Legal
Privacy Policy
This is an independent GTA VI fan site run by one person, not a company. This page says plainly what is collected, what is not, who else your browser talks to while you are here, and what you can ask for — wherever in the world you are reading from.
Last updated: — the Discord apps section now covers the trap-channel bans, tickets and the health check.
GTA VI Vice City Hub is the site formerly shown as “GTA VI Hub” and “GTA Vice City Hub” — same site, at gtavivicecityhub.com. Everything here applies under all of those names.
Who is responsible
This site is operated by an individual based in New York, United States. Under the EU and UK GDPR that person is the data controller; under other laws, the equivalent responsible party.
Contact for anything on this page — questions, requests, complaints:
franko1117@gmail.com
There is no Data Protection Officer, and none is required at this scale. The address above reaches a person, not a ticket queue. This also serves as the point of contact under Article 11 of the EU Digital Services Act.
The short version
- You can read this entire site without giving anything. No account, no email, no login.
- Nothing is ever sold or shared for advertising. There is no ad-tech on this site at all.
- Analytics are off until you say yes, and stay off if you say no.
- Your game progress lives in your own browser, and nowhere else.
What is collected
No email addresses. The newsletter was discontinued on September 17, 2026. The site no longer has a signup form anywhere and sends no email. Addresses collected before that date are being deleted from the form store.
| Data | When | Why | Kept |
|---|---|---|---|
| Server request logs — IP address, user agent, page requested | Every visit | Security and abuse prevention, by the host | Per Netlify’s retention, typically 30 days or less |
| Local browser storage | As you use the site | Your preferences, cookie choice, game progress | Until you clear your browser |
| Analytics events — pages viewed, approximate region | Only after you accept | To see which pages are worth writing | Google Analytics default, 14 months |
| Discord username and the gamertag you type | Only if you use the tag button in Discord | To post your tag on the platform wall you chose | Until you ask for removal |
That table is the complete list. If something is not on it, it is not collected.
What is never done
- No selling or sharing of personal information — including no “sharing” as California defines it for cross-context behavioural advertising. This has never happened and is not planned.
- No behavioural advertising, ad networks, retargeting pixels or data brokers.
- No payment details are ever collected here. Support goes through Ko-fi, on Ko-fi’s own site under their policies.
- No account is required to read anything.
- No profiling, and no automated decision-making with legal or similarly significant effects.
- No sensitive categories — health, biometrics, precise location, race, religion, politics, sexuality.
Cookies and local storage
This site sets no advertising or tracking cookies. It uses your browser’s local storage for a small number of preferences, which never leave your device. The full list, key by key, is on the Cookies page.
Analytics cookies are placed only after you accept the banner, and you can change your mind at any time from the Cookies page.
Third parties your browser contacts
| Who | When | What they get |
|---|---|---|
| Netlify — hosting | Every visit | IP, user agent, page requested. Acts as a processor. |
| Google Fonts | Every visit | IP and user agent, to serve the font files. |
| Google Analytics 4 | Only after you accept | Page views and approximate region. IP anonymisation is on. |
| YouTube | Only if you play an embedded video | Whatever YouTube collects. Embeds use the no-cookie domain where possible. |
| Discord | Only if you use the Discord features | Your Discord user ID and anything you type into a form or command. The hub’s own Discord apps are described in the next section. |
| Ko-fi | Only if you follow a support link | Handled entirely by Ko-fi. No payment data touches this site. |
Each of these has its own privacy policy, and this site has no control over it.
