Legal
Privacy Policy
Last updated: April 2026. Your privacy matters.
This Privacy Policy describes how XIU Script collects, uses, and shares information when you use this website and services — including account top-up services. By using these services, you agree to the practices described in this policy.
1. Information Collected
Information you provide: When you contact XIU Script or make a purchase via Telegram, you may provide your Telegram username, transaction details, and communication history.
Automatically collected information: When you visit this website, standard log data such as IP address, browser type, pages visited, and timestamps may be collected. This data is used to understand traffic patterns in an anonymous, aggregated manner.
Not collected: passwords, payment card details (transactions are handled via third-party processors), or any personally identifiable information beyond what you voluntarily provide.
2. How Your Information Is Used
The information collected is used to:
- Process and fulfill your purchases
- Provide customer support and respond to inquiries
- Deliver scripts, license keys, and account services
- Improve this website and services
- Send important service announcements (not marketing spam)
- Comply with legal obligations
3. Information Sharing
XIU Script does not sell, rent, or trade your personal information. Information may be shared only in these limited circumstances:
- Service providers: Third-party tools that help operate this service (e.g., Hostinger for hosting, analytics)
- Legal requirements: If required by law, court order, or governmental authority
- Business protection: To protect the rights, property, or safety of XIU Script or its users
4. Data Retention
Information is retained for as long as necessary to provide services and comply with legal obligations. Purchase records may be kept for accounting purposes. You may request deletion of your personal data by contacting XIU Script via Telegram.
5. Third-Party Services
These services involve third-party platforms that have their own privacy policies:
- Telegram: Purchases, support, and service orders are handled via Telegram. Their privacy policy applies to those interactions.
- Hostinger: This website is hosted on Hostinger. Their infrastructure may collect standard server log data.
- YouTube: Review videos are embedded from YouTube. Google's privacy policy governs those interactions.
- MediaFire: Free script files are hosted on MediaFire. Their terms apply to downloads.
6. Account Service Data
When you order an account service (resource top-up such as diamonds, coins, or unlocks), the service requires temporary login access to your game account. This section explains exactly how that data is handled.
6.1 What Is Accessed
For a service order, game account credentials are provided via Telegram. Access includes:
- Your game account login (username or email and temporary password)
- Only the specific in-game area required to complete the top-up
- Nothing else — no payment details, linked accounts, personal profiles, or unrelated game data
6.2 What Is NOT Stored
A strict no-retention policy applies to account credentials:
- Login credentials are not saved, logged, or recorded in any database or file
- No screenshots or recordings of your account are retained
- Credentials shared via Telegram are used once for order fulfillment and then discarded
- It is strongly recommended that you delete the credential message from your Telegram chat after service completion
6.3 Data Security for Services
The following precautions are taken when handling service orders:
- All communication happens exclusively through the verified Telegram account @whoisxiu
- Credentials are never requested through any other channel (email, other Telegram accounts, websites, or automated bots)
- Access is performed manually — no automated systems process your credentials
- A need-to-know basis applies: only the person fulfilling your order sees your credentials
6.4 How to Protect Yourself
The following steps are recommended when ordering a service:
- Use a temporary password: Change your password to a temporary one before sharing, then change it back (or to a new one) after the service is done
- Unlink social logins temporarily: If your account is linked to Google/Facebook, consider using email login with a temporary password instead
- Verify identity: Only communicate with @whoisxiu on Telegram — check the username carefully for typos or imposters
- Review your account after: Check your account activity and linked devices after service completion
6.5 Consent
By placing a service order and sharing your credentials, you give informed, explicit consent to temporary account access for the sole purpose of fulfilling that order. This consent is voluntary, purpose-limited, and revocable — you may cancel your order before credentials are shared by messaging @whoisxiu on Telegram.
7. Cookies
This website uses minimal cookies — primarily session storage to remember user preferences like dismissed announcements and your shopping cart. No tracking cookies or advertising cookies are used. You can disable cookies in your browser settings, though some site features (like the cart) may not function correctly.
8. Children's Privacy
These services are not directed to children under 13 years of age. XIU Script does not knowingly collect personal information from children. If you believe a child has provided personal information, please get in touch via Telegram to have it removed.
9. Security
Reasonable measures are taken to protect your information. However, no method of transmission over the internet or electronic storage is 100% secure. Absolute security of your data cannot be guaranteed. For service orders specifically, the strict no-retention policy described in Section 6 is followed.
10. Your Rights
Depending on your location, you may have the right to:
- Access the personal data held about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict the use of your data
- Withdraw consent for service orders before processing begins
To exercise these rights, contact XIU Script via Telegram: @whoisxiu
11. Changes to This Policy
This Privacy Policy may be updated from time to time. Users will be notified of significant changes via the Telegram channel. The "last updated" date at the top of this page reflects the most recent revision.
12. Contact
Questions about this Privacy Policy? Contact XIU Script: @whoisxiu on Telegram.