Privacy Policy

Vector is an independent two-person studio operated by Diego and Nawer and is the controller of personal data processed through vector.rip and the Vector authentication service. Privacy, access, deletion or correction requests can be sent to staff through the official Vector Discord server. We may ask for enough information to verify that a request concerns your account before acting on it.

• Account data: username, email address, a password-derived hash, account status, role, creation time and assigned product access.
• Device and release data: a protected identifier derived from your device identifier, device switch history and cooldown state, last-seen time and IP address, product and current loader or DLL version.
• Security and service data: IP address, request identifier, authentication results, sessions, downloads, launches, integrity and replay checks, rate-limit events, admin actions and other audit events.
• Cloud configurations: product settings you choose to save, configuration names and descriptions, account ownership, product and schema versions, revisions, visibility and server timestamps. The supported settings registry excludes credentials, device identifiers, people lists and local file paths. Do not put personal or confidential information in names or descriptions.
• Support data: messages and any account or diagnostic details you choose to send when contacting staff through Discord.

Vector does not store your plain-text password or raw card details. The public website currently uses no advertising or behavioural analytics cookies.

We use account, entitlement and release data to perform the service contract: create and authenticate accounts, show assigned products, provide current downloads and maintain device-bound access.

We use device, IP, integrity and audit data for our legitimate interests in preventing account sharing, cracking, fraud, abuse and attacks; enforcing cooldowns and bans; debugging failures; and protecting users and the platform. We may also process records to comply with legal obligations or establish, exercise or defend legal claims.

The account service uses essential, secure cookies for the signed-in session, cross-site request forgery protection and short-lived notices. They are required for account features and are not used for advertising.

Sign-in and registration use Cloudflare Turnstile to detect automated abuse. Cloudflare processes the technical data needed to provide that security check, but does not receive the values entered into Vector form fields through Turnstile.

Saved configurations start as private drafts. They are linked to your account so you can manage them across supported product sessions. We store and process these settings to provide the configuration library. Private drafts are not shown to other users or in the ordinary administrator moderation interface.

Publishing is your explicit choice. It creates a separate snapshot with its name, description, settings, revision and your public username. Other signed-in users may see the community listing; access to load or copy settings is subject to the product access rules. Later draft edits remain private until you publish an updated snapshot. Administrators can review and hide public snapshots for moderation.

You can unpublish or delete your own configuration. Copies or exports already obtained by other users are independent and cannot be recalled by deleting or unpublishing the original. Saved configurations are included in encrypted recovery backups. Deleted data may remain in those protected backups until their normal 30-day retention period ends. Temporary mutation-retry records expire after 24 hours and are excluded from recovery data.

Apart from configurations you choose to publish as described above, data is available to authorised Vector administrators and service providers that need it to operate or secure the platform. These include Cloudflare for network protection, routing and Turnstile, and infrastructure providers that host or back up the service. Discord processes data under its own policy when you contact us there.

We may disclose limited records to advisers, payment providers or lawful authorities when necessary for a transaction, legal compliance, platform security or a legal claim. We do not sell or rent personal data.

Account and entitlement records are kept while the account or access remains active and afterwards only as long as needed for support, security, disputes, accounting or legal duties. Short-lived sessions, challenges, replay windows and rate-limit state expire automatically. Security and audit reports are retained for 180 days and administrative audit records for 730 days. Encrypted recovery sets and retained runtime logs age out after 30 days under the backup schedule. A record may be kept longer where reasonably necessary for an active security investigation, dispute, legal claim or legal obligation.

Vector uses access controls, encryption in transit, password hashing, keyed device identifiers, authenticated releases, least-privilege service accounts, audit logging and protected backups. No system can guarantee absolute security, so report suspected compromise promptly.

Depending on your location, you may request access to, correction of, deletion of, restriction of or portability of your personal data, and may object to processing based on legitimate interests. You may also complain to your local data-protection authority. These rights can be limited where records must be kept for security, legal claims or another lawful reason.

Password recovery and privacy requests are handled by staff through the official Discord server. If you request account deletion, active access and existing sessions may be permanently lost.

Some providers, including Cloudflare and Discord, may process data outside your country. Where required, transfers rely on adequacy decisions, contractual safeguards or another lawful transfer mechanism made available by the provider.

We update this policy when the service, providers or law changes. The date above identifies the current version. Material changes will be presented through the website or account service where required.