Back to home

Privacy policy

Updated October 18, 2026

What data passes through weroscripts.com and the Cookies Hub scripts, what it's used for and what you can do about it. Short and with no fine print: we keep almost nothing.

On this page

In short

  • There are no accounts, sign-ups or forms: we never ask for your name, email or password.
  • We don't use analytics, tracking pixels or ads on this site.
  • We don't sell, rent or share data for commercial purposes.
  • We only process the minimum technical data needed to serve the site and protect it from attacks, and we delete it quickly.

Who is responsible

This site is run by Cookies Hub (Lilwero20), at the domain weroscripts.com. For anything about privacy, write to us on our Discord server (support channel or a message to an admin).

What data is processed and why

DataPurposeLegal basisHow long
IP address, browser (User-Agent), requested page and timeServe the site and detect attacks: rate limiting, blocking bots and scannersLegitimate interest in keeping the site secureIn server memory for up to 24 h; in Vercel's logs for the limited time set by its plan
Security alerts (partial IP, path, browser)Notify us in a private Discord channel when someone attacks the siteLegitimate interest (security)Until we delete them from the channel
Browser reports about blocked content (CSP)Detect attempts to inject code into the siteLegitimate interest (security)Same as Vercel's logs
Your chosen language (NEXT_LOCALE cookie)Show you the site in your language next timeNeeded for a feature you ask for1 year, or until you delete it

More detail about the cookie and local storage in the cookie policy.

When you use the scripts and keys

The scripts run in your executor inside Roblox. This site receives nothing from them. What does happen:

  • To get a key you go to KeyForge, an external service. Its own terms and privacy policy apply there, and it may show you ads or verification steps.
  • When the key is checked, the script sends KeyForge the key and an identifier of your device (HWID) to tie the key to your machine and stop it from being shared.
  • In the KeyForge dashboard we can see the status of keys (active, expired, tied to a device) to give support and stop abuse. We don't see your Roblox account or your name.
  • The key is saved in your executor's local folder so you don't have to type it every time. You can remove it by deleting that file.

Who it's shared with

  • Vercel Inc. hosts the site and receives the technical data of each visit to serve it.
  • Discord Inc. receives the security alerts (with the IP cut short) in our private channel.
  • KeyForge processes the key and HWID when you check it, as explained above.
  • YouTube (Google) receives your IP and browser data only if you press play on a video embedded in the blog.

Discord, GitHub, KeyForge and Roblox are external sites: if you go to them from our links, their policies apply, not this one. The same goes for the blog's links: link shorteners and script creators' pages may use their own cookies, ads and tracking. Our links don't tell them which page you came from.

Transfers outside your country

Vercel and Discord have servers in the United States and other countries. Both companies use the safeguards the law provides for these transfers, such as the European Commission's standard contractual clauses or the EU-U.S. Data Privacy Framework.

Children

Many Roblox players are minors. This site doesn't ask anyone for personal data and doesn't try to find out who you are. If you are under your country's minimum age to consent online (13 to 16 depending on the country), use the site and scripts with your parents' or guardians' permission. If you are a parent or guardian and think we have any data about your child, write to us and we'll delete it.

Your rights

You can ask to access your data, correct it, delete it, restrict its use or object to it. Write to us on Discord and we'll reply within one month at most.

Since we keep very little data and only for a short time, we may no longer have anything of yours. If you're not happy with our answer, you can complain to the data protection authority in your country.

How we protect the site

Encrypted connection (HTTPS), content security policy, rate limiting, blocking of malicious bots, signed webhooks and automatic checks for vulnerable dependencies. No system is perfect: if you find a flaw, tell us privately (see /.well-known/security.txt).

Changes to this policy

If we change anything important, we'll update this page and the date above, and announce it on Discord.

Questions about these texts? Ask on Discord and we'll answer.