Effective date: 22 June 2026

Product: TSCR – Top Secret Chrono Crypt

Provider / Licensor: TSCR / the author and rights holder of the Software

Website: https://tscr.x10.mx

1. Introduction

This Security Notice explains important security limitations, user responsibilities and safe-use recommendations for TSCR – Top Secret Chrono Crypt (“TSCR”, “Software” or “Product”).

TSCR is designed as a data-protection, encryption and secrets-management tool. However, no software, encryption system, password manager, secrets vault, device protection mechanism, license protection mechanism or security tool can guarantee absolute protection against all risks.

This Security Notice should be read together with the TSCR End User License Agreement (“EULA”), Terms of Sale, Privacy Policy, Donation Policy, any applicable Cookie Notice and the relevant product documentation.

The EULA governs the license and use of the Software.

The Terms of Sale govern purchase, payment, activation, refunds, cancellations and chargebacks.

The Privacy Policy governs personal data processing.

This Security Notice explains security limitations and safe-use responsibilities.

2. No absolute security guarantee

TSCR is intended to help users protect text, files, secrets, vault data and related information.

However, TSCR does not guarantee:

• absolute security;

• protection against every attack;

• recovery of lost keys, passwords, passphrases or secrets;

• recovery of corrupted or deleted data;

• protection against malware, spyware, keyloggers or compromised operating systems;

• protection against physical access to the device;

• protection against user error;

• uninterrupted online services;

• uninterrupted activation or license verification;

• permanent availability of third-party infrastructure;

• compatibility with every device, operating system, antivirus tool or security configuration.

Security depends on many factors outside TSCR’s full control, including the user’s device, operating system, account security, backups, passwords, passphrases, local storage, malware exposure, physical access and user behavior.

3. User responsibility for keys, passwords and data

You are responsible for choosing, storing, protecting and remembering your keys, passwords, passphrases and secrets.

If you lose or forget a password, passphrase, key, vault credential or recovery information, TSCR may be unable to recover your data.

You are responsible for:

• keeping independent backups of important files and vaults;

• verifying encrypted and decrypted files before deleting originals;

• protecting your device and operating-system account;

• protecting your TSCR license information;

• protecting local configuration and encrypted storage;

• avoiding unnecessary disclosure of secrets;

• understanding the Software before using it on important or irreplaceable data.

TSCR cannot guarantee recovery of encrypted data, vaults, secrets, files, passwords, passphrases, keys or license information if they are lost, deleted, corrupted, overwritten or otherwise inaccessible.

4. Backup recommendation

Before using TSCR on important or irreplaceable data, you should maintain independent backups.

A safe backup strategy may include:

• keeping a separate copy of original files before encryption;

• keeping a separate backup of encrypted files;

• backing up important vault data;

• backing up license and activation information;

• storing recovery information separately from the protected data;

• testing that files can be decrypted before deleting originals;

• avoiding reliance on a single device or single storage location.

TSCR should not be treated as the only copy of important data.

5. Device and operating-system security

TSCR cannot fully protect data on a compromised device.

If your device, operating system, user account or storage environment is compromised, an attacker may be able to access, copy, modify, delete, record or interfere with data before encryption, after decryption or during use.

You are responsible for maintaining appropriate device security, including:

• operating-system updates;

• malware protection;

• safe software installation practices;

• strong device login credentials;

• screen lock;

• physical device protection;

• secure backups;

• protection against unauthorized local users;

• avoiding untrusted scripts, cracks, keygens or suspicious software.

TSCR is not a substitute for a secure operating system or safe computing practices.

6. Malware, keyloggers and screen capture risks

TSCR cannot guarantee protection against malware, spyware, keyloggers, screen recorders, clipboard monitors, remote-access tools or other malicious software running on the user’s device.

Such tools may capture:

• passwords;

• passphrases;

• decrypted text;

• decrypted files;

• clipboard content;

• screenshots;

• keyboard input;

• screen output;

• temporary files;

• vault content while displayed.

For sensitive work, you should use TSCR only on a trusted, clean and properly secured device.

