Privacy Policy

What ScriptNovaa stores

ScriptNovaa stores the account username, protected PIN and recovery-code credentials, point and token history, referral history, reward attempts, support tickets, live-support messages, appeals, registered-device identifiers in hashed form, fraud and risk status, trust settings, moderation status, and browser-session timing needed to operate Share Browser.

Device and network information

Share Browser uses a one-device registration system. The launcher creates a device proof from Windows identifiers and sends it over HTTPS. The API stores a keyed hash rather than the original identifiers. Truncated IP information and request timing may be used for rate limiting, referral checks, reward checks, and abuse prevention.

Writing Check

Writing Check processes the text you submit to measure writing patterns and identify invisible or unusual Unicode characters. ScriptNovaa does not save the submitted text. When you choose optional online analysis, the text may be sent to configured providers such as Sapling, GPTZero, Copyleaks, Hugging Face, and Google Gemini for that one analysis and is also subject to their applicable privacy terms. Turn online checkers off before submitting text you do not want sent to outside providers. If you request a clarity revision, the submitted text is sent to Gemini to produce that revision.

Advertising and outside pages

Sponsored links and notification advertising may be supplied by third parties. ScriptNovaa uses an on-page ad-space check when you press the sponsored-link button; it does not contact an advertising domain merely to test for an ad blocker. Opening a sponsored page sends you to the named outside provider, which may process information under its own policy. ScriptNovaa does not control outside pages.

Browser sessions

The API stores token ownership, selected browser mode, session start and end times, heartbeat status, and the reason a session ended. Temporary browser profiles are created locally and removed by the launcher when a managed session ends.

Online demo

The optional 10-minute online demo is an interface preview, not a web proxy. To enforce the 24-hour browser limit while allowing shared school networks, ScriptNovaa stores a random browser identifier and keyed hashes derived from a shortened network address. Demo records include start, expiration, and cooldown times. The demo does not collect or relay the pages you visit because it does not provide general web browsing.

Sign-in storage and security activity

The website keeps the private sign-in token in session storage by default, so it is removed when that browser tab session ends. If the user explicitly chooses “Keep me signed in,” the token is stored locally for no more than 30 days. The API also expires newly issued website sessions after 30 days. ScriptNovaa stores active-session information, a general browser and operating-system description, shortened network information, recent security actions, and unusual-login alerts. Users can revoke one session or sign out everywhere. The launchers protect their paired-account token and device proof with Windows current-user encryption before keeping encrypted values in the current user’s registry.

Support, appeals, and administration

Authorized ScriptNovaa administrators and support agents may review account details, shortened network information, security events, tickets, live-support messages, and appeals when needed to operate the service, investigate abuse, or provide support. Administrative changes are recorded in an audit log. Full PINs, recovery codes, and original device identifiers are not shown in the admin tools.

Community chat, presence, profiles, translation, and notifications

Public community messages, display names, usernames, profile pictures, badges, and online or idle state are visible to signed-in users. Beta members may upload a small profile image, which is stored with their ScriptNovaa profile. Exact last-active times are shown only when the user enables that setting. Public messages are automatically removed after approximately 48 hours. New private-message bodies are encrypted at rest with authenticated server-side encryption and require a PIN-verified temporary unlock before participants can read them. Message previews and private-message notifications do not contain the message body. This is not end-to-end encryption: authorized ScriptNovaa administrators can decrypt and review private messages for safety, moderation, abuse investigations and legal compliance. Older private messages may be migrated as conversations are updated.

When automatic chat translation is enabled, readable message text may be sent to ScriptNovaa’s configured Gemini translation service; users can disable translation in Settings and view the original message. ScriptNova Language is a reversible coded display format, not encryption. The optional Delete PIN opens a coded privacy view and disables ScriptNovaa translation tools for two days; it does not delete messages. Reports, blocks, mutes, warning records, announcements, and notification entries are stored to provide these controls. Browser notifications remain off until the user grants browser permission.

Privacy Guard limitations

Privacy Guard is on by default and covers sensitive ScriptNovaa pages when the browser tab loses focus, becomes hidden, is printed, is left inactive, or is manually shielded. A possible-viewing notice appears only after a browser-visible signal such as the page becoming hidden or losing focus. That signal does not prove anyone recorded or viewed the screen, so ScriptNovaa describes it only as something we think may have happened. If you dismiss that notice, this browser remembers the choice and does not show it again unless its site data is cleared. Privacy Guard is a visual privacy aid, not copy protection or digital-rights management. A website cannot reliably detect every viewer or prevent screenshots, browser extensions, cameras, screen sharing, screen recording, operating-system capture or another device from viewing the screen.

Security and retention

Direct public access to the Realtime Database is disabled. Trusted API routes perform sensitive changes. Operational records may be retained for security, fraud review, account support, appeals, dispute handling, and enforcing product rules.

Your choices

You can stop using Share Browser, sign out of the website, avoid optional sponsored links, and contact Support about account or privacy questions. Losing both the PIN and recovery code may make account recovery impossible.

Project Z

Project Z shares your ScriptNovaa account, points and registered computer. Its API receives a Windows device proof over HTTPS and stores a keyed hash, plus your chosen search provider, local-data mode, token and session timing. Direct Google, DuckDuckGo and Bing browsing does not send page contents or browsing history to ScriptNovaa. When Snova is selected, the search query is sent to the ScriptNovaa API to obtain results.

Standard mode stores sign-ins and website data in a separate local profile for your account. Privacy mode uses a temporary profile and attempts to remove it when the session ends; crashes, file locks, backups and operating-system records may leave traces. Saved Project Z connection credentials are protected using Windows user encryption. The optional import of an existing Share Browser connection is verified against this computer and the API.

This release uses a direct connection, not a VPN or full website proxy. Visited sites receive your normal network address and may retain their own records. Project Z uses Windows' built-in legacy web component and can also open a page in your default modern browser; search providers and visited websites apply their own privacy policies.

Galaxy Browser

Galaxy shares the connected computer and account credential used by other ScriptNovaa browsers. The API stores Galaxy token type, selected experience, selected search provider or browser, local-data mode, session timing and authorization heartbeats. Multi-use session credentials are protected with Windows user encryption on that computer.

Snova sends search terms to the ScriptNovaa API, which relays them to DuckDuckGo and may use another search source when DuckDuckGo is unavailable. ScriptNovaa does not proxy the destination website: opening a result makes a direct connection using your normal public IP. Search providers and destination websites receive information under their own privacy policies.

Galaxy's current ScriptNovaa sponsored capsule is a local demonstration and does not produce advertising rewards. Standard managed-browser mode keeps a dedicated local profile. Temporary mode attempts to remove its session profile after closure, but Windows locks, backups, crashes and operating-system records may leave traces.