate action.
3. Scope and Applicability
By accessing and using our website, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree with this Privacy Policy, please discontinue use of our website. Where required by applicable law (such as the GDPR), we will obtain your explicit consent before collecting or processing certain categories of personal data, including through the use of cookie consent mechanisms.
4. Information We Collect
We collect various types of information in connection with your use of our Services, as detailed below:
4.1 Information You Provide Directly
We collect personal information that you voluntarily provide to us when you:
- Register for an account: Username, email address, password (encrypted), and telephone number (optional).
- Contact us: Name, email address, phone number, message content, and any attachments you choose to send.
- Post content: Scripts, code, descriptions, comments, reviews, ratings, and other user-generated content.
- Participate in promotions: Information required to enter contests, giveaways, surveys, or promotional activities.
- Update your profile: Profile information, biography, website links, social media handles, and preferences.
4.2 Information Collected Automatically
When you access or use our Services, we automatically collect certain technical and usage information through log files, cookies, and similar technologies:
- Device information: Device type, operating system, browser type and version, unique device identifiers.
- Connection information: Internet Protocol (IP) address, Internet Service Provider (ISP), geographic location (country/region level).
- Usage data: Pages visited, time spent on pages, referring and exit pages, click data, search queries, date and time stamps.
- Performance data: Page load times, error messages, and other diagnostic data.
This information is primarily used to analyze trends, administer our Services, track user navigation patterns, gather demographic information, detect and prevent security threats, and improve our Services. In most cases, this data is not directly linked to personally identifiable information.
4.3 Analytics and Performance Monitoring
We utilize third-party analytics services to better understand how users interact with our Services:
- Google Search Console: Monitors website performance, search traffic, and indexing status. Collects aggregated data about search queries, click-through rates, and website visibility in search results.
5. How We Use Your Information
We use the information we collect for the following purposes:
- Provide and maintain Services: To operate, maintain, and improve our platform, deliver content, and process user requests.
- Account management: To create and manage user accounts, authenticate users, and provide customer support.
- Communication: To send important notices, updates, security alerts, and respond to inquiries.
- Personalization: To customize your experience, remember your preferences, and provide relevant content and features.
- Analytics and improvement: To analyze usage patterns, identify trends, and improve our Services' performance and functionality.
- Security and fraud prevention: To detect, prevent, and address technical issues, security threats, fraudulent activity, and violations of our Terms.
- Legal compliance: To comply with applicable laws, regulations, legal processes, and governmental requests.
- Advertising: To display relevant advertisements through our advertising partners, subject to your consent where required.
6. Cookies and Tracking Technologies
Our Services use cookies, web beacons, pixel tags, local storage, and other tracking technologies to enhance user experience and collect information about usage patterns. A cookie is a small text file stored on your device that helps us recognize you and remember your preferences.
7. Third-Party Advertising and Analytics
We partner with third-party advertising networks and analytics providers to display advertisements on our Services and analyze user engagement. These third parties may use cookies, JavaScript, web beacons, pixel tags, and similar technologies to:
- Serve targeted advertisements based on your browsing activity and interests
- Measure the effectiveness and reach of advertising campaigns
- Collect information about your device, browsing behavior, and interactions with advertisements
- Build profiles for personalized advertising across different websites and services
Our advertising partners include:
- LootLabs: Digital advertising network. Privacy Policy: https://lootlabs.gg/privacy-policy
MzScript's does not have access to or control over cookies and tracking technologies deployed by third-party advertisers and analytics providers. These third parties operate under their own privacy policies and data practices. We strongly encourage you to review their privacy policies to understand how they collect, use, and share your information.
Opting out of interest-based advertising: You may opt out of personalized advertising by:
- Visiting the Digital Advertising Alliance's opt-out page: https://optout.aboutads.info
- Visiting the Network Advertising Initiative's opt-out page: https://optout.networkadvertising.org
- Adjusting your device settings (e.g., "Limit Ad Tracking" on iOS or "Opt out of Ads Personalization" on Android)
- Using browser extensions that block advertising trackers
Please note that opting out of interest-based advertising does not mean you will stop seeing ads; it means the ads you see will be less personalized to your interest.
- View and delete cookies
- Block third-party cookies
- Block all cookies (note: this may impair website functionality)
- Receive notifications when cookies are set
Please note that disabling certain cookies may limit your ability to use some features of our Services. Where required by applicable law (such as GDPR), we will obtain your explicit consent before placing non-essential cookies on your device through our cookie consent mechanism.
