Privacy Policy

01 Information We Collect

fivem.win lets you sign in with Discord to browse analytics for public FiveM servers. We keep only what we need to run the service.

From Discord, when you sign in (OAuth 2.0):

• Your Discord user ID, username, display name and avatar
• Your email address (Discord shares this via the email scope)
• A small snapshot of public profile fields (e.g. locale, account flags) shown on your account page
• Only if a server owner enables the optional Discord-membership gate: whether you belong to that one Discord server

Discord's access token is used once at sign-in to read the above, then discarded. We never post, message, or act on your behalf, and we do not read your servers, roles, or messages.

As you use the dashboard, we record:

• Sign-in logs — IP address, browser user-agent and the time of each login
• Request logs — the API route, method, IP and timestamp of your requests (for rate limiting and basic usage stats)
• A history of your Discord username if it changes
• For premium users: the Discord IDs you grant access to your private custom server

The FiveM server information shown on the site (player counts, hostnames, sessions, etc.) is public data retrieved from the official CFX/FiveM API — it is not your personal data.

02 How We Use Your Data

Specifically, we use it to:

• Authenticate you and keep you signed in
• Apply your plan's access level and per-minute rate limits
• Provide the analytics, search, history and alert features
• Keep an audit log of admin actions and detect abuse or security threats
• Optionally restrict access (maintenance, lockdown or whitelist modes) at the operator's discretion

03 Data Sharing

We do not sell, rent, or trade your personal data. We may share data with:

• Service providers — infrastructure, hosting, analytics vendors acting on our behalf under data processing agreements
• Discord — as required for the OAuth integration and bot functionality
• Legal authorities — when required by law, court order, or to protect our legal rights

Any third-party processors we work with are contractually bound to handle your data securely and in compliance with applicable privacy laws.

04 Data Retention

We retain your account data for as long as your account is active. You may request deletion at any time. Upon deletion we will permanently remove your personal data within 30 days, except where retention is required by law or legitimate business need (e.g., billing records).

Anonymized and aggregated data may be retained indefinitely as it cannot be used to identify you.

05 Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request erasure of your personal data ("right to be forgotten")
• Portability — receive your data in a machine-readable format
• Objection — object to certain types of processing
• Restriction — request that we restrict how we process your data

To exercise any of these rights, contact us at [email protected].

06 Cookies & Tracking

We use one essential cookie to keep your session secure, plus your browser's local storage for your access token and interface preferences. We do not use third-party advertising or cross-site tracking cookies.

• Session cookie — an httpOnly refresh-token cookie that keeps you signed in
• Local storage — holds your access token and UI preferences, on your device only

07 Security

We use TLS encryption in transit, store credentials and session tokens hashed rather than in plain text, gate every request behind authentication and scopes, and keep the application code and database outside the public web root. We follow responsible-disclosure practices.

08 Children's Privacy

fivem.win is not directed at children under 13 years of age (or 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us immediately and we will delete it.

09 Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email or in-app notification at least 14 days before changes take effect. Continued use of the service after the effective date constitutes acceptance.

10 Contact Us

For any privacy-related questions or requests, please reach out: