Privacy Policy

1. Controller

Projection Roleplay ("we", "us", "our") is the data controller for the personal data we collect through this store and related services.

2. Data We Collect

We collect:

• Steam ID — when you sign in with Steam
• Steam profile data — display name, avatar (for account display)
• Discord ID — if you link your Discord account (optional)
• FiveM character identifiers — citizen IDs for order fulfilment
• Transaction data — purchase history, product IDs, payment status (via Stripe)
• Technical data — IP address, browser type, session data (for security and operation)

3. Lawful Basis (GDPR Art. 6)

• Contract — processing necessary to fulfil purchases and deliver products
• Legitimate interests — fraud prevention, security, service improvement
• Consent — where we explicitly ask for consent (e.g. optional Discord linking)

4. Your Rights (GDPR)

You have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion ("right to be forgotten"), subject to legal retention requirements
• Portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent
• Lodge a complaint — with a supervisory authority (e.g. ICO in the UK)

To exercise these rights, contact us via the official Projection Roleplay Discord or support channels.

5. Data Retention

We retain data only as long as necessary for the purposes described. Transaction and order data are retained for legal and accounting requirements (typically 6–7 years where required by law). Account data is retained while your account is active and for a reasonable period after deletion to handle disputes or support requests.

6. Third Parties

We use Stripe for payment processing (subject to Stripe's privacy policy), Steam for authentication, and Discord for optional linking and fulfilment. We do not sell your data to third parties.

7. International Transfers

Data may be processed in the UK, EU, or other jurisdictions. Where transfers occur outside the EEA, we ensure appropriate safeguards (e.g. adequacy decisions, standard contractual clauses) are in place.

8. Security

We implement technical and organisational measures to protect your data. See our Security & Compliance page for more information.

9. Contact

For privacy-related enquiries or to exercise your rights, contact us via the official Projection Roleplay Discord server or support channels.