Who is responsible
The controller of your personal data on pnscripts.com, hosting.pnscripts.com, games.pnscripts.com and blog.pnscripts.com is ПН СКРИПТС ЕООД, EIK 208334324. Write to office@pnscripts.com about anything in this notice. We have not appointed a data protection officer; the same address reaches the person responsible.
What we process and why
We collect only what a task needs. Each line names the purpose, the legal basis under the GDPR and how long we keep the data.
- Contact form: your name, email address and message, plus the IP address and browser name of the request, used against spam. Purpose: answering you. Basis: steps you ask for before a contract, art. 6(1)(b), and our legitimate interest in answering enquiries and keeping the form free of abuse, art. 6(1)(f). Kept 24 months after the last message, unless it leads to a contract.
- Project brief and technical call forms: your name, email address and answers, plus IP address and browser name against spam. Purpose: preparing an offer. Basis: art. 6(1)(b). Kept 24 months, unless it leads to a contract.
- Clients and contracts: contact and billing details, the contract and invoices. Basis: the contract, art. 6(1)(b), and our duties under Bulgarian accounting and tax law, art. 6(1)(c). Accounting records are kept for the periods that law sets (up to 10 years).
- Hosting and domain orders on hosting.pnscripts.com: when the order page opens, your IP address is sent to our hosting platform provider ResellersPanel only to preselect your country; when you order, your name, contact and address details, the order and the IP address go to its system, which creates the account, bills it and registers the domain. Basis: art. 6(1)(b) and (c); the country preselection rests on our legitimate interest in a simpler form, art. 6(1)(f). The provider keeps these data under its own terms; we keep no copy on this site.
- Server logs: IP address, page, time and browser of each request, kept by our hosting provider for security and troubleshooting. Basis: art. 6(1)(f). We do not use them to identify visitors.
- Visit statistics (Google Analytics 4): only with your consent, art. 6(1)(a). Pages viewed, approximate country, device type, the part of the site and simple events such as a sent form, a started game, the hosting plan chosen and the steps of a hosting order. No names, emails, domain names you search for or order numbers. Cookies last 13 months; Google keeps the event data 14 months.
- Your cookie choice: an anonymous random id, the choice, the time, the site and the language, with no IP address. Basis: our duty to show consent, art. 6(1)(c) with art. 7(1). Kept 3 years.
- Privacy requests: your email address, the request and our answer. Basis: art. 6(1)(c). Kept 3 years after the answer; an unconfirmed request is deleted after 30 days.
- Spam protection of forms (Google reCAPTCHA): loads only after you start filling in a form and checks that a person is sending it. Basis: our legitimate interest in the security of the form, art. 6(1)(f). Google receives your IP address and browser data and sets its own cookie.
Blog comments
Comments, reactions, votes and reports on blog.pnscripts.com start only when you act. We publish your display name, the comment and its date; an email address is optional and used only for reply notifications you confirm by one link and can stop with one click (consent, art. 6(1)(a)). The strictly necessary cookie pn_reader counts one reaction or vote per reader and lets you edit or delete your own comments. Basis: publishing your comment, art. 6(1)(b); protection against spam and abuse, art. 6(1)(f). Held, spam and removed comments are deleted after 30 days, unconfirmed notification requests after 7 days and closed reports after 6 months. The blog privacy page has the details.
Recipients and processors
We do not sell personal data or share it for others' advertising. These providers process data for us, under contract and our instructions, or as independent controllers where stated by their own terms:
- ResellersPanel / DuoServers hosting platform (Data centre in Sofia, Bulgaria (EU)): Hosts the sites, their database, server logs and our office@ mailbox.
- ResellersPanel (LiquidNet US LLC / LiquidNet Ltd.) (USA and United Kingdom; servers in the data centre you choose): Hosting and domain orders on hosting.pnscripts.com: the order, the account, billing and domain registration run on their platform. Transfer safeguard: United Kingdom: EU adequacy decision; USA: Standard Contractual Clauses.
- Google Ireland Ltd. (reCAPTCHA) (Ireland; Google LLC, USA): Spam protection of our forms, loaded only after you start a form. Transfer safeguard: EU-US Data Privacy Framework (Google LLC is certified) and Standard Contractual Clauses.
