Privacy policy
Last updated 27 September 2026
The short version: we collect what we need to sell you a script and support it, nothing for advertising, and no tracking. Each point has a reference, like 2(c), and our Terms use the same format.
1.Who we are
2.What we collect
- 2(a)Purchase details, received from Whop when you buy: your name, email address, Whop user ID, the product you bought, the date and the amount. We never see or store your card or bank details; Whop handles payment.
- 2(b)Account details, when you log in with Whop: your Whop user ID, username, email and which Lura scripts you own, so we can unlock your downloads and guides.
- 2(c)Support conversations: the messages you send us through the support chat, email or our Discord, and the details you include in them.
- 2(d)Build details, when you use the LuraNBA build customiser: the settings you chose and a build identifier stamped into your file, so we can support that build and trace a leaked copy back to its licence.
- 2(e)Technical data: our host automatically records basic request logs (such as IP address, browser and the page requested) to keep the site running and secure.
3.What we do not collect
4.Why we use it
- 4(a)To deliver what you bought: unlocking downloads and guides, and sending updates for your script. The basis is the contract you enter when you buy.
- 4(b)To answer support requests and keep a record of them. The basis is our contract with you and our legitimate interest in helping customers well.
- 4(c)To protect the business: preventing fraud, handling chargebacks, and investigating shared licences and leaked files under section 4 of our Terms. The basis is our legitimate interest.
- 4(d)To meet legal duties such as tax and accounting records.
5.Who handles it for us
- 5(a)Whop, for checkout, payments, account login and confirming what you own.
- 5(b)Vercel, which hosts the site and keeps its request logs.
- 5(c)Discord, if you join our server or contact us there.
- 5(d)Each provider processes data only for its own function and under its own privacy terms. Some are based outside your country, including in the United States; where data leaves the UK or EU, it is covered by the provider's standard contractual safeguards.
- 5(e)We may also disclose data where the law requires it, or to establish or defend a legal claim.
6.Your rights
- 6(a)You can ask for a copy of the data we hold about you, ask us to correct it, or ask us to delete it.
- 6(b)Where the law gives you the right, you can object to or restrict how we use it, and receive it in a portable format.
- 6(c)Send any request through Support in the User hub on lura.gg, logged in with the Whop account you bought with, so we know it is you. We reply within 30 days.
- 6(d)If you are unhappy with how we handled your data, you can complain to the data protection authority where you live.
7.How long we keep it
- 7(a)Purchase and licence records: for as long as you hold a licence, then as long as tax and accounting law requires.
- 7(b)Support conversations: up to two years after the last message, unless a dispute needs them longer.
- 7(c)Build identifiers: for the life of the licence, since they are how a leaked file is traced.
- 7(d)Request logs: kept by our host for its standard short period, then deleted.
8.Security
- 8(a)Data is held by the providers in section 5, over encrypted connections, and only the people who run Lura can reach it. No system is perfectly secure, and we will tell you promptly if a breach affects your data.
9.Children
- 9(a)Lura is not meant for children. Buyers must meet the age requirement in Terms 1(a), and we do not knowingly collect data from anyone younger.
10.Changes
- 10(a)We may update this policy. The date at the top shows the latest version. If a change affects how we use data you have already given us, we will tell you before it takes effect.