What we collect, and why.

01 Who we are

Uncharted RP ("we", "us") operates the website unchartedrp.com, the supporter store at store.unchartedrp.com, our Discord community, and a private FiveM game server. For the purposes of UK and EU data protection law we are the data controller for the personal data described on this page.

02 What we collect

This website

• Server logs. Our web server records the IP address, page requested, timestamp, browser user-agent and referring page for each visit. This is standard web-server logging and happens for every site on the internet.
• Analytics — only if you agree. If you accept the banner, we load a self-hosted Umami instance that counts page views. It is cookieless, does not track you across sites, and does not build a profile of you. If you decline, no analytics script is loaded at all.
• Security. Our site sits behind Cloudflare, which processes connection data to filter malicious traffic.

Discord and your whitelist application

• Your Discord account identifiers — user ID, username, display name, avatar and the roles you hold in our server.
• The content of your application and any support or appeal tickets you open, including anything you choose to put in them.
• Moderation records — warnings, strikes, bans and the reasons for them.

The game server

• Connection identifiers issued by the FiveM platform and the accounts you connect with (for example your Cfx.re, Steam or Discord identifier). We need these to know which character belongs to whom.
• Your IP address, used to detect ban evasion and abuse. In our staff systems this is stored as an irreversible hash rather than the address itself wherever possible, and full addresses are automatically deleted (see retention).
• In-game activity — your characters, their progress, money, property and vehicles, plus logs of significant actions. This is game data, but because it is linked to your account we treat it as personal data.
• Anti-cheat telemetry flagging suspicious behaviour for staff review.

The supporter store

• We never see your card details. Payments are handled by Tebex, who act as the merchant of record and process the payment themselves. We have no access to your card or bank information at any point.
• What we do receive from Tebex for each purchase: your name, email address, the Discord ID you supplied at checkout, what you bought, the amount, and the payment method type. Tebex's notification to us also includes the IP address used at checkout.
• See Tebex's own privacy policy for how they handle the payment itself.

03 Why we collect it, and our legal basis

• To run the community — whitelisting, letting you into the city, saving your character, and providing support. Legal basis: legitimate interests, and performance of a contract where you have bought something.
• To keep the city fair and safe — moderation, anti-cheat, and detecting ban evasion. Legal basis: legitimate interests. A whitelisted community only works if rule-breakers can actually be kept out.
• To take and honour supporter payments — matching a purchase to your account so you receive what you paid for, and handling refunds or chargebacks. Legal basis: performance of a contract, and legal obligation for financial records.
• To understand whether our website works — anonymous visit counts. Legal basis: your consent, which you can withdraw at any time.

We do not sell your personal data, we do not share it for advertising, and we do not use it to make automated decisions that produce legal effects for you.

04 Cookies and analytics

This website sets no advertising or tracking cookies. We store a single value in your browser's local storage to remember whether you accepted or declined analytics, so we don't ask you on every page.

Our analytics is a self-hosted Umami instance that runs on our own server. It is cookieless and collects aggregate page-view data only. It is loaded only after you click "Allow". To change your mind, clear this site's data in your browser and the banner will appear again.

Cloudflare may set a strictly necessary cookie to identify malicious traffic. Our store is provided by Tebex, whose own cookies are described in their privacy policy.

05 How long we keep it

• Full IP addresses in our staff systems: deleted automatically after 72 hours. An automated job runs every hour to remove them. What remains after that is an irreversible hash, which we can compare against but cannot turn back into an address.
• Web server logs are rotated and deleted on a short cycle.
• Account, character and moderation records are kept for as long as you are part of the community, and for a reasonable period afterwards so that a permanently banned account cannot simply be recreated.
• Purchase records are kept as long as required for financial and tax purposes.
• Backups. We take encrypted backups. If you ask us to delete your data we will remove it from our live systems immediately, but it may persist in backups until those are cycled out, which happens within six months at the latest.

06 Who we share it with

We share data only with the service providers we need to run the community:

• Tebex — store and payment processing (merchant of record).
• Discord — our community platform. Your use of Discord is also governed by Discord's own privacy policy.
• Cloudflare — DNS and protection for our websites.
• OVH and NFOservers — hosting for our web, database and game servers.
• Backblaze — encrypted offsite backup storage.

We may also disclose data where we are legally required to, or to protect the rights and safety of our community.

07 International transfers

We are a small community and our infrastructure is located in the United States. If you are in the United Kingdom or the European Economic Area, your personal data is transferred to and stored in the US.

Where our providers process data on our behalf, those transfers are covered by the providers' own safeguards — typically Standard Contractual Clauses, the UK International Data Transfer Addendum, or certification under the EU–US and UK–US Data Privacy Framework. If you would like detail on a specific provider, email us and we'll point you to their documentation.

08 Your rights

If you are in the UK or the EEA, you have the following rights over your personal data. They apply to everyone in our community — we don't intend to operate two standards.

• Access — ask for a copy of the personal data we hold about you.
• Rectification — ask us to correct anything inaccurate.
• Erasure — ask us to delete your data. Note that if you are banned we may keep the minimum needed to enforce that ban, which is a legitimate interest we're entitled to rely on.
• Restriction — ask us to pause our use of your data while a dispute is resolved.
• Objection — object to processing we carry out under legitimate interests.
• Portability — receive data you gave us in a machine-readable format.
• Withdraw consent — for anything based on consent, such as analytics, at any time and without penalty.

If you're unhappy with how we've handled your data, you can complain to your national data protection authority. In the UK that is the Information Commissioner's Office (ico.org.uk). We'd genuinely rather you came to us first so we can put it right.

09 Age requirement

Uncharted RP is strictly 18+. We do not knowingly collect data from anyone under 18. If you believe a minor has joined our community, please contact us and we will remove the account and its data.

10 Security

Our sites are served over HTTPS. Access to our staff systems requires authentication and is limited to the staff who need it. Backups are encrypted, and stored separately from the live systems. IP addresses are hashed in our staff tooling wherever a comparison is all we actually need.

No system is perfectly secure, but if we ever suffer a breach that is likely to put your rights at risk, we will notify the relevant authority and, where required, you.

11 Changes to this policy

We'll update this page as the community changes, and the "last updated" date at the top will always tell you when. If we make a significant change to how we use your data, we'll announce it in Discord rather than quietly editing this page.