Privacy Policy

1. Who operates this service

The San Andreas Roleplay User Control Panel ("UCP") is operated by the San Andreas Roleplay project team. This policy explains what personal information we collect through the UCP, how we use it, and what choices you have.

2. Information we collect

When you register or use the UCP, we may store:

• Account details: username, email address, password hash (not your plain password)
• Account metadata: role, whitelist status, member-since date
• Character records linked to your account (name, job, finances, play data)
• Applications you submit (category, title, status, form payload)
• Notifications sent to your account
• Session identifiers used to keep you signed in

We also record security and activity events. See our Logging & Data Retention page for a full list of what is logged automatically.

3. How we use information

• Authenticate you and provide access to the UCP
• Process whitelist, faction, property, and other applications
• Display your characters, notifications, and account settings
• Investigate abuse, enforce server rules, and respond to staff or legal requests
• Protect the service through rate limiting and audit logging

4. Cookies and local storage

We use a session cookie named sa_ucp_session to maintain your sign-in state. It is HTTP-only, uses SameSite=Lax, and expires after seven days of inactivity or when you sign out. We do not use third-party advertising cookies on the UCP.

Fonts and icons may be loaded from Google Fonts and Cloudflare CDN (Font Awesome). Those providers may receive your IP address when your browser requests assets.

5. Sharing and disclosure

We do not sell your personal information. We may disclose information when:

• Required by law, court order, subpoena, or valid legal process
• Necessary to investigate fraud, harassment, cheating, or threats to player safety
• Needed to enforce our Terms of Service or server rules
• You give explicit consent (for example, linking a future Discord or Google account)

Authorized staff with appropriate roles may access account and audit records for moderation and administration.

6. Retention

Account and application data is retained while your account exists and as needed for moderation, dispute resolution, and legal compliance. Audit logs may be kept after account closure where required for security investigations or legal obligations. See Logging & Data Retention for details.

7. Your rights and requests

You may request access to, correction of, or deletion of your UCP account data by contacting staff through official support channels. We may need to verify your identity before processing a request. Some records may be retained where we have a legal obligation or legitimate security interest.

8. Security

Passwords are stored using bcrypt hashing. Sessions are random identifiers stored server-side. No system is completely secure; use a unique password and report suspected compromise to staff immediately.

9. Changes

We may update this policy. Material changes will be reflected by updating the date at the top of this page. Continued use of the UCP after changes constitutes acceptance of the revised policy.

10. Contact

Privacy questions or data requests: contact San Andreas Roleplay staff through the official Discord or support channels listed on the community site.