Privacy policy
Last updated: 28 September 2026
This policy explains what personal data FiveM Analytics processes, why, for how long and what your rights are under the General Data Protection Regulation (GDPR) and the French Data Protection Act.
1. Who is responsible
[To complete: legal name of the publisher], [To complete: registered office address], is the data controller for the data of website visitors and customers. Contact for any privacy request: [To complete: privacy contact email address].
For the data of players on servers connected to FiveM Analytics, each server owner is the data controller and we act as their processor (see section 4).
2. What we collect, why and for how long
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Website visitors: IP address, browser, requested page, date (technical logs) | Deliver pages, security, prevent abuse | Legitimate interest (art. 6(1)(f)) | 12 months maximum |
| Account: email address, name if you give one, account identifier, sign-in data (IP address, device) | Create and secure your account, provide the Service | Contract (art. 6(1)(b)) | While your account exists, deleted within 30 days after closure |
| Servers you add, staff members you invite and their roles, settings | Provide the Service | Contract (art. 6(1)(b)) | While your account exists |
| Acceptance of the data processing agreement (date and version) | Prove the agreement between you and us | Legal obligation (art. 28 and 5(2)) | While the server exists, then 5 years |
| Emails you send us | Answer your request | Legitimate interest (art. 6(1)(f)) | 3 years after our last exchange |
| Billing, once paid plans open: plan, invoices, payment status (card details are handled by Stripe only) | Billing and accounting | Contract and legal obligation (art. 6(1)(b) and (c)) | Invoices 10 years (article L123-22 of the French Commercial Code) |
We only ask for what we need: signing up requires an email address; adding a server requires a name and a framework. We do not use your data for advertising, we do not sell it and we do not make automated decisions with legal effect about you.
3. No tracking on the website
The public website uses no analytics, advertising or social media tools and sets no cookies. Fonts are served from our own server. Details are in the cookie policy.
4. Player data (processing on behalf of server owners)
When a server owner installs the FiveM Analytics resource, it sends us data about that server's players: identifiers (Citizen ID, Steam, Discord and Rockstar licence identifiers), FiveM and character names, connection sessions and AFK time, job and gang, in-game money balances and transactions, inventory, vital stats, deaths and their causes, owned vehicles, and in-game positions. We process this data only on the owner's instructions, to display their dashboard, under the data processing agreement.
Retention of player data:
- In-game positions: 30 days.
- Online player counts: 90 days.
- Transactions, deaths and sessions: 180 days in detail, then only monthly totals are kept.
- Player profiles: until the server owner deletes the player or the server, or closes their account.
If you are a player, contact the owner of the server you play on to exercise your rights: they can delete your data from their dashboard. If you write to us, we will forward your request to them.
5. Recipients and processors
Your data is accessible only to our team, on a need-to-know basis, and to the following processors:
- Hosting: [To complete: hosting provider name (e.g. Hetzner Online GmbH or OVH SAS)], [To complete: hosting provider address]. Stores the database and runs the Service.
- Clerk, Inc. (United States): authentication of dashboard users (email, sign-in data). Does not receive player data.
- Stripe: payment processing, only once paid plans open.
Integrations with Tebex and Discord are not available yet. When they are, they will only run if a server owner enables them, and this policy will be updated first.
6. Transfers outside the European Union
Clerk, Inc. is established in the United States and certified under the EU-U.S. Data Privacy Framework, which the European Commission recognises as providing adequate protection (decision of 10 July 2023). Clerk's data processing addendum also includes the European Commission's standard contractual clauses as a fallback.
7. Security
Connections are encrypted (HTTPS). Server API keys are stored only as a hash. Each server's data is isolated in the database by row-level security. Access to the dashboard is limited by role (owner, staff, viewer).
8. Your rights
You can ask to access, correct or delete your data, to restrict or object to its processing, to receive it in a portable format, and to give instructions about what happens to it after your death. Write to [To complete: privacy contact email address]. We answer within one month. We may ask you to prove your identity if we have a reasonable doubt.
If you think your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr), or with the authority of the EU country where you live.
9. Minors
The dashboard is intended for adults or minors with the permission of a parent or legal guardian. Server owners whose players include minors must take this into account when informing their players.
10. Changes
We will update this policy when our processing changes, in particular before any new integration or tool is added. Material changes are notified to customers by email.