Terms and privacy

wolfscript scripts are free, provided as-is, and used at your own risk. Roblox can act on any account that runs third-party code, and we cannot prevent or undo that. We are not affiliated with Roblox Corporation.

Do not resell, repackage, or redistribute our scripts. Do not dump, decompile, or reverse engineer the delivery lock or a compiled build, and do not try to get around it, share a key, or use the scripts to harass other players. Nothing here is sold, so there is nothing to refund.

Every time a script loads, two systems record the run: the delivery lock at v1.wolfscript.cc, and launch telemetry at webhook.wolfscript.cc. Between them they receive:

• Your Roblox user id, username, and display name.
• The game, place, and server (job) you were in, and which script and version ran.
• Your executor's name, your platform, and the device and account identifiers your executor sends with the request (a client id and any fingerprint header).
• Your IP address, which is turned into a keyed hash on arrival (see section 4). We also keep the country, the network (ASN), and the user agent that Cloudflare reports for the request. We do not keep your city or region.
• Whether the request was served or refused, and if it was refused, the reason.

We do not collect your Roblox password, your cookie, your email address, or anything from your files. The profiles you save in a script stay on your own machine.

We do not score, rate, or profile you. A request is either let through by a fixed rule or refused with a reason, and there is no risk score behind it.

To deliver the script to the right person, to stop dumpers and resellers, to ban people who abuse it, and to count how many people use each script. Our legal basis under the GDPR and the UK GDPR is legitimate interests: running the service and protecting it from abuse. You can object to any of it (section 7). We do not sell the data, use it for advertising, or build behavioural profiles: the lock applies fixed rules, and it does not score you.

We do not store your IP address. Our servers replace it with a keyed hash before anything is logged, posted to a staff channel, or written to a database. The same address always produces the same hash, which is how a ban or a rate limit still works, but the hash cannot be turned back into the address without a secret key that stays on our servers.

A hash is still personal data under the GDPR because it identifies a network over time, so it follows the same retention and deletion rules as everything else.

• Launch telemetry: 30 days.
• Delivery lock logs (unlocks, refused attempts, loader requests): 90 days.
• Bans on an account, device, or network: up to 180 days, then they lapse on their own. A ban can be shorter. We keep a ban this long because it is the only way to stop someone who was removed for abuse from coming straight back.
• Staff notes are removed together with everything else when you ask us to erase your data.

We removed the risk score and its reasons from the lock on 9 October 2026, and deleted every recorded value with it. Nothing replaced it.

Our servers run on Cloudflare (Workers, KV, and D1), which processes the data for us. Our staff see refused attempts and abuse alerts in a private Discord channel. Cloudflare may process data outside your country, under its own data processing terms. We do not give the data to anyone else unless the law requires it.

If the GDPR or the UK GDPR applies to you, you can ask us for a copy of your data, to correct it, to erase it, or to stop using it, and you can complain to your local data protection authority. To do any of that, email privacy@wolfscript.cc and give us your Roblox user id or username. We may ask you to prove the account is yours, and we will reply within 30 days.

Erasing your data removes your launch records, lock logs, staff notes, and any key tied to your account, along with the device and network identifiers on those records. If you were banned, we may keep the ban until it lapses, because deleting it would let a removed account straight back in. Tell us if you want it lifted and we will look at the case.

We can refuse or revoke access to any script, key, or account at any time. You are responsible for what you run on your own account.

If a script asks for a key, the key is yours alone. Do not share it. We tie keys to your account and device, and a shared key will be revoked.

We may change these terms. The date at the top shows the latest version, and running a script after a change means you accept it. If you do not agree with these terms, do not run our scripts.