- Google Ireland Ltd. (Google Analytics 4) (Ireland; Google LLC, USA): Visit statistics, only with your consent to Analytics. IP addresses are not stored by GA4; no advertising features unless you allow Advertising. Transfer safeguard: EU-US Data Privacy Framework (Google LLC is certified) and Standard Contractual Clauses.
Transfers outside the EU
Some providers are in the United States or the United Kingdom. Transfers to the UK rely on the European Commission's adequacy decision. Transfers to the USA rely on the EU-US Data Privacy Framework where the recipient is certified (Google LLC is; the EU General Court upheld the Framework in case T-553/23 on 3 September 2025, and an appeal, C-703/25 P, is pending), and on the European Commission's Standard Contractual Clauses, which Google includes in its data processing terms, as a fallback. Ask us at office@pnscripts.com for a copy of the safeguards.
Your rights
Under articles 15 to 22 of the GDPR you have these rights, free of charge:
- Access: a copy of the data we hold about you and how we use it (art. 15).
- Rectification of data that is wrong or incomplete (art. 16).
- Erasure ("right to be forgotten") when we no longer need the data or you withdraw consent (art. 17), except what the law makes us keep.
- Restriction of processing while a question is being checked (art. 18).
- Portability: the data you gave us in a common machine-readable format (art. 20).
- Objection to processing based on our legitimate interests, and to direct marketing at any time (art. 21).
- Withdrawal of consent at any time, without affecting what was done before (art. 7(3)). For cookies, use "Cookie settings" at the bottom of every page.
- We make no decisions about you by automated means alone, and do no profiling (art. 22).
How to use your rights
Send a request with our privacy request form or write to office@pnscripts.com. To protect your data, we confirm that the email address is yours with a link before we act. We answer within one month; when a request is complex we may extend this by two more months and will tell you why.
Complaints
You may complain to the Bulgarian supervisory authority: Commission for Personal Data Protection (Комисия за защита на личните данни), 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria, kzld@cpdp.bg, www.cpdp.bg, or to the authority where you live or work. We would be glad to try to solve the issue first at office@pnscripts.com.
Children
Our services are not aimed at children. Where processing relies on consent, a child under 14 needs the consent of a parent (art. 8 GDPR and the Bulgarian Personal Data Protection Act). If you believe a child sent us data, write to us and we will delete it.
Security
All pages use HTTPS with HSTS. Session cookies are secure and closed to scripts, forms are protected against forged requests, and access to our administration is limited to staff with individual accounts.
Changes to this notice
When we change how we process data, we update this notice and its date. If a change needs a new choice from you, the cookie banner asks again. This version: 2026-11-07.
Business outreach
Now and then we write to a company whose work our services could help, at a business email address that the company publishes on its own website. This section is the information we owe you under article 14 of the GDPR when we did not get the address from you.
- Controller: ПН СКРИПТС ЕООД (PN Scripts), EIK 208334324, office@pnscripts.com.
- Data: the company name and its published business email address, the name and role of a contact person only where the company publishes them, our message and your reply.
- Source: the company's own public website. We do not buy or rent contact lists.
- Purpose: one short, relevant business message about our services, and the follow-up you ask for.
- Legal basis: our legitimate interest in offering our services to businesses (GDPR art. 6(1)(f)). We weighed it against your interests: we write only to business or role addresses a company publishes, only about services that fit its work, at most two short follow-ups, and every message says who we are and how to say no. Before writing we check the register of the Commission for Consumer Protection for addresses that refuse unsolicited commercial email.
- Retention: up to 12 months after our last message, unless you become a client; then the terms of the contract apply.
- Do-not-contact list: if you say no, we keep only the address and the date on a permanent do-not-contact list, so that we never write to you again.
- Your right to object (GDPR art. 21): reply “no” to any of our messages, or write to office@pnscripts.com, and we stop at once. You also have the rights of access, rectification, erasure and restriction described above.
- We do not share these data with anyone, transfer them outside the EU, or use them for automated decisions or profiling.
- Complaints: you may complain to the Commission for Personal Data Protection of Bulgaria (www.cpdp.bg) or to the supervisory authority where you live or work.
Operator of this site: ПН СКРИПТС ЕООД, EIK 208334324