Our whole business is handling other people's programs carefully, so this policy is written to be read. It covers the website at vbsourcecoderecovery.com, the members area, the files you send us, and the VB Source Code Recovery software you install. If anything here is unclear, ask us.
VB Source Code Recovery (vbsourcecoderecovery.com) is operated by Samson Software. We recover source code from compiled Visual Basic programs as a service, and we sell the decompiler software we use to do it. For the purposes of data-protection law we are the controller of the personal data described on this page. You can reach us through the contact page.
When you read our public pages we collect very little:
When you send a message or request an evaluation we receive what you type: your name, email address, company, phone number if you give it, and your message, including whatever you tell us about the program. We use it to reply, to prepare your evaluation and quote, and to keep a record of our correspondence. It is sent to us by email and kept in our mailbox; the forms themselves do not store it in a database.
Both forms are protected by Cloudflare Turnstile, a human check that replaces the puzzles older CAPTCHAs used. Turnstile runs in your browser, may set a cookie, and sends Cloudflare a small amount of information about your browser and connection to decide whether the visitor is a person. Cloudflare processes it under Cloudflare's privacy policy. We never see the details of that check, only a pass or fail.
The quote form and our private upload page let you attach the program you want recovered: EXE, DLL, OCX, SCR or ZIP files. We know these are often confidential, and we treat them that way.
If you buy a license you get an account. We keep:
You can change your name, company, email address and password, and sign out every session, from the Account page.
Payments are handled by Stripe. You enter your card details on Stripe's checkout page, not on our site; we never see or store card numbers. Stripe acts as the merchant of record for our sales, which means Stripe takes payment, calculates and collects any sales tax or VAT, and issues your receipt. From each purchase we keep the buyer's name and email address, the amount, the product, and Stripe's identifiers for the customer and the payment so we can match orders to accounts and handle refunds. Stripe processes your payment data under Stripe's privacy policy.
VB Source Code Recovery runs entirely on your computer. The programs you decompile never leave your machine. The software contains no analytics, no telemetry and no background processes. It contacts our server in exactly two situations, both under your control:
The free VBScanner utility reads file headers on your machine and sends nothing anywhere.
| Cookie | Set by | Purpose | Lasts |
|---|---|---|---|
vbsr_session | Our members area | Keeps you signed in and protects forms against forgery. Only set once you sign in or use a members-area form. | Until you close the browser, or 12 hours of inactivity |
_ga, _ga_* | Google Analytics | Distinguishes visitors and sessions for our usage statistics. | Up to 2 years |
Cloudflare Turnstile cookies (for example cf_clearance) | Cloudflare | Remembers that the human check passed on pages that use it. | Set by Cloudflare; typically up to a year |
We do not use advertising or cross-site tracking cookies. You can block or delete cookies in your browser; the public site works without them, and only the members area needs its session cookie.
| Provider | What they do | What they receive |
|---|---|---|
| Google Analytics (Google LLC) | Website usage statistics | Pages viewed, browser and device details, approximate location |
| Cloudflare Turnstile (Cloudflare, Inc.) | Human check on forms and sign-in | Browser and connection signals needed for the check |
| Stripe (Stripe, Inc.) | Payment processing, tax, receipts | Your payment and billing details, entered on Stripe's own page |
| Amazon Web Services (Amazon SES) | Delivers our transactional email | Your email address and the content of emails we send you |
Each of them processes data only to provide that service. Google, Cloudflare, Stripe and Amazon are based in the United States, so data handled by them may be processed there. We do not sell personal data, and we do not share your program files with any of these providers.
The site is served over HTTPS. Passwords are stored as salted hashes and are never emailed. Uploaded files and attachments live outside the web root and are downloadable only by us. Access to the members-area administration is limited to us and can be protected with two-factor authentication. No method of transmission or storage is perfect, but if we ever learn of a breach affecting your data we will tell you promptly.
Wherever you are, you can ask us what personal data we hold about you, ask us to correct it, ask us to delete it, or object to a particular use, by contacting us. If you are in the European Economic Area or the United Kingdom, you have these rights under the GDPR, plus the right to lodge a complaint with your supervisory authority; our lawful bases are performance of our contract with you (accounts, licenses, purchases, support), our legitimate interest in running and securing a small business (analytics, logs, fraud prevention) and your consent where we ask for it. If you are a California resident, you have the right to know what we collect and to request deletion; we do not sell personal information. We will answer every request within 30 days and will verify that it comes from you.
Our services are for businesses and professional developers and are not directed at anyone under 16. We do not knowingly collect personal data from children.
If we change how we handle your data we will update this page and the date at the top. Material changes that affect members will also be announced in the members area.
Questions, requests or concerns: use the contact page and we will reply by email.
Last updated 5 September 2026.