Privacy Policy

This policy explains how Void handles your personal data on our website, game server, Discord and store, in line with the EU General Data Protection Regulation (GDPR) and the Finnish Data Protection Act (tietosuojalaki 1050/2018).

1. Data controller

[BUSINESS NAME], Business ID [Y-TUNNUS], [STREET ADDRESS, POSTCODE CITY], Finland. Contact for all privacy matters: [EMAIL].

2. What we collect

Website account

• Discord: your Discord user ID, username, display name and avatar. We only ask Discord for the identify permission: we never get your email, password or server list.
• Cfx.re, if you link it: your Cfx.re forum user ID and username. The forum gives us a one-time key for this; we use it once to read who you are and then revoke it.
• Account dates: when you created your account, last signed in and linked Cfx.re.

Store

• Your basket: which packages you've added and any coupon code, kept in a cookie in your browser until checkout.
• Purchase records: Tebex sends us the transaction ID, the packages, your Cfx.re identity and the delivery status so items can be delivered in game. Tebex, not us, handles your payment details, billing name, email and address.

Game server

• Identifiers: your Rockstar licence, Cfx.re and Discord identifiers, and IP address when you connect.
• Gameplay and logs: your characters, in-game progress and items, chat, and server logs of actions (for example transactions and admin actions).
• Moderation: warnings, bans and the identifiers and hardware tokens a ban is attached to.

Technical data

• Website logs: our host (Vercel) processes your IP address, browser type and the pages you request, to deliver and protect the site.
• Email: if you email us, we keep your email address and message to reply. We don't collect your email otherwise.

We don't use analytics or advertising cookies, and we don't sell your data.

3. Why we use it, and our legal basis

• Running your account, the store and the server (signing in, linking accounts, your basket, delivering purchases, saving your progress): to perform our agreement with you (GDPR art. 6(1)(b)).
• Security, anti-cheat and moderation (logs, bans, ban identifiers): our legitimate interest in keeping Void fair and safe (art. 6(1)(f)).
• Bookkeeping and legal duties (purchase records): legal obligation (art. 6(1)(c)).
• Optional cookies, if we ever add any: your consent (art. 6(1)(a)), which you can withdraw at any time from "Cookie settings" in the footer.

4. How long we keep it

• Website account: until you delete it, or 24 months after your last sign-in.
• Basket and other cookies: see the Cookie Policy (from 10 minutes to 1 year).
• Purchase records: 6 years after the end of the financial year, as Finnish accounting law requires.
• Game server logs: up to 90 days, unless needed longer for an open investigation.
• Ban records: as long as the ban is in force, plus 12 months.
• Game characters and progress: while you play, and deleted 24 months after your last connection or on request.
• Website host logs: kept by Vercel for a short time (days to weeks).

5. Who we share it with

We only share data with the service providers we need to run Void:

• Discord Inc. (sign-in and community): processes your account under its own privacy policy.
• Cfx.re (FiveM accounts and the forum login used for linking).
• Tebex Limited (store): the merchant of record and an independent controller for your payment and purchase. See Tebex's privacy policy.
• Vercel Inc. (website hosting).
• Supabase Inc. (database for website accounts, hosted in the EU).
• Our game server hosting provider, [GAME SERVER HOST].

We don't share your data with anyone else unless the law requires it.

6. Transfers outside the EU

Some providers (Discord, Vercel, Supabase, Cfx.re) are based in the United States. Where data leaves the EU/EEA, the transfer is covered by the EU–US Data Privacy Framework where the provider is certified, or by the European Commission's Standard Contractual Clauses.

7. Your rights

You have the right to:

• access your data and get a copy;
• correct data that's wrong;
• delete your data ("right to be forgotten");
• restrict or object to how we use it, including uses based on legitimate interest;
• data portability: get your data in a machine-readable format;
• withdraw consent at any time, where we rely on it.

Your profile page has Download my data and Delete account for your website data. For game server data or anything else, email [EMAIL] or message staff on Discord. We may ask you to confirm it's your account. We reply within one month.

8. Complaints

If you think we're handling your data wrongly, please contact us first. You also have the right to complain to the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), tietosuoja.fi, or to the data protection authority where you live.

9. Children

Void isn't meant for anyone under 16. If we learn we hold data about someone younger, we'll delete it.

10. Automated decisions

We don't make decisions about you based only on automated processing. Anti-cheat tools may flag accounts, but a person reviews every ban.

11. Changes

We'll update this policy when how we use data changes. The date at the top shows the current version; significant changes are announced on Discord.