Privacy Policy

This page explains what NOVA (novaexec.live) collects when you use the site, how that information is used, and the controls you have over it. We try to keep this short and plain.

1. What we collect

• Account info. When you sign up we store your email address and a hashed password through our authentication provider (Supabase). We do not see or store your password in plaintext.
• Profile info you give us. Display name, username, avatar palette choice, and any photo you upload to your profile.
• Content you publish. Scripts you upload (name, game, description, code, tags, cover image, supported executors, min UNC), comments you leave, and reports you submit.
• Activity counters. Aggregate counts like view, copy, and favourite totals on scripts you publish or interact with. These are tied to scripts, not to identifiable users.
• Basic technical logs. Our hosting provider (Vercel) and our backend (Supabase) keep standard request logs that include IP address, user-agent, and timestamp for security and abuse prevention.

2. What we don't collect

• We do not run third-party advertising or analytics trackers.
• We do not sell your data.
• We do not collect Roblox account credentials. NOVA never asks for them.

3. How we use it

• To run the site — authentication, profile rendering, comment delivery, etc.
• To moderate content (reports, abuse, spam) and enforce these terms.
• To communicate with you about your account when necessary (e.g. email verification, password reset).

4. Cookies and local storage

NOVA stores a small amount of data in your browser's local storage and session storage:

• Your Supabase auth session token (so you stay signed in).
• A flag per script you open in a tab (so a single visit only counts as one view).
• Service-worker caches of static assets so the site loads quickly on repeat visits.

None of these are advertising cookies. Clearing your browser storage signs you out and removes them.

5. Third parties we use

• Supabase — database, authentication, file storage, realtime updates.
• Vercel — site hosting and CDN.
• WEAO — public Roblox executor status API. We don't send them any user data; the site fetches their public exploit list.
• Google Fonts — typography. Loaded directly from Google's servers.

Each of these has its own privacy practices, which we don't control.

6. Your controls

• Edit your profile at any time on your profile page.
• Delete a script or comment you authored — the row, its cover image, and its dependent rows are removed.
• Delete your account — sign in and email legal@novaexec.live with the subject "delete my account" from the address tied to your account. We'll remove your authentication record, profile, and content within 14 days.

7. Children

NOVA is intended for users who are old enough to comply with their local laws regarding online accounts. If you're a parent or guardian and believe a child under that age has registered, contact us and we'll remove the account.

8. Security

Passwords are handled exclusively by Supabase Auth and stored as salted hashes. Database access is gated by row-level security policies. We can't promise any system is unbreachable, but we try to follow current best practices.

9. Changes to this policy

If we make a meaningful change, we'll update the "Last updated" date at the top of this page. Material changes will also be announced in the community channel.