PRIVACY POLICY

1. What We Collect

When you use CerberusRP services, we may collect the following categories of information:

Account Information

• Email address (provided during registration)
• Username and display name
• Password (stored as a salted bcrypt hash — never in plain text)

Linked Service Identifiers

• Discord User ID and username (when you link your Discord account via OAuth)
• Cfx.re (FiveM) License/ID (when you link your FiveM account)
• Steam ID (if applicable, via FiveM)

Technical Data

• IP address (collected on login and during active sessions)
• Browser type and version
• Device type and operating system
• Session tokens and authentication cookies

Purchase Data

• Purchase history and transaction IDs (via Tebex)
• We do not store payment card information — all payment processing is handled entirely by Tebex

In-Game Data

• Character data, inventory, and in-game activity logs
• Moderation history (warnings, bans, ban appeals)

2. How We Use Your Data

We use collected data for the following purposes:

• Account management — creating, verifying, and securing your account
• Authentication — linking your Discord and FiveM identities for server access
• Purchase fulfillment — verifying and delivering VIP perks and store items
• Moderation — enforcing community rules, tracking violations, and processing ban appeals
• Security — detecting unauthorized access, fraud, or abuse
• Communication — sending account-related emails (verification, password reset, notifications)
• Service improvement — understanding how users interact with our platform to improve it

3. Third-Party Services

CerberusRP integrates with the following third-party services, each governed by their own privacy policies:

• Tebex — Our store payment processor. Handles all payment card data and purchase transactions. We receive transaction confirmations and purchase details but never your raw payment information.
• Discord — Used for OAuth login and community management. When you link your Discord account, we receive your Discord user ID and username. Discord's own privacy policy governs their data practices.
• Cfx.re (FiveM) — Our game server platform. Your FiveM license is shared with our game server for identity verification and access control.
• Cloudflare — We use Cloudflare for DDoS protection and performance. Cloudflare may process your IP address and request metadata as part of its service.

We are not responsible for the data practices of these third-party services. We encourage you to review their respective privacy policies.

4. Data Retention

We retain your data for as long as your account is active or as necessary to provide services to you.

• Active accounts — data is retained for the lifetime of the account
• Deleted accounts — most personal data is purged within 30 days of account deletion, except where retention is required for legal or moderation purposes
• Moderation records — may be retained indefinitely to enforce community safety and prevent ban evasion
• Purchase records — retained for a minimum of 3 years to comply with financial recordkeeping requirements

5. Security

We implement industry-standard security measures to protect your data, including:

• Passwords hashed with bcrypt
• HTTPS/TLS encryption for all web traffic
• Optional two-factor authentication (TOTP) for accounts
• IP-based session monitoring
• Regular security reviews of our infrastructure

No system is 100% secure. If you believe your account has been compromised, contact us immediately through Discord.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

For EU/EEA Users (GDPR)

• Right to access your personal data
• Right to correct inaccurate data
• Right to deletion ("right to be forgotten")
• Right to restrict or object to processing
• Right to data portability

For California Users (CCPA)

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt out of the sale of personal information (we do not sell data)
• Right to non-discrimination for exercising your rights

To exercise any of these rights, contact us via a support ticket in our Discord server or by email. We will respond within 30 days.

7. Contact

If you have questions or concerns about this Privacy Policy:

• Discord: discord.gg/zucgdC2Bgk — open a support ticket
• Email: legal@cerberusrp.com