7. Password and passphrase strength

Any password strength, entropy, crack-time or security estimate shown by TSCR is only an approximation.

Such estimates depend on assumptions about attacker capabilities, hardware, algorithms, dictionaries, password reuse, leaked credentials, user behavior and future technological changes.

A strong-looking password may still be unsafe if it is reused, leaked, predictable, stored insecurely or entered on a compromised device.

You are responsible for choosing and protecting strong, unique passwords or passphrases.

8. Encryption and decryption workflow risks

Encryption and decryption operations may fail or produce unintended results due to:

• wrong password or passphrase;

• wrong key;

• corrupted input file;

• damaged storage;

• interrupted operation;

• insufficient disk space;

• unsupported file path or permissions;

• operating-system restrictions;

• antivirus or security-tool interference;

• user error;

• application crash;

• power loss;

• hardware failure;

• unsupported environment.

Before deleting original files, you should verify that the encrypted and decrypted files are correct.

TSCR cannot guarantee recovery if the only valid copy of a file is lost, corrupted, overwritten or encrypted with an unavailable key.

9. Secrets vault and sensitive data

If TSCR includes secrets-vault functionality, you are responsible for protecting vault access credentials and backup data.

Secrets stored in a vault may include sensitive information such as login credentials, account data, API keys, tokens, notes, payment-related records or other private information.

You should not expose vault contents unnecessarily.

You should not send vault contents, passwords, passphrases, keys, decrypted secrets or confidential files to TSCR support, AI providers, cloud services or third parties unless you intentionally choose to do so and understand the risk.

10. Clipboard and temporary data

Some TSCR workflows may use clipboard, temporary files, temporary memory, operating-system dialogs, file previews or external applications.

Clipboard and temporary data may be visible to the operating system, other applications, clipboard managers, malware, remote-access tools or system logs.

For sensitive data, you should:

• avoid leaving secrets in the clipboard longer than necessary;

• clear clipboard content where appropriate;

• avoid using clipboard managers for sensitive secrets;

• avoid opening decrypted files in untrusted applications;

• close decrypted files when no longer needed;

• securely delete temporary copies where appropriate.

TSCR cannot guarantee complete removal of all temporary traces created by the operating system, third-party applications, file managers, previews, indexing services, backup tools or security software.

11. Online features and third-party services

Some TSCR features may depend on online services, payment providers, license servers, database providers, hosting providers, email providers, AI providers, update infrastructure or other third-party services.

Third-party services may have their own security practices, privacy policies, outages, restrictions, account limitations, pricing changes, legal requirements or technical failures.

TSCR does not control third-party providers and cannot guarantee their permanent availability, security, policies, pricing or continuity.

If a feature sends data to a third-party service, that data may be processed according to the third-party provider’s own terms and privacy policy.

12. AI and cloud-processing warning

If TSCR includes AI, cloud, translation, assistant or similar provider-based features, you should treat them as external processing unless clearly stated otherwise.

You should not send passwords, passphrases, encryption keys, private secrets, vault contents, decrypted files or highly confidential data to AI or cloud providers unless you intentionally choose to do so and understand the privacy and security implications.

Where possible, TSCR should warn users before sending sensitive user-provided content to external AI, cloud or online services.

Local TSCR encryption and local vault workflows should be preferred for highly sensitive secrets.

13. License, activation and anti-abuse security

TSCR may use license verification, activation checks, device or machine fingerprints, local license files, encrypted local configuration, local markers, server-side records, offline activation tokens and anti-abuse mechanisms.

These mechanisms are intended to protect the Software, verify license validity, prevent unauthorized use, prevent trial reset abuse and detect suspicious activation environments.

Such mechanisms are not intended to provide absolute device security or guarantee that a device is safe.

License, activation and anti-abuse checks may restrict, delay or disable access if the license cannot be verified, payment is invalidated, activation data appears inconsistent, or the environment appears suspicious.

14. Virtual machines, sandboxes and cloned environments

Virtual machines, sandboxes, clones, snapshots, rollback systems and similar environments may affect license verification, device identity, security checks, file paths, local storage, keyring behavior, activation state and anti-abuse mechanisms.