For more information about cookies and how to manage them, visit www.allaboutcookies.org.
5. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies. Cookies are small data files placed on your device that help us improve your experience. We use the following categories of cookies:
- Essential Cookies: Required for the basic functionality of our website, such as maintaining your session.
- Preference Cookies: Used to remember your settings and preferences to customize your experience.
- Advertising Cookies: Used by our advertising partners to deliver relevant advertisements (see Section 6 below).
You can manage or disable cookies through your browser settings. Please note that disabling cookies may affect the functionality of our website. Where required by law, we will request your consent before placing non-essential cookies on your device.
8. Legal Basis for Processing Personal Data (GDPR Compliance)
If you are located in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, we process your personal data only when we have a valid legal basis under the General Data Protection Regulation (GDPR). Our legal bases for processing include:
- Consent (Article 6(1)(a) GDPR): When you have provided clear, specific, informed, and freely given consent for us to process your personal data for a particular purpose, such as:
- Placing non-essential cookies and tracking technologies on your device
- Sending promotional communications and newsletters
- Processing sensitive personal information (where applicable)
- Contractual Necessity (Article 6(1)(b) GDPR): When processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract, such as:
- Creating and managing your user account
- Providing access to our Services and features
- Processing and displaying your uploaded content
- Providing customer support and responding to inquiries
- Legitimate Interests (Article 6(1)(f) GDPR): When processing is necessary for our legitimate business interests or the legitimate interests of a third party, provided that such interests are not overridden by your fundamental rights and freedoms, such as:
- Improving and optimizing our Services through analytics
- Detecting, preventing, and investigating fraud, security threats, and abuse
- Enforcing our Terms of Service and protecting our rights
- Conducting market research and understanding user preferences
- Maintaining the security and integrity of our systems
- Legal Obligation (Article 6(1)(c) GDPR): When processing is necessary for compliance with a legal obligation to which we are subject, such as:
- Responding to lawful requests from public authorities and law enforcement
- Complying with tax, accounting, and reporting requirements
- Preserving data pursuant to data retention obligations
Where we rely on legitimate interests as the legal basis for processing, we have conducted a balancing test to ensure that our interests do not override your rights and freedoms. You have the right to object to processing based on legitimate interests at any time by contacting us at mastersmzdirect@gmail.com.
9. Data Sharing, Disclosure, and Transfers
We do not sell, rent, or trade your personal data to third parties for their marketing purposes. We may share or disclose your information only in the following limited circumstances:
9.1 Service Providers and Business Partners
We share information with carefully selected third-party service providers who perform services on our behalf, including:
- Hosting and Infrastructure: Vercel (website hosting, CDN, security infrastructure). See Vercel Privacy Policy.
- Advertising Partners: LootLabs (ad serving and monetization). See LootLabs Privacy Policy.
- Analytics Providers: Google Search Console (website performance and search analytics).
- Communication Services: Email service providers for transactional and service-related communications.
10. Data Retention and Deletion
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, as outlined in this Policy, and to comply with our legal, regulatory, accounting, and reporting obligations.
Retention criteria:
- Account data is retained as long as your account remains active
- Script files and user-generated content are retained as long as you choose to keep them published
- Usage logs and analytics data are retained for up to 2 years for security and operational purposes
- Legal compliance data is retained as required by applicable laws
11. Data Security and Protection Measures
We take the security and protection of your personal data very seriously and have implemented comprehensive technical, organizational, and administrative safeguards designed to protect your information from unauthorized access, disclosure, alteration, and destruction.
Security measures include:
- Infrastructure security: Our Services are hosted on Vercel's enterprise-grade infrastructure, which provides industry-leading security features including encryption, DDoS protection, and automated security updates.
- Access controls: We implement role-based access controls and least-privilege principles to limit data access to authorized personnel only.
- Regular monitoring: We continuously monitor our systems for security threats and vulnerabilities.
- Incident response: We maintain an incident response plan to quickly address any security breaches or data incidents.
12. International Data Transfers and Cross-Border Processing
Our Services are operated primarily from the United States, and our servers and data processing facilities are located in the United States. If you access or use our Services from outside the United States, your personal information will be transferred to, stored, processed, and maintained in the United States and potentially other countries where our service providers operate.
