Privacy policy

Information we use

Account information includes your name, email where provided, account identifier and profile details. Discord sign-in can supply your Discord identifier, username and avatar. Where password sign-in is used, a password hash is stored rather than the plain-text password.

Order information includes the resources bought, order identifiers, payment status, amounts, transaction references, discounts and invoices. The payment service you choose processes payment details on its own checkout. Our application does not receive your full payment-card number from hosted card checkout.

Technical information can include IP address, browser/user-agent information, session identifiers, security events and operational logs. Licensed resources can send the license key, product identifier, server IP address and diagnostic information to validate permitted use. Support messages and customer reviews contain the information you choose to send or publish. Reviews are public; do not include sensitive information in them.

Purposes and legal bases

We use necessary account, order and license information to provide the service and fulfil the purchase contract. We use records required by accounting, tax or other applicable legislation to comply with legal obligations. Proportionate fraud prevention, service security, troubleshooting and protection of license rights may rely on legitimate interests after considering the effect on you. Where consent is required for optional marketing or non-essential tracking, we must obtain it separately, and you may withdraw it without affecting earlier lawful processing. We do not treat buying a product as consent to unrelated advertising.

Cookies and browser storage

The store uses an authentication cookie named fssession, configured for a maximum of 30 days, to keep you signed in. Logging out ends the server-side session. The browser stores cart selections under frozenscriptscartv1, a selected coupon under frozenscriptscouponv1, wishlist selections under frozenscriptswishlistv1, and your country/currency preference under frozen_country. These local-storage entries have no automatic expiry set by the application and remain until changed or cleared. Signed-in wishlist selections may also be stored with your account. Clearing browser storage can reset these selections, and blocking essential storage can prevent account features from working. Essential storage is used to provide requested features.

Service providers and disclosure

OVH provides hosting infrastructure for Frozen Scripts in Germany. We use service providers as needed to host the store, process the payment method you choose, deliver purchased files and send service communications. These providers receive information relevant to their role. Payment and community services may also process information for their own purposes under their own privacy notices. We may disclose information where legally required or reasonably necessary to establish or defend legal claims. We do not publish private account or payment records as part of a review.

International processing

Some providers may process information outside your country. Where applicable data-protection law restricts an international transfer, we must use a lawful transfer mechanism, such as an applicable adequacy decision or appropriate contractual safeguards. You may ask for information about the safeguards relevant to your information.

Retention

We retain account and purchase information for the time needed to provide account access, downloads and license verification, and retain necessary transaction records for applicable tax and accounting duties. Security logs, support records and backups are retained for justified operational, legal and dispute-resolution periods rather than indefinitely by default. Account deletion may not remove records we must lawfully retain; retained information must remain limited to the relevant purpose.

Your rights

Depending on the law that applies, you may request access, correction, erasure, restriction, portability or object to certain processing. You may withdraw consent for consent-based processing. Rights are subject to legal conditions; for example, a deletion request may not remove required accounting records. Send requests to [email protected]. Where GDPR applies, we normally respond within one month, with any lawful extension explained. You may complain to the competent data-protection authority, including the authority where you live, work or believe an infringement occurred. You can find EU/EEA supervisory authorities through the European Data Protection Board at https://www.edpb.europa.eu/about-edpb/about-edpb/members_en.

Required information, security and changes

Information needed to identify your account, confirm payment or verify a license may be necessary to supply the requested resource; without it, the relevant function may be unavailable. We use access controls and other proportionate technical and organisational safeguards, but no online service can promise absolute security. We will date material policy updates and give any notice required by law. We do not apply a new notice as retroactive consent.

Contact [email protected] for order, refund, privacy and legal enquiries. You can also open a support ticket through our Discord community at https://discord.gg/qyn3Ccnxdt. Never send passwords, payment-card details or private license keys in public channels.