Privacy Policy

ViceCrewHub is an independent, unofficial community platform for GTA VI fans and players. This policy explains what personal information we collect, why we process it, how we protect it and which rights you have.

Main functions of the platform:

• registration and sign-in
• player profiles and player discovery
• community posts, comments and likes
• following other players
• creating and joining crews
• XP progression, missions and leaderboards
• Crew XP Vault
• optional premium memberships (PLAYER+, CREW+)
• Content Creator program

The controller's details are listed in the table below. Missing details are pending verification; until they are completed, this policy is not final.

Controller name

[PENDING VERIFICATION]

Business type

[PENDING VERIFICATION]

Registered address

[PENDING VERIFICATION]

Tax number

[PENDING VERIFICATION]

Registration number

[PENDING VERIFICATION]

Privacy contact email

[PENDING VERIFICATION]

Website

https://vicecrewhub.com

Pending verification: Verified controller details are missing.

Data processed: email address, username, account ID, authentication data (a hashed password, or for Google / Lovable sign-in the identifier and email received from that provider), registration and last sign-in times, account status, language preference and privacy settings.

Purpose: account creation, authentication, security and access to community services. Legal basis: performance of a contract (GDPR Art. 6(1)(b)).

Passwords are never stored in readable form and are not accessible to other users in any form.

Data processed: username and display name, avatar, cover image, country, languages, gaming platform, interests, play style, bio, visible crew memberships, level, rank and badges (e.g. Founding Member, Content Creator, membership badge).

Profiles that completed onboarding can be viewed by visitors of the platform. If either of two users has blocked the other, their profiles are hidden from each other. Your email address never appears on your public profile.

You can edit your profile on the Settings page at any time, where you can also turn off appearing on public leaderboards. Legal basis: performance of a contract.

Data processed: posts, comments, likes, follows, uploaded images, publication times, visibility and moderation status.

Community feed posts are visible to platform users; follow relationships are only visible to signed-in users. Private crew content is only visible to crew members.

You can delete your content, but we cannot prevent others from independently copying or sharing it before deletion.

Legal basis: performance of a contract; legitimate interest for abuse prevention and moderation (Art. 6(1)(f)).

Data processed: crew name, description, images, memberships, leaders and roles, join requests, Crew Vault contributions and crew activity.

The crew list is visible to signed-in users. Private crew member lists and content are only accessible to crew members; crew leaders decide on join requests. Legal basis: performance of a contract.

Data processed: lifetime and spendable XP, level, rank, mission completion, XP transactions, Crew Vault donations, leaderboard positions and XP-related security logs.

XP is awarded only by the server for real community activity (e.g. completing your profile, posting, commenting, joining a crew), with daily and one-time limits. XP data is used to show progression, levels, missions and rankings, and to prevent fraud and abuse.

Leaderboards show only username, level and XP, never email addresses. By turning off "Appear on public leaderboards" you are removed from leaderboards while keeping your XP and progression.

XP is not money or cryptocurrency, cannot be redeemed and cannot be transferred for money. Legal basis: performance of a contract; legitimate interest for abuse monitoring.

PLAYER+ and CREW+ are optional subscription plans. Data processed: plan type, status, billing period, payment provider identifiers (customer and subscription ID), transaction status, renewal and cancellation information.

Payments are processed by Stripe through Lovable's built-in payments integration. Full card numbers and CVC codes are not stored in the ViceCrewHub database. Stripe's privacy policy: https://stripe.com/privacy

Legal basis: performance of a contract; legal obligation for retaining accounting records (Art. 6(1)(c)).

Pending verification: To verify whether Stripe acts as Merchant of Record for live payments or the controller is the merchant. Payments currently run in test mode. No invoicing provider (e.g. Billingo) is connected.

Data processed: registered email address, username, channel or profile link, Content Creator badge, complimentary premium entitlement and its validity, plus administrator notes and audit history.

This data is used to identify participants and administer the program. Complimentary access does not require publishing advertising content. Legal basis: legitimate interest or performance of a contract.

