Privacy Policy

WildRP is a volunteer-run, allowlisted roleplay community for RedM. This policy explains how wildrp.com (the “website”) handles personal data. It covers the website only; the WildRP Discord server and game servers are also subject to the terms of the platforms they run on.

We collect only what we need to run the community: to review applications, handle reports and appeals, keep the website secure, and understand how the website is used. We do not sell your personal data.

Use of the website is also governed by our Terms of Use.

The party responsible for processing your personal data (the “controller”) is the current Admin Team of WildRP. You can reach us at privacy@wildrp.com.

“Personal data” means any information relating to an identified or identifiable person, for example a name, an online identifier such as a Steam ID or Discord ID, or information specific to that person.

Information you give us:

• Allowlist, staff, developer, and law enforcement applications: your answers, including timezone, how you heard about us, your audio setup, character details, roleplay experience, and any links you share.
• Player reports, bug reports, and ban appeals: the details you describe, including any information you include about other players.
• Messages you send us by email.

Information from accounts you link on a form:

• Steam: your Steam ID, profile name, and avatar. We use your Steam ID to grant server access if you are allowlisted.
• Discord: your Discord ID, username, avatar, and whether you are a member of the WildRP Discord, which is required to apply. We check membership when you link the account; we do not keep the list of servers you belong to.
• Twitch (optional): your Twitch ID, username, and avatar, if you choose to link it.

We only receive what Steam, Discord, and Twitch share when you sign in with them. We never see your passwords.

Information collected automatically:

• Usage data through Google Analytics, if you allow analytics cookies: pages viewed, approximate location (country or city), device and browser type, and how you arrived at the website.
• Security signals collected by Google reCAPTCHA, such as hardware and software information, to tell people from automated abuse.
• Technical logs kept by our hosting provider and security software, such as IP address, the page requested, and the time, used to operate and secure the website.

• To review and decide on applications, and to contact you about them through Discord.
• To grant server access to allowlisted members using their Steam ID.
• To investigate reports, bugs, and appeals, and to enforce the community rules.
• To protect the website and community from spam, fraud, and abuse.
• To understand how the website is used and improve it.
• To meet legal obligations.

Where data protection law requires a legal basis, we rely on your consent (for analytics cookies and optional linked accounts), on our legitimate interests in running and protecting the community (for applications, reports, appeals, and security), and on legal obligations where they apply.

We use the following services, each of which processes data under its own privacy policy:

• Google Analytics and Google Tag Manager, for usage statistics. You can opt out with the Google Analytics opt-out add-on.
• Google reCAPTCHA, to protect forms from abuse. Your use of reCAPTCHA is subject to the Google Privacy Policy and Terms of Service.
• Supabase, which hosts the database where submitted forms and the website’s content are stored.
• Discord, for account linking and community membership, to deliver submitted forms to private staff channels, and for the live member count and avatars shown on the homepage, which come from Discord’s public server widget.
• GitHub, where bug reports are filed as issues for our development team.
• Steam (Valve) and Twitch, for account linking.

Some of these providers are located outside your country, including in the United States. Where data is transferred internationally, it is protected by the safeguards those providers offer.

A cookie is a small text file a website stores in your browser. These are the cookies and storage wildrp.com uses.

Needed for the website to work (always on):

• “wildrp_consent” remembers your cookie choice, for thirteen months.
• “wildrp-accounts” keeps the accounts you link on a form attached while you fill it out. It expires after three hours.
• “wildrp-attach” holds a one-time code while you sign in with Steam, Discord, or Twitch. It expires after ten minutes.
• Form drafts: your answers on any form are saved in your browser’s local storage as you go, so you don’t lose progress. They stay on your device until you submit the form or clear your browser data.
• Staff who sign in to edit the website get a sign-in cookie.

Security (always on, on pages with forms):

• Google reCAPTCHA sets its own cookies to tell people from automated abuse.

Analytics (only if you allow them):

• Google Analytics cookies (“_ga” and “_ga_” followed by an ID) count visits and show which pages are popular. They last up to two years.

We ask about analytics cookies on your first visit. Until you choose, and if you reject them, no analytics cookies are set. Google may still receive basic signals without cookies, such as that a page was viewed, with nothing stored on your device to identify you.

Your choice is remembered for thirteen months, after which we ask again. You can change it at any time with the “Cookie Settings” link at the bottom of every page; withdrawing consent also removes analytics cookies already set. You can also delete cookies through your browser settings.

Applications, reports, and appeals are stored in our database and posted to private Discord channels that only the WildRP staff who handle them can see. Staff can also read each one on a private page of the website, reached through a link only staff receive. Bug reports are also filed as issues on GitHub for our development team. We share data with the service providers above only as needed to run the website.

We may disclose personal data to authorities when required by law, or in response to an explicit and reasoned request from authorities investigating a suspected violation of law. Where permitted, we will notify affected individuