This page explains what information the Valknut Roleplay website (valknut.live) keeps about you, why, and what you can do about it. We keep as little as possible.
Who we are
Valknut Roleplay is a community-run FiveM roleplay server. For anything about your data, open a ticket in our Discord.
What we keep
When you sign in with Discord
- Your Discord user ID, username, display name and avatar. We ask Discord only for the
identifypermission: we never see your email address or your password. - Whether you are a member of our Discord server and which roles you have there, to decide what you can do on the website (for example, who can review applications).
- A sign-in cookie (
vk_session) that keeps you signed in for up to 30 days. It is strictly necessary for signing in; we store only a scrambled (hashed) version of it.
When you apply
- Your answers, the date, the decision, who made it, and the reason for a denial.
- Any questions staff send you about your application, and your answers.
- Your application is also posted in a private thread in our Discord, visible to you and to the staff who review it. We send you Discord messages about questions and about the decision.
In-game reports
- When you use the in-game report system, the game server sends us the report: its title and status, the messages written in it (including image links), and the in-game names, in-game IDs and Discord IDs of the people involved.
- Staff can read all of it in the Control Room. In your Player Hub you see the status of your own reports (not the conversation). Nobody else can see them.
- A report is deleted 90 days after its last activity.
Notifications and history
- Notifications shown in your Player Hub (for example “application approved”).
- A log of staff actions (for example who approved an application and when), so decisions can be checked later.
Visit statistics (no cookies)
- To see how the website is used, we count visits without cookies: the page, the website that linked to it (for example discord.com), the type of device (phone, tablet or computer), your browser language and time zone, and clicks on the Discord, connect and FiveM buttons.
- We don’t store your IP address. To count unique visitors per day we keep a random code made from your IP address and browser together with a secret that changes every day and is then deleted, so a visit can’t be traced back to you or linked across days.
- If your browser sends Do Not Track, nothing is counted. We never sell or share this information (which is what Global Privacy Control asks websites not to do), and it contains nothing that identifies you.
- These records are kept for 6 months.
Technical
- Like most websites, our server may keep short-term technical logs (IP address, time, page requested) for security and to fix problems.
- Profile pictures on the Team page and in your account are loaded from Discord, so Discord sees your IP address when those images load. Everything else (including fonts) is served from our own server.
- We use no advertising or analytics cookies and we don’t sell or share your data for marketing.
Why
- To let you sign in, apply and follow your application (necessary to provide what you asked for).
- To run the community fairly and securely: moderation, preventing abuse, keeping a record of staff decisions (our legitimate interest).
- To understand how the website is used and improve it, without identifying anyone (our legitimate interest).
Who else sees it
- Discord: sign-in, and the application threads and messages described above.
- Our hosting provider, which runs the server the website and its database live on.
- Our staff, only as far as they need it for their role.
How long
- Sign-in sessions: up to 30 days, or until you sign out.
- Applications and the staff log: while they are relevant to your place in the community, or until you ask us to delete them (we may keep a minimal record of a decision where we have a good reason, such as preventing abuse).
- Notifications: the latest 200 per account.
- Visit statistics: 6 months.
- In-game reports: 90 days after the report’s last activity.
Your rights
Under the GDPR you can ask to see, correct or delete your data, object to how we use it, or take a copy of it.
- Get a copy now: sign in and use “Download my data” in your Player Hub.
- Correction or deletion: open a ticket in our Discord.
- If you think we got something wrong, you can complain to the data protection authority where you live. We are based in Greece, so our lead authority is the Hellenic Data Protection Authority (dpa.gr).
Age
You must be at least 16 to sign in and apply.
Changes
If we change how we use your data, we’ll update this page and the date at the top.