Privacy policy

TODO: Complete the privacy policy (controller, hosting provider, data subject rights). What this site processes technically:

• Votes: Wir speichern keine IP-Adressen im Klartext, sondern nur einen nicht umkehrbaren, mit Geheimschlüssel gebildeten Hash, um Mehrfach-Votes innerhalb von 24 Stunden zu verhindern. Optional angegebene Ingame-Namen werden mit dem Vote gespeichert und an den jeweiligen Serverbetreiber übermittelt.
• Login: When you log in with Discord or Cfx.re, we store the user ID, username and avatar URL from that service. When you log in with email, we store your email address and a secure hash of your password (never the password itself).
• Reviews & favorites: Reviews are shown publicly with your username. Favorites are only visible to you; the total per server is public.
• Reports: When you report something, your account is stored with the report. Our team can see who reported it; the person reported cannot.
• Moderation: To enforce our rules we log moderation actions (e.g. bans, deleted listings) including the reason and may add internal notes to accounts.
• Cookies: We set a technically necessary session cookie and cookies for your chosen language and toplist sorting.
• YouTube trailers: Trailers are only loaded via youtube-nocookie.com after you click. Only then is data sent to YouTube (Google).
• Abuse detection: For reviews we also store an irreversible hash of your IP address to detect duplicate reviews. Suspicious activity is reported to our team automatically.
• Vote rewards: If a server uses our FiveM script, the /vote command sends us the player identifiers (e.g. Rockstar license, Discord and Cfx.re ID) and the player name so the reward can be assigned to the right player after the vote. If you are logged in with Discord or Cfx.re, we also match your vote using these IDs. This mapping is deleted after 90 days.
• Statistics for server owners: We count server page views and clicks on “Connect” per day, plus the domain of the referring page. Each is counted at most once per session and day; no IP addresses or individual visitors are stored for this.
• Notifications: We only send vote reminders and notices for server owners through the channels you choose under “My account”: by email, as a Discord DM from our bot or as a browser notification. For browser notifications we store your browser's push address (provided by the browser vendor, e.g. Google, Mozilla or Apple); the message itself is encrypted.
• “Plays here”: When you review a server that uses our FiveM script, we ask the server whether your Discord or Cfx.re ID (or Rockstar license from earlier in-game votes) is known there. Only yes/no and the date of the first visit come back.
• Your rights: Under “My account” you can download all stored data as a file and delete your account yourself.
• Discord server: When you register with Discord or connect Discord, we add you to our Discord server with your consent in the Discord login dialog (“Join servers for you”) and assign roles matching the games you tell us about. You can leave the server at any time and change your games under “My account”.