THEGTA6.SITEIndependent community
Join community
Information / Privacy

Privacy Policy

We use a small set of first-party data to run accounts, referrals and requested updates, plus privacy-focused aggregate traffic analytics. We do not run advertising pixels or sell personal data.

Effective

1. Controller and contact

The person or entity identified in the Legal Notice is the controller for the processing described here. Privacy requests can be submitted through our contact form. We may ask you to verify control of an account email before disclosing or deleting account data.

2. Data we process

  • Accounts: email address, display name, internal user ID, account dates, email-verification state, terms version and optional update preference. Password verification and sessions are handled by Supabase Auth; we do not store readable passwords.
  • Referrals: referral code, an anonymous browser ID, landing path, timestamps, conversion state and a daily server-keyed request fingerprint. The application database does not store the raw IP address or user-agent string for referral attribution.
  • Acquisition source: whether a visit began through our Instagram or TikTok short link. We store the first source with an account created within 30 days. This does not create member referral credit.
  • Waitlists: email address, requested feature, source, consent version and consent timestamps.
  • Contact and rights requests: name, reply email, request type, relevant URL, report text, good-faith confirmation, timestamps and case status.
  • Technical delivery: our hosting and security providers may process request metadata such as IP address, browser information, logs and email-delivery events to deliver and protect the service.
  • Aggregate analytics: page path, referrer, timestamp, approximate region, device type, operating system and browser. Vercel Web Analytics measures visitors using a daily rotating, anonymous request-derived identifier rather than tracking cookies.

3. Why we use it

  • Contract: create and secure accounts, confirm email addresses, provide recovery, and operate requested account features.
  • Consent: send optional platform and feature updates. Consent can be withdrawn at any time.
  • Legitimate interests: attribute referrals and first-touch acquisition sources, prevent abuse, measure aggregate audience and page performance, keep the service secure, answer requests and maintain reliable records. We limit these uses and do not use referral, acquisition or analytics data for advertising profiles.
  • Legal obligations: respond to valid legal requests and establish, exercise or defend legal claims where necessary.

4. Cookies and browser storage

We use strictly necessary Supabase session cookies for sign-in. A first-party referral cookie remembers an invite for 30 days, and an anonymous referral-visitor cookie lasts up to one year so refreshes do not create duplicate visits. A first-party acquisition cookie remembers for 30 days whether the first social visit used our Instagram or TikTok short link. Session storage can remember that the intro has played and temporarily carry an email address from the home page to the signup form. Vercel Web Analytics does not use tracking cookies. We currently use no third-party advertising or cross-site tracking cookies.

5. Service providers and transfers

We use Vercel for hosting, request delivery and aggregate Web Analytics, Supabase for authentication and database services, and Resend for account-email delivery. They process data as needed to provide those services and may use subprocessors. Some processing can occur outside the EEA, including in the United States. Where required, transfers rely on an applicable adequacy decision or contractual safeguards offered by the provider, such as the EU Standard Contractual Clauses.

6. Retention

  • Account and profile data are kept while the account is active and removed or anonymized when the account is deleted, subject to security records or legal duties that must be retained.
  • Referral records are kept while needed to operate and audit the referral program. Personal custom codes are anonymized on account deletion; unneeded visit records are removed as the program is reviewed.
  • Waitlist data is kept until consent is withdrawn, the relevant update has been sent and no follow-up is needed, or the waitlist is retired.
  • Contact and rights-request records are kept until the request and any reasonable appeal or legal-preservation period are complete.
  • Provider security, delivery and aggregate analytics records follow the provider settings, reporting window and contractual retention periods.

7. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, objection or portability of your personal data. You may withdraw marketing consent at any time without affecting processing that was lawful before withdrawal. You may also complain to your local data-protection authority; in Austria, this is the Österreichische Datenschutzbehörde.

8. Automated controls and children

Rate limits and code filters automatically reduce spam and abusive referrals. They do not make decisions with legal or similarly significant effects. The account service is not directed to children under 16, and people under 16 must not create an account or join a waitlist.

9. Independent links

THEGTA6.SITE is not affiliated with Rockstar Games or Take-Two Interactive. Links to official and news sources open third-party sites governed by their own privacy policies.