Important considerations for international users:
- Data protection laws: The data protection and privacy laws of the United States and other countries may differ from and may not be as comprehensive as the laws of your country of residence. By using our Services, you acknowledge and consent to the transfer of your information to the United States.
- EEA, UK, and Swiss users: If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we rely on the following legal mechanisms for international data transfers:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions recognizing certain countries as providing adequate data protection
- Your explicit consent to the transfer (where applicable)
- Third-party transfers: Our advertising partner, LootLabs, is based in Israel (an country recognized by the European Commission as providing adequate data protection). LootLabs may process data internationally in accordance with their privacy policy. Please review their https://lootlabs.gg/privacy-policy for more details.
- Safeguards: We take reasonable steps to ensure that international transfers of personal data are subject to appropriate safeguards and comply with applicable data protection laws. We require our service providers to implement adequate security measures to protect transferred data.
If you have questions or concerns about international data transfers, please contact us at mastersmzdirect@gmail.com.
Important disclaimer: While we implement commercially reasonable and industry-standard security measures to protect your data, no method of electronic transmission, storage, or processing is 100% secure. We cannot guarantee absolute security of your personal information. The internet is inherently insecure, and we cannot ensure or warrant the security of any information you transmit to us. You transmit information at your own risk.
Your responsibilities: You are responsible for maintaining the security of your account credentials (username and password). Do not share your password with anyone, and use a strong, unique password for your account. If you suspect unauthorized access to your account, change your password immediately and contact us at mastersmzdirect@gmail.com.
At the end of the retention period, we securely delete or anonymize your personal data in accordance with industry best practices and applicable data protection laws.
User-initiated deletion: You may request deletion of your account and associated data at any time by contacting us at mastersmzdirect@gmail.com or through your account settings. We will process your request without undue delay and provide confirmation once deletion is complete.
9. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, all personal data and associated content (including posted scripts) are permanently removed from our systems. If your account is terminated due to a ban, your personal data and posted content will also be removed.
10. Data Security
We take the security of your personal data seriously. Our website is hosted on Vercel, which provides enterprise-grade security measures including SSL/TLS encryption, DDoS protection, a Web Application Firewall (WAF), and bot management. For more details about our hosting provider's security infrastructure, please visit https://vercel.com/docs/vercel-firewall.
While we implement commercially reasonable measures to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your personal information.
11. International Data Transfers
Our servers are located in the United States. If you access our website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. By using our website, you consent to the transfer of your information to the United States and acknowledge that data protection laws in the United States may differ from those in your country of residence. Our advertising partner (LootLabs) is based in Israel and may process data internationally; please refer to their privacy policy for details.
13. Data Breach Notification and Incident Response
We have implemented comprehensive incident response procedures to detect, respond to, and recover from data breaches and security incidents. In the unfortunate event of a data breach that compromises your personal information, we are committed to transparency and timely notification.
Notification procedures:
- Assessment: Upon discovery of a potential breach, we will promptly assess the nature, scope, and impact of the incident to determine whether personal data has been compromised.
- Supervisory authority notification (GDPR): If you are a resident of the EEA, UK, or Switzerland, and a breach is likely to result in a risk to your rights and freedoms, we will notify the relevant data protection supervisory authority within 72 hours of becoming aware of the breach, as required by Articles 33 and 34 of the GDPR.
- Individual notification: Where a breach is likely to result in a high risk to your rights and freedoms, we will notify affected individuals without undue delay. If you are a California resident,we will notify you in accordance with California Civil Code Section 1798.82 and other applicable data breach notification laws.
- Content of notification: Breach notifications will include, to the extent known:
- A description of the nature of the breach
- The categories and approximate number of affected individuals and records
- The likely consequences of the breach
- The measures taken or proposed to address the breach and mitigate potential adverse effects
- Contact information for further inquiries
- Recommendations for steps you can take to protect yourself
- Remediation: We will take immediate steps to contain the breach, remediate vulnerabilities, restore the security of affected systems, and prevent future incidents.
If you believe you have discovered a security vulnerability in our Services, please report it to us immediately at mastersmzdirect@gmail.com with the subject line "Security Vulnerability Report." We appreciate responsible disclosure and will work with you to address the issue promptly.
