Privacy

The short version

If you only read pages here, we collect nothing about you beyond what any web server necessarily sees in order to answer a request. There are no accounts, no analytics and no non-essential cookies.

If you submit a whitelist application, that is different, and most of this page is about it.

If you email us, your message and your email address are kept in the support mailbox. Third parties, below, says where.

What the server necessarily sees

Like any website, our hosting provider processes your IP address and browser user-agent in order to deliver pages and to protect the site from abuse. These sit in short-lived operational logs and are not used to build a profile of you.

What we deliberately do not do

The live player count on this site is fetched by our server rather than by your browser, and it is a count and nothing else. We do not receive, store or publish the identifiers of players connected to the game server: not licence hashes, not Steam IDs, not Discord IDs, and not IP addresses.

The community figures on the Discord page are aggregate counts from Discord’s public invite endpoint. We do not read, store or display the names of individual Discord members.

Third parties

• Discord: following our invite takes you to Discord, under their privacy policy.
• Tebex: any purchase happens on Tebex, under their privacy policy. Card details never reach this site.
• FiveM and Cfx.re: connecting to the game server is a connection to Cfx.re infrastructure, under their terms.
• Cloudflare: hosts this site and runs the anti-spam check on the application form, under their privacy policy.
• Hostinger: hosts the support mailbox. If you email us, your message and your email address are held there and read by staff, under Hostinger’s privacy policy. We have not set a deletion period for email yet. Ask, and we will delete your messages too.

Whitelist applications

This is the only place the site holds real personal data about you, and you have to choose to give it.

When you submit an application we store your Discord username, the age you enter, your character name, and the three written answers. We also store the date you applied, the status of the application, and any notes staff make while reviewing it. Nothing else about you is recorded, and none of it is ever shown publicly.

Your Discord username is stored so staff can reach you, and so the site can stop one person having several applications open at once. Your age is stored only to check you are old enough to play here; we do not ask for or store a date of birth.

Who can see it

The staff team reviewing applications, and nobody else. Applications are not published, not shown to other players, and not used for anything except deciding whether to whitelist you.

You can check your own application with the reference you were given when you submitted. That reference is the only key to it on this site, which is why it is worth keeping. Staff will never ask you for it, and never send it by email.

How long we keep it

While an application is open, we keep it. After a decision we currently keep it as history, so staff have context if you apply again.

We have not yet set an automatic deletion period, and we would rather say so than quote one we do not enforce. Until we do, email support@blackhalorp.com with the Discord username you applied with to ask for your application to be deleted. Staff will confirm the request by Discord message to that account before deleting anything, and will then remove all of it, including anything staff wrote about it and the emails about it.

Anti-spam

The application form uses Cloudflare Turnstile to tell people from bots. Cloudflare receives your IP address and some browser characteristics to make that judgement, under Cloudflare’s privacy policy. It does not track you across other sites and it does not set an advertising cookie.

To stop one connection sending many applications in a day, the site also keeps a one-way hash of your network address, mixed with the date, for two days after you apply. It is stored on its own, never alongside your application, and it cannot be turned back into the address.

Still to come

Accounts are not built yet, and neither are support tickets on this site. When they are, this page gets rewritten again before they go live, not after.

Contact

Data questions go to support@blackhalorp.com, which is monitored by Kris Racks.