Privacy Policy

Last updated: 5 September 2026

Mighty Scripts, also written as MightyScripts, is the trading name of Mighty Codes, a sole proprietorship. This policy explains how we handle personal information when you use our website, account, products, licenses, support, reviews, and comments.

1. Information We Collect

Depending on how you use the website, we may collect:

• Account and billing details, including your name, username, email, company, billing address, tax information, newsletter choice, and securely hashed password.
• Newsletter details for account holders and guest subscribers, including an optional name, email address, consent and confirmation dates, subscription status, unsubscribe dates, and operational campaign-delivery history.
• Purchase, invoice, refund, license, registered-domain, access, and download information. An authorized download record may include your account, order, product version, time, and IP address.
• Messages and information you provide for contact or support, such as website details, product versions, screenshots, and error reports.
• Reviews, comments, replies, ratings, usernames, and timestamps, including public buyer reviews imported from CodeCanyon.
• Technical, usage, cookie, security, and fraud-prevention information, such as your IP address, browser, device, approximate location, visited pages, and risk indicators.

Do not send passwords, private keys, root credentials, or unnecessary confidential information through ordinary messages.

2. Payments and How We Use Information

Paddle is our authorized reseller and payment provider. It processes payment-card details under its Privacy Policy. Mighty Scripts does not receive or store your full card number.

We use personal information to create and secure accounts, process purchases and refunds, deliver downloads, operate licenses, provide updates and support, confirm and deliver requested newsletters, honor opt-outs, moderate public content, communicate with you, improve and protect our services, enforce our Terms of Use, and meet legal, tax, accounting, and regulatory duties.

Depending on the activity and applicable law, we rely on our contract with you, legal obligations, legitimate business and security interests, consent where required, or the establishment and defense of legal claims.

3. Public Content

Approved reviews, comments, replies, associated member usernames, ratings, and timestamps may be public and may be indexed or copied by others. Administrator-authored comments and replies appear under the generic Support Team identity rather than the administrator's account username. Some reviews originally published on CodeCanyon may also appear on the corresponding product page with their public attribution and source link. We may moderate or respond to submissions. Do not include personal, confidential, or sensitive information in public content.

4. Cookies and External Services

We use essential cookies for sessions, security, authentication, and remembering your cookie-notice acknowledgement. Blocking them may prevent website features from working.

Google Analytics is active and may collect browser, device, approximate-location, referring-page, visited-page, session, and interaction information. We may also use Google Ads for conversion measurement, Google Fonts, and Google reCAPTCHA or Cloudflare Turnstile on account, checkout, contact, and newsletter forms. These providers handle information under their own privacy policies; Google's is available here.

Our cookie notice is informational and includes an acknowledgement action. You may control cookies through your browser or device settings.

5. Emails

We may send service messages about your account, security, purchases, payments, licenses, downloads, updates-and-support access, refunds, support, public submissions, products, policies, or the website.

You may subscribe to the newsletter as a guest with an email address or through your account. New guest subscriptions submitted through the public form require email confirmation. Administrators may correct a stored newsletter name or status when handling consent, correction, or opt-out records. If an address was previously unsubscribed, deliberately selecting the newsletter option during account registration creates a new request that becomes active only after you verify the account email. If the address is already subscribed, leaving that option unchecked withdraws the subscription only after account verification; it is not changed before ownership is verified. When you verify an account email change, the old newsletter address is unsubscribed and newsletter consent is not transferred to the new address; you can enable newsletters again from member settings. We send marketing newsletters only to active subscribers, address each message individually, and include a no-login unsubscribe link. Unsubscribing does not stop necessary account, security, order, payment, license, download, or support messages. Earlier marketing contacts and prior opt-out records may be carried into the current system so that existing permissions and unsubscribes continue to be honored.

6. Sharing and International Processing

We share information only when reasonably necessary with Paddle, Google, Cloudflare when used, fraud and security providers, email providers, hosting and infrastructure providers, professional advisers, or authorities where legally required. These providers may process information in other countries and must use recognized safeguards where applicable law requires them.

7. Retention and Security

We retain information only as long as reasonably needed to provide accounts, purchases, licenses, downloads, newsletters, support, moderation, security, refunds, and dispute handling, or to meet legal, tax, accounting, and backup requirements. Abandoned unconfirmed newsletter requests are normally deleted after 30 days unless the record must remain to preserve an earlier opt-out. We may retain unsubscribe information for as long as reasonably needed to make sure the address is not contacted again, and retain campaign delivery results for operational, security, and dispute-handling needs. If a newsletter subscriber record is deleted, historical campaign delivery results may still retain the address snapshot used for that delivery. When other information is no longer needed, it may be deleted or anonymized. Service providers may retain information under their own policies and legal duties.

We use reasonable technical and organizational safeguards, but no website, server, database, or internet transmission is completely secure. You are responsible for protecting your account and securing your own hosting and installed products.

8. Privacy Requests

Depending on applicable law, you may ask us to correct, delete, or anonymize eligible information, object to eligible processing, or stop marketing messages. Submit a request through the Mighty Scripts contact form. We may verify your identity, and legal or contractual record-keeping requirements may limit a request.

9. Children, Changes, and Contact

The website and products are intended for people who are at least 18 and have legal capacity to purchase. Otherwise, a parent or legal guardian must make the purchase. If we learn that an ineligible child provided personal information, we will handle it as required by law.

The latest published version of this policy replaces earlier versions from its effective date for ongoing and future use, while preserving mandatory or already-accrued rights. Material changes may be communicated through the website, member account, or account email, and separate consent will be requested when legally required.

For privacy questions or requests, use the Mighty Scripts contact form.