1. Who we are
Zone X RP ("we", "us") is operated by the Zone X RP Community, an unincorporated community team. The data controller can be reached at support@zonexworld.com.
2. What we collect
2.1 Account data
When you sign in via Discord OAuth, we receive: your Discord user ID, username, global display name, avatar URL, and verified email address (if you authorize the email scope). We do not receive your password — Discord handles auth.
2.2 In-game data
On first server-join, we link your Discord account to a FiveM license identifier so we can persist your characters, vehicles, money, items, and progression across sessions. We do not store your IP address beyond 30 days of access logs.
2.3 Operational logs
Standard web access logs (timestamp, requested URL, response status, truncated user-agent) are retained for 30 days for abuse-prevention and capacity planning. In-game action logs (PD reports, money transactions, punishments) are retained for one year.
3. Why we collect it
- To authenticate you (Discord OAuth).
- To persist your character and progression across sessions.
- To enforce the server rules and respond to reports.
- To provide community features (notifications, tickets, applications).
- To improve performance and detect abuse.
We do not sell, rent, or share your personal data with advertisers. We do not run third-party trackers on the public website or the User Control Panel.
4. Lawful basis (GDPR)
- Contract — required to operate the service you signed up for.
- Legitimate interests — abuse prevention, security, and analytics.
- Consent — when you opt into Discord DM notifications.
5. How long we keep data
- Account data — until you request deletion.
- In-game progression — until you request deletion or account is closed.
- Punishment history — 5 years (community safety).
- Web access logs — 30 days.
- Backup snapshots — 35 days rolling.
6. Your rights
You can, at any time:
- Request a copy of your data.
- Request correction of incorrect data.
- Request deletion of your account and personal data.
- Object to processing for legitimate-interest reasons.
- Lodge a complaint with your local data protection authority.
Email support@zonexworld.com with "GDPR" in the subject. We respond within 30 days.
7. Cookies & local storage
We use a single first-party session cookie (__Secure-next-auth.session-token) that is required for authentication. We do not use marketing or analytics cookies. See our cookie notice for details.
8. Sub-processors
- Cloudflare — DNS, edge proxy, DDoS protection.
- Discord — OAuth provider for authentication.
- FiveM (Cfx.re) — game server directory and identifiers.
9. Children
The minimum age to play is 16. We do not knowingly accept registrations from users under 16. If you believe an account belongs to a minor, please contact us and we will investigate and remove if appropriate.
10. Changes to this policy
We may update this policy. Material changes will be announced on the website and via Discord at least 14 days before they take effect.