> For the complete documentation index, see [llms.txt](https://docs.zaroguard.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.zaroguard.com/faq.md). # FAQ ## Frequently Asked Questions **Last updated: August 3, 2026** This FAQ explains common ZaroGuard behavior for developers and users of protected scripts. For binding rules and data-handling details, also read the Terms of Service and Privacy Policy. ### General #### What is ZaroGuard? ZaroGuard is a script-protection and delivery service. It provides script obfuscation, staged delivery, temporary tokens, key-system controls, HWID access controls, execution analytics, anti-tamper checks, and optional Discord webhook notifications. #### Does ZaroGuard own a developer's script? No. A developer keeps the rights they lawfully hold in their script. The developer gives ZaroGuard permission to process, protect, store, and deliver it as required to provide the service. #### Does ZaroGuard store my raw uploaded script? ZaroGuard processes the raw upload to create a protected or obfuscated payload. The resulting protected payload is split into database chunks and retained for authorized delivery. ZaroGuard does not intentionally retain the original raw upload after protection completes. Developers should always keep their own original source-code backup. ZaroGuard is not a source-code backup service. #### Does ZaroGuard review every protected script? No. Developers are responsible for the safety, legality, disclosures, and behavior of their scripts. Protection by ZaroGuard does not mean that ZaroGuard endorses or has manually reviewed the underlying script. #### What is an incomplete-stage alert? An incomplete-stage alert means a run reached part of the delivery flow but did not reach MainCode before the monitoring grace period ended. This can happen because the user left, the executor stopped, networking failed, the script errored, or a stage was bypassed. If the client already reported a specific terminal error, ZaroGuard suppresses the later duplicate incomplete-stage alert where possible. ### HWID, Identity, and Bans #### What is an HWID? An HWID is a persistent identifier supplied by the executor or client environment and used for access control. Its format varies. It may be a hash, GUID, fingerprint, Roblox client identifier, or another executor-provided value. #### What causes a ban? Common causes include: * HWID spoofing or hooked identity functions; * identity changes during one run; * direct access to protected delivery endpoints; * token reuse or tampering; * reverse engineering or dumping attempts; * repeated abusive requests; and * an administrator or developer applying a manual restriction. #### Can legitimate users be falsely detected? Yes. Executors expose different functions and may behave differently under obfuscation. Network delays, changed fingerprints, sandboxed functions, and executor bugs can resemble tampering. ZaroGuard includes compatibility handling, but false positives remain possible. #### How do I appeal a ban or security alert? Contact the official support channel and provide: * Roblox username and user ID; * script name or script ID; * executor name and version; * approximate time of the event; * complete displayed error; and * HWID only through a private support channel. ### Executors and Compatibility #### Which executors are supported? ZaroGuard attempts to work with common executor request APIs and load functions, but compatibility cannot be guaranteed. Executors differ in request behavior, loadstring environments, HWID formats, task scheduling, response-size limits, and obfuscator compatibility. #### Why are browsers and Discord preview bots blocked? Protected Lua endpoints are intended for Roblox or executor clients, not browser previews. Discord, crawler, and ordinary browser requests may expose response content or consume temporary links, so they are redirected, denied, or given a safe response. ### Dashboard and Subscriptions #### When does an unstarted subscription begin? An assigned subscription marked `NOT STARTED` begins when the account successfully completes the activation or authenticated login flow that starts the subscription. The expiration date is calculated from that start time using the configured plan duration. #### What are the standard plan limits? Current server defaults are: * **Beta Tester:** 1 script, 3 obfuscations, 7 days; * **Starter:** 3 scripts, 15 obfuscations, 31 days; * **Pro:** 10 scripts, 50 obfuscations, 31 days; * **Elite:** 25 scripts, 150 obfuscations, 31 days; and * **Enterprise:** custom or unlimited limits, 31-day default duration. Plans and custom limits may be changed by an authorized administrator. The dashboard or direct offer should be treated as the current plan description. #### What happens when a subscription expires? Dashboard operations such as uploading, editing, rebuilding, or managing scripts may be restricted. Expiration notifications may be sent through configured webhooks. Contact support to renew or correct an account issue. #### Can Discord be unlinked? Yes. An administrator can remove the Discord OAuth link without resetting or pausing the subscription timer. Contact support if self-service unlinking is not available. #### How are refund requests handled? Contact official support with transaction details. Eligibility depends on the purchase terms, circumstances, and applicable law. Changing your mind, using an incompatible executor, failing to use the service, or violating the Terms does not automatically guarantee a refund. ### Webhooks, Logs, and Privacy #### Why are duplicate alerts suppressed? One failure can be reported by several loader layers or repeated requests. ZaroGuard deduplicates matching client alerts and suppresses incomplete-stage alerts when a specific client failure already explains the stopped run. #### How long are ordinary access logs stored? The current cleanup job schedules ordinary access logs for deletion after approximately 12 hours. Other records—such as account information, subscriptions, protected script chunks, bans, blacklists, and security records—follow different retention rules described in the Privacy Policy. #### Does ZaroGuard collect in-game statistics? ZaroGuard does not intentionally collect inventory, currency, gameplay statistics, or chat messages. A developer's own script may independently collect data, and that behavior is the developer's responsibility. ### Getting Support #### What information should I include in a bug report? Include: * script name and script ID; * approximate event time and timezone; * Roblox username and user ID; * executor name and version; * last completed stage; * exact client-log or kick reason; * relevant HTTP status and server request ID; and * whether the problem affects one user, one executor, one script, or everyone. Remove access tokens, cookies, Discord webhook credentials, tunnel tokens, private keys, and other secrets before sharing logs. #### Where can I get support? Use the official ZaroGuard Discord support channel linked from the ZaroGuard website or documentation. Security, HWID, account, and privacy information should be sent privately rather than posted in public channels.