TSCR may limit, deny, restrict or revoke activation, trial, demo, recovery or paid access in such environments where necessary for security, licensing or anti-abuse reasons.

You should not rely on snapshots, cloning or rollback mechanisms as a method to reset trials, bypass license rules, duplicate licenses or hide misuse.

15. Updates and security patches

TSCR may provide updates, patches, fixes, security improvements or compatibility changes.

Some updates may be optional, recommended or mandatory.

Older versions may contain bugs, compatibility issues or security limitations.

Where reasonably possible, you should keep TSCR updated, especially where an update contains security, integrity, license or compatibility improvements.

TSCR does not guarantee that all old versions will remain supported, safe, compatible or available forever.

16. Unsupported or risky environments

TSCR may not work correctly, safely or predictably in every environment.

Risk may be higher in environments such as:

• unsupported operating systems;

• outdated operating systems;

• heavily modified systems;

• infected systems;

• cracked or pirated systems;

• restricted corporate systems;

• virtual machines or sandboxes;

• systems with aggressive antivirus or endpoint protection;

• systems with broken permissions;

• systems with unstable storage;

• systems using unsupported file systems, sync tools or backup tools.

You are responsible for testing TSCR before relying on it for important data in any such environment.

17. No government or classified-information certification

The term “TOP SECRET” is used as a TSCR product/profile name and branding term.

It does not mean that TSCR is government-certified, military-certified, classified, approved by any government authority, or suitable for handling legally classified information unless separately and expressly stated in writing by TSCR.

You are responsible for complying with any legal, professional, regulatory, organizational or contractual requirements that apply to your data.

18. No professional security advice

TSCR may provide security-related features, warnings, estimates, documentation or explanations.

Such information is provided for general product guidance and does not constitute professional security consulting, legal advice, compliance advice, forensic advice, incident-response advice or risk-management advice.

For high-risk, regulated, enterprise, legal, medical, financial, classified or mission-critical use, you should obtain appropriate professional advice and perform your own security assessment.

19. Reporting security issues

If you believe you have found a security issue in TSCR, please contact TSCR through the official contact channel.

When reporting a security issue, do not include passwords, passphrases, encryption keys, private secrets, decrypted files, vault contents or sensitive third-party data unless specifically requested and only if you understand the risk.

Security reports may be reviewed, prioritized and handled based on severity, reproducibility, risk, available information and practical capacity.

TSCR does not guarantee a specific response time, bounty, reward, fix date or public disclosure process unless separately agreed in writing.

20. Relationship with other documents

This Security Notice forms part of the TSCR legal/documentation framework.

If there is a conflict between documents, the order of priority defined in the EULA and Terms of Sale applies unless mandatory law requires otherwise.

The EULA governs software use and license restrictions.

The Terms of Sale govern purchase, payment, refunds, cancellations, chargebacks and commercial terms.

The Privacy Policy governs personal data processing.

The Donation Policy governs donation-specific matters.

The Cookie Notice, where applicable, governs website cookie-related matters.

This Security Notice explains security limitations and safe-use responsibilities.

21. Changes to this Security Notice

TSCR may update this Security Notice from time to time.

If changes are material, TSCR may notify users through the Software, website, email, update notice, Legal & Documents page or another reasonable method.

Minor corrections, formatting changes, clarifications, translation updates or non-material changes may not require renewed explicit acceptance.

Continued use of the Software, website, paid features, activation workflow, support channel or related services after the effective date of an updated Security Notice means that you acknowledge the updated Security Notice, unless mandatory law requires a different process.

22. Contact

For security, privacy, license, activation, support or legal questions, please use the official TSCR contact channels:

• Website: https://tscr.x10.mx

• Email: time.crypt.secret@gmail.com

23. Authoritative Version

The English version of this document is the original and authoritative version. Translations are provided for convenience and may contain errors or omissions. In case of inconsistency, the English version shall prevail to the extent permitted by applicable law.

End of Security Notice