Privacy Policy

Website visitors: anyone browsing zerohax.net.

Customers: server owners who buy a license, and the admins they invite to help manage it in the panel.

Players: people who join a FiveM server protected by ZeroHax. Players never sign up with us directly; their data reaches us through the server they connect to.

Websites run by our customers, including their own Discord servers and stores, are not covered by this policy.

The data controller responsible for your personal data is ZeroHax, operated as an individual based in Hungary.

Email: [email protected]. Website: https://zerohax.net. Postal address available upon request to the email above.

Account data: email address, username, display name and avatar, collected when you create a panel account or sign in with Discord.

Game and moderation data: your Steam ID, Discord ID, IP address, hardware ID and hardware fingerprint, gameplay session data, and moderation records (bans, notes and threat-scoring history) tied to those identifiers.

Evidence data: when an admin actively reviews a flagged player, the AntiCheat client may transmit a live screen stream or a one-off screenshot to that admin as ban evidence. This only happens during an active moderation review, not continuously, and is not recorded or stored afterwards.

Technical data: browser type, device information, login session metadata (IP address, user agent), and the bot-check signals described under Cookies.

Transaction data: purchases and license assignments. Payment card details are handled entirely by Tebex; we never receive or store them. Tebex may collect identifying information about the device you check out from to detect and prevent fraud.

Support data: messages you send us and our replies.

Running your account, license and panel access is part of the service you signed up for, so we rely on our contract with you. The same goes for answering your support requests.

Spotting cheaters, enforcing bans, matching bans across servers and reviewing evidence all serve a legitimate interest: keeping games fair and our platform secure. Keeping bots and abuse off the website with Cloudflare Turnstile falls under that interest too.

We handle payments partly to fulfil your order and partly to stop fraud, which is also a legitimate interest.

Looking at overall website traffic helps us improve the site. This is a legitimate interest, and it never identifies you personally.

Hungarian accounting law requires us to keep invoices and transaction records, so we keep those to meet a legal obligation.

We may combine data into statistics that no longer identify anyone, such as how many detections fired in a month or how many servers are active. These figures may be published or shared, since they contain no personal data.

Moderation records, hardware IDs and ban history are retained indefinitely to enforce permanent and hardware bans across our services.

Account data is retained for as long as your account is active, and deleted within a reasonable period after you close it, unless we must keep parts of it to resolve an active ban or dispute.

Invoice and transaction records are kept for 8 years, as required by Hungarian accounting law.

Live stream data from the watch feature is never recorded or stored; it exists only for the duration of an active review session.

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction, including TLS encryption in transit, access controls on our systems, and secure payment processing through Tebex. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We use two essential cookies: one keeps you signed in to the panel, and one remembers that your browser passed our bot check, so you are not challenged on every visit. Both are required for the service to function and do not need consent.

The bot check is provided by Cloudflare Turnstile, which evaluates technical signals from your browser (such as IP address and browser characteristics) to tell humans from bots. See Cloudflare's Turnstile privacy addendum.

Website analytics are collected on zerohax.net through a self-hosted, cookieless analytics tool. It does not set cookies or identify individual visitors.

We do not use marketing or advertising cookies.

Live screen-watch streams are relayed through Cloudflare Realtime.

Ban evidence screenshots are stored with Fivemanage.

Ban evidence (screenshots, clips) may also be uploaded to a Discord webhook controlled by the server owner running your license.

Purchases and license management are handled by Tebex.

These providers act as processors on our behalf: they may access personal data only to perform their task for us, and may not use or disclose it for any other purpose.

We do not sell your personal data to anyone.

Some of our service providers, including Cloudflare, Tebex and Fivemanage, may process data outside the European Economic Area. Where this happens, we rely on their Standard Contractual Clauses or equivalent safeguards.

Access. Request a copy of the personal data we hold about you.

Rectification. Correct inaccurate or incomplete personal data.

Erasure. Request deletion of your personal data, except where we must keep it to enforce an active ban or meet a legal obligation.

Restriction. Ask us to limit how we use your personal data.

Portability. Receive the data you provided us in a structured, machine-readable format.

Objection. Object to processing based on our legitimate interests.

To exercise any of these rights, email [email protected] with proof of identity and details of your request. We respond within one month, extendable to three months for complex requests.

If you believe we have violated your data protection rights, you can lodge a complaint with Hungary's data protection authority:

Nemzeti Adatvedelmi es Informacioszabadsag Hatosag (NAIH), 1055 Budapest, Falk Miksa utca 9-11, Hungary. naih.hu.

Our systems calculate an automated threat score and cross-reference hardware IDs, Discord IDs and Steam IDs against known bans to flag likely cheaters and prevent ban evasion. This assists our moderation team; it does not itself impose a ban.

If your identifiers already match a ban a human administrator previously issued, our system may automatically deny that connection on behalf of the banning server. A brand new ban based only on an automated score requires confirmation by a human administrator before it takes effect.

If you have an account, we send emails only when they relate to the service: license, purchase, security and policy notices. We do not send marketing emails.

Our website may link to third-party sites. We are not responsible for their privacy practices, and encourage you to review their own policies.

We may update this policy from time to time. When we make material changes, we will update the date above and, where you have an account with us, notify you by email.

If ZeroHax is ever sold, merged or reorganised, the data covered by this policy may move to the new owner, who will remain bound by it. We will tell account holders before that happens.

This policy is written in English. If we provide a translation and it differs from the English text, the English version applies.

Questions about this policy or your data: [email protected].