$ cat privacy.md
Last updated: June 2026
// Who we are
POSERSCRIPT is operated as an independent software project. We sell time-limited license keys for desktop script packages.
// What we collect
- Email address (when you order a license key — used to deliver the key).
- License key and purchase metadata (package, duration, timestamps).
- Machine identifier: a one-way SHA-256 hash of your machine's node ID and computer name, generated by the desktop loader on first activation. We never receive your raw hostname or hardware serials.
- IP address and basic request metadata in server access logs.
- Chat messages and any screenshots you voluntarily attach to the in-app POSER assistant.
// Where it is stored
License keys, machine hashes, and delivery records are stored in a managed PostgreSQL database (Supabase). Chat messages are sent to Anthropic (Claude API) for the sole purpose of generating a reply and are subject to Anthropic's privacy policy. Transactional email is sent through Resend.
// How long we keep it
- License keys: until expiry plus 90 days for audit.
- Machine hashes: lifetime of the associated key, then deleted.
- Order emails: retained until you request deletion.
- Chat history: not persisted server-side; lives only in your browser tab.
// What we do NOT collect
We do not run analytics or advertising trackers, we do not set tracking cookies, and we never collect data from inside the games or applications the script interacts with on your machine.
// Your rights (GDPR / CCPA)
You may request access, correction, or deletion of any personal data we hold about you by emailing the support address in the app. We respond within 30 days.
// Security
API keys and the database service role key are stored server-side only and never exposed to the browser. The site enforces HTTPS, a strict Content Security Policy, and standard hardening headers (HSTS, X-Frame-Options, nosniff, Referrer-Policy, Permissions-Policy).
// Changes
We will update the "Last updated" date above when this policy changes. Material changes will be announced on the site.