When you contact us, we process your contact details, correspondence, the content of your request or complaint and relevant history. Purpose: responding to your request. Legal basis: legitimate interest; legal obligation for complaints.

Pending verification: Support email and retention period are not yet defined.

While operating the service, the hosting and database infrastructure may log IP addresses, browser information, session identifiers, sign-in events and error logs. The platform records your last activity time every minute for online status, and analyses activity patterns to flag possible XP abuse.

Purpose: preventing unauthorized access, troubleshooting and keeping the service secure. Legal basis: legitimate interest.

Uploaded avatars, cover images, crew images and post images are stored in private storage, in the uploader's own folder. Storage contents cannot be listed, and only the owner can upload, replace or delete files.

Images are served through the platform and remain accessible only while a profile, cover, post or crew uses them. Anyone holding an image link can open it while the image is in use; links do not prevent someone from saving a displayed image.

The platform does not use analytics, marketing or advertising cookies, so no consent banner is shown. We only use browser storage needed for the service:

• sb-…-auth-token (local storage, Lovable Cloud): sign-in session; until sign-out or expiry; necessary
• crewhub-language (local storage, ViceCrewHub): selected language; until cleared; necessary for the requested feature
• Stripe cookies and scripts: only on the payment page, fraud prevention and payment; per Stripe's rules; necessary for payment
• Google sign-in: only if you choose it, with Google's own cookies

Pending verification: Exact names and lifetimes of cookies set by Stripe and Google to be verified against provider documentation.

We use the following providers to run the platform:

• Lovable (Lovable Cloud): application, database, authentication, file storage, hosting; processor
• Cloud and database providers underlying the infrastructure (Lovable Cloud sub-processors); processors
• Stripe: payment processing; partly an independent controller for payment data
• Google: optional sign-in; independent controller
• Authentication emails sent through Lovable Cloud; processor

Pending verification: Lovable sub-processors and the data processing agreement to be verified.

Some providers (e.g. Stripe, Google, cloud infrastructure) may process data outside the European Economic Area, for example in the United States. In such cases the safeguards applied by those providers (e.g. the EU–US Data Privacy Framework or Standard Contractual Clauses) apply.

Pending verification: Database storage region and transfer safeguards are not verified.

Data processed: reports, moderation decisions, blocked accounts, suspicious activity and XP abuse alerts, related records.

Suspicious activity alerts are generated automatically, but they do not by themselves establish wrongdoing and never trigger automatic sanctions: an administrator decides on any action. We do not use solely automated decision-making with legal or similarly significant effects. Legal basis: legitimate interest.

Account, profile, community, crew and XP data is kept while your account exists; you can delete your own content at any time. Payment and accounting records must be kept under Hungarian accounting rules (typically 8 years under the Accounting Act).

XP transactions and administrator audit logs are immutable for abuse prevention. Account deletion is currently handled on request (see section 18).

Pending verification: Handling after account deletion, and retention of security logs, support correspondence and backups, are not yet defined.

Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability, objection, withdrawal of consent, not to be subject to solely automated decisions, and to lodge a complaint.

You can view and edit your profile data yourself on the Settings page. Data export and account deletion can currently be requested at the controller's privacy email. We generally respond within one month, which may be extended by two further months where justified.

You can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, https://www.naih.hu, 1055 Budapest, Falk Miksa utca 9–11.) or the authority of your place of residence, and you may also seek judicial remedy.

The platform's minimum age has not yet been defined.

Pending verification: Critical: minimum age and any parental consent are not defined (in Hungary, parental consent is required under 16 for consent-based online services under GDPR Art. 8).

Measures include: authentication, row-level access control in the database, server-side authorization, XP transactions protected by locking and unique identifiers, private file storage, administrator audit logs and abuse alerts.

No online service can guarantee absolute security; in case of an incident we act as required by law.

Changes to this policy are published on this page with an updated date and version number. We will also notify you on the platform of material changes.

For privacy questions, contact us at the controller's email in section 2.

ViceCrewHub is an independent, unofficial fan community. It is not affiliated with, endorsed by or sponsored by Rockstar Games or Take-Two Interactive.