14. Your Rights Under the CCPA (California Residents)
If you are a California resident, the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with specific rights regarding your personal information:
- Right to Know (CCPA § 1798.100): You have the right to request that we disclose:
- The categories of personal information we have collected about you
- The categories of sources from which the information was collected
- Our business or commercial purpose for collecting, selling, or sharing personal information
- The categories of third parties to whom we disclose personal information
- The specific pieces of personal information we have collected about you
- Right to Request Deletion (CCPA § 1798.105): You have the right to request that we delete personal information we have collected from you, subject to certain exceptions (e.g., legal compliance, fraud prevention, contractual obligations).
- Right to Correct Inaccurate Information (CCPA § 1798.106): You have the right to request correction of inaccurate personal information we maintain about you.
- Right to Opt-Out of Sale or Sharing (CCPA § 1798.120): You have the right to opt out of the sale or sharing of your personal information. We do not sell your personal information for monetary consideration and have not sold personal information in the past 12 months. However, certain data sharing with advertising partners may constitute "sharing" under CCPA. You can opt out of such sharing by adjusting your cookie preferences or contacting us.
- Right to Limit Use of Sensitive Personal Information (CCPA § 1798.121): You have the right to limit our use and disclosure of sensitive personal information to purposes necessary to provide Services you requested. We do not use or disclose sensitive personal information for purposes other than those permitted by CCPA.
- Right to Non-Discrimination (CCPA § 1798.125): We will not discriminate against you for exercising any of your CCPA rights. You will not receive differential pricing, quality of service, or be denied services for exercising your rights.
Exercising your rights: To exercise any of these rights, please submit a verifiable consumer request by:
- Emailing us at mastersmzdirect@gmail.com with the subject line "CCPA Rights Request"
- Providing sufficient information to verify your identity (name, email address, and account details)
We will respond to your request within 45 days of receipt. If we require additional time (up to 90 days total), we will inform you of the reason and extension period. You may designate an authorized agent to submit requests on your behalf by providing written authorization signed by you and the authorized agent.
CCPA Metrics (for the past 12 months):
- Personal information sold: $0 (we do not sell personal information)
- Personal information shared for targeted advertising: Yes (with LootLabs for ad delivery)
16. Do Not Track (DNT) Signals and Global Privacy Control (GPC)
Do Not Track: Some web browsers incorporate a "Do Not Track" (DNT) feature that signals to websites you visit that you do not want your online activity tracked. At this time, there is no universally accepted standard for how to interpret and respond to DNT signals. As a result, our Services do not currently respond to DNT browser signals or similar mechanisms.
Global Privacy Control: We recognize and honor Global Privacy Control (GPC) signals for California residents in accordance with CCPA requirements. When we detect a GPC signal from your browser, we will treat it as a request to opt out of the sale or sharing of personal information for targeted advertising purposes for that specific browser on that device.
17. Third-Party Links, Services, and Content
Our Services may contain links to third-party websites, services, applications, or content that are not owned, operated, or controlled by MzScript's. These links are provided for your convenience and informational purposes only.
Important disclaimers:
- We are not responsible for the privacy practices, content, or functionality of third-party websites or services
- We do not endorse or make representations about third-party websites or services
- We encourage you to read the privacy policies and terms of service of any third-party websites you visit
18. Changes and Updates to This Privacy Policy
We reserve the right to modify, update, or replace this Privacy Policy at any time to reflect changes in our practices, Services, legal requirements, or for other operational, legal, or regulatory reasons. Changes to this Policy will become effective when posted on this page.
Types of changes:
- Material changes will be prominently posted and clearly communicated
- You may receive email notification of significant changes affecting your rights
- Continued use of the Services after changes constitutes acceptance of the updated Policy
19. Contact Us and Data Protection Officer
If you have any questions, concerns, comments, or requests related to this Privacy Policy or our data protection practices, or if you wish to exercise your privacy rights, please contact us:
MzScript's
Email: mastersmzdirect@gmail.com
For privacy matters, use subject line: "Privacy Inquiry"
Response time: We aim to respond to all legitimate inquiries and requests within one month (30 days). For complex requests or during periods of high volume, we may extend this period by an additional two months and will notify you of the extension and the reasons for the delay.
Verification: To protect your privacy and security, we may need to verify your identity before processing certain requests or providing information. We will request additional information from you to confirm your identity and ensure we are disclosing information only to the person to whom it pertains.
No fees: We will not charge a fee to process or respond to your request unless it is excessive, repetitive, or manifestly unfounded. If we determine that a fee is necessary, we will inform you of the cost and provide a cost justification before completing your request.