The hub’s Discord apps (bots)
The hub runs five Discord applications, listed with their IDs on the Discord apps page. This is what each one processes. None of them follows conversations as they happen. The server app has Discord’s Message Content permission switched on so it can read channels through Discord’s API: it copies the GTA Online update posts we follow into daily-update and weekly-update, and the admins use it for moderation checks and for a backup of the server (messages and attachments included) that is kept on the owner’s computer and is not shared. It sends you one direct message, the channel guide, when you are approved. None of the apps is used for advertising or sold data.
| App | What it processes | Where it is kept, and for how long |
|---|---|---|
| GTA VI Vice City Hub (server app) | When you use /tag or the tag button: your Discord user ID, username, the platform and
gamertag you typed. It posts the tag as a public card in the server’s tag wall and grants the
matching platform role. Post scheduling and the radio dial state record the admin’s
username and the time. When you join or leave the server, your Discord username, user ID and the age
of your account are posted to a log channel that only the admins can see. If you post in the trap
channel, the app deletes the post, bans the account (removing one day of its messages) and writes your
username, user ID and the reason to an admin-only log; it does not read what you wrote. When you open a
ticket, the subject and details you type are posted in a private thread that only you and the admins can
see. A health check runs every 10 minutes on the bots’ own posts, feeds and the radio; it reads no
member messages. |
Tag records in Netlify Blobs (a key-value store operated by Netlify, our host) until you submit a new tag or ask for deletion; the public card until removed. Dial state is overwritten on every change. Scheduled posts are deleted once sent. Join and leave entries stay in the admin-only log channel. A ban and its log entry stay until an admin removes them; a ticket stays until its thread is deleted. |
| Automatic news (same app, server-side) | Reads public news feeds, drafts stories, and reads the ✅ / ❌ reactions of the admins on draft cards — the admin’s user ID and username are recorded as who approved a story. | Draft and published story records in Netlify Blobs, kept as the editorial record. |
| Hub Radio 92.0, Hub Radio Nightride, Hub Radio Vice City, Hub Radio Los Santos | They sit in a voice channel and play audio. They do not record audio, cannot hear you, and do not read messages. Hub Radio 92.0 shows a station panel to the admins; when an admin picks a station their display name is shown on the panel (“picked by …”) and written to the bot’s log. | Panel embeds live in the server until edited or deleted. Bot logs are on the operator’s machine or server and are rotated; they hold display names and timestamps only. |
Discord itself processes everything the bots do under Discord’s privacy policy. The Discord Developer Terms and Policy apply to the apps; they are used only for this server.
Why it is lawful to hold this — EU and UK legal bases
| Data | Legal basis (GDPR Art. 6) |
|---|---|
| Analytics | Consent — Art. 6(1)(a), collected before anything loads. |
| Server logs | Legitimate interests — Art. 6(1)(f): keeping the site up and unabused. |
| Discord tags | Consent — you type it in and submit it yourself. |
| Discord app records (admin approvals, dial picks, bot logs) | Legitimate interests — Art. 6(1)(f): running the server and keeping an honest record of who published what. |
Where your data goes
This site is operated from New York, United States and hosted by Netlify on infrastructure in the United States. If you are reading from outside the US, your data is transferred there.
For transfers out of the EEA, UK or Switzerland, the providers used rely on the European Commission’s Standard Contractual Clauses and, where applicable, the EU–US and UK–US Data Privacy Framework. You can ask for details at the address above.
Your rights, wherever you are
Everyone gets the same baseline here, regardless of where you live. You may ask for a copy of what is held about you, ask for it to be corrected, ask for it to be deleted, or object to it being held at all. Email franko1117@gmail.com. You will get an answer within 30 days, and there is no charge.
Identity is verified using the email address in question — a request has to come from the address it concerns, or it cannot be honoured.
New York — the home jurisdiction
This site is operated from New York, so New York law applies to it directly rather than only to visitors.
The SHIELD Act (N.Y. Gen. Bus. Law §§ 899-aa and 899-bb) requires reasonable administrative, technical and physical safeguards for the private information of New York residents, and notification if it is breached. In practice, for a site this size, that means: HTTPS everywhere, no passwords stored, no payment data collected, no Social Security or financial account numbers collected at all, third-party processors chosen for their own security posture, and only the minimum data kept for the minimum time.
