Privacy Policy

NYRU SERVICES LIMITED (company number 15968675, registered office at 128 City Road, London, England, EC1V 2NX) is the controller for website accounts and site data.

• Website accounts and support mail. Controller: NYRU SERVICES LIMITED.
• Player identifiers, telemetry, and evidence on a customer's server. Controller: The server owner. Processor: NYRU SERVICES LIMITED.

Player telemetry and evidence follow those roles. See the data processing summary.

We collect the following categories of data:

• Account data: email address, password hash, display name and authentication tokens.
• Payment data: Checkout is not taking payment yet. Monthly is £39 / month. Lifetime is £149 one time. Contact [email protected]. We do not store card details.
• Server data: server IP address, framework type, resource names and configuration settings.
• Telemetry data: detection events, player identifiers (FiveM license hashes, Rockstar identifiers), IP addresses and game telemetry.
• Evidence data: screenshots, clips and logs captured during detections. Recordings default to 30 days.

We process your personal data under the following lawful bases:

• Performance of a contract: processing account, server and telemetry data to provide the Service.
• Legal obligation: retaining billing records and audit logs as required.
• Legitimate interests: security monitoring, fraud prevention and service improvement.

We use your data to:

• Provide, maintain and secure the Service.
• Detect, investigate and prevent cheating on connected servers.
• Record an assigned plan. Checkout is not taking payment yet.
• Provide customer support and respond to enquiries.
• Comply with legal obligations.

We share data only with:

• Billing questions: contact [email protected]. Checkout is not taking payment yet.
• Cloud hosting: our infrastructure providers for data storage and processing.
• Legal authorities: where required by law or court order.

We do not sell your personal data to third parties. We do not operate or depend on a global ban list.

Account data is kept while the account is open, and deleted when the account is closed, except where the law requires a longer hold. Evidence recordings are kept for 30 days by default, then deleted. The server owner can set another period.

Your data may be processed in the United Kingdom, the European Economic Area and other regions where our infrastructure operates. We use appropriate safeguards, including Standard Contractual Clauses, for any transfers outside the UK.

Under UK GDPR you have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Erasure of your data (the right to be forgotten).
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time.

To exercise these rights, contact us at [email protected].

We implement appropriate technical and organisational measures to protect your data, including encryption in transit, hashed API keys, audited access controls and safe rule evaluation without raw eval. Client telemetry is treated as evidence, not proof, and sensitive decisions are made server side.

The Service is not directed at children under 16. We do not knowingly collect data from individuals under 16. If you believe we have done so, contact us and we will delete it.

We may update this policy from time to time. We will notify customers of material changes via email or the panel at least 30 days before they take effect.

For privacy enquiries or to make a complaint, contact us at [email protected]. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.