If a breach exposed private information, affected New York residents would be notified without unreasonable delay, along with the NY Attorney General, the Department of State and the Division of State Police where the thresholds in § 899-aa require it.
New York has no comprehensive consumer privacy statute in force at the date above. The rights listed in this section are offered to New York residents anyway, on the same terms as everyone else.
European Economic Area, United Kingdom and Switzerland
Under the EU GDPR, UK GDPR and Swiss FADP you have rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time without affecting what was lawful before. You may also lodge a complaint with a supervisory authority — your national DPA in the EEA, the ICO in the UK, or the FDPIC in Switzerland. There is no EU or UK representative appointed under Art. 27; contact is direct, by email.
California
Under the CCPA as amended by the CPRA you have the right to know, delete, correct, and to opt out of sale or sharing — though there is nothing to opt out of, because personal information is never sold or shared, and has not been in the preceding 12 months. There is no financial incentive programme, and you will never be discriminated against for exercising a right. Categories collected map to identifiers, internet activity and commercial information under Cal. Civ. Code § 1798.140. Authorised agents may act for you with written permission.
Other US states
If you are in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Florida, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland or another state with a comprehensive privacy law, the same rights apply: access, correction, deletion, portability, and opt-out of targeted advertising, sale and profiling — none of which take place here. Where your state provides an appeal if a request is refused, email the same address with “appeal” in the subject.
Global Privacy Control is honoured. If your browser sends a GPC signal it is treated as a valid opt-out and analytics stay off.
Canada
Under PIPEDA you may access your personal information and challenge its accuracy, and may complain to the Office of the Privacy Commissioner of Canada. Quebec residents have additional rights under Law 25, including data portability.
Brazil
Under the LGPD you have rights of confirmation, access, correction, anonymisation, portability, deletion, information about sharing, and revocation of consent. Complaints go to the ANPD. No representative is appointed in Brazil; contact is direct.
Australia and New Zealand
Under the Australian Privacy Principles and the New Zealand Privacy Act 2020 you may request access and correction, and may complain to the OAIC or the Office of the Privacy Commissioner respectively. Overseas disclosure is to the United States, as described above.
China
Plain statement, because vagueness here would be dishonest: this site is operated from the United States, is published in English, is not directed at users in mainland China, and holds no ICP licence. No data is stored in China and none is transferred there. If you are in mainland China and have used this site, the rights in the section above are still offered to you as a matter of policy — access, correction and deletion — at the same email address. If PIPL applies to you, note that its cross-border rules mean this site is not a suitable place to enter personal information.
Japan, South Korea, India, South Africa and elsewhere
The baseline rights above — access, correction, deletion, objection — are offered to everyone, which meets or exceeds what APPI, PIPA, the DPDP Act and POPIA require of a site of this size. If your local law grants you something more, ask for it and it will be honoured where it is lawfully possible.
How long things are kept
- Server logs — per Netlify’s retention, typically 30 days or less.
- Analytics — Google Analytics default of 14 months.
- Local storage — on your device until you clear it. Nobody else can reach it.
- Discord tag records — until you submit a new one or ask; the public card until removed.
- Discord app records — radio state is overwritten on each change; news draft and publication records are kept as the editorial record; bot logs are rotated.
Security, honestly stated
The site is served over HTTPS, holds no passwords, takes no payments, and keeps no accounts.
No system is perfectly secure, and claiming otherwise would be a lie. If a breach affects your data, you will be told promptly, and any regulator that must be notified will be notified within the deadline that applies — 72 hours under GDPR.
Children
This site is not directed at children and does not knowingly collect anything from anyone under 13, or under 16 in EEA countries that set that age. GTA VI is rated for adults. If you believe a child has submitted information, email the address above and it will be deleted.
Changes
Material changes will be dated at the top of this page. Continuing to use the site after a change means the updated policy applies. If a change ever required new consent, you would be asked again rather than opted in quietly.
Contact
Privacy questions, data requests, complaints, or anything on this page:
franko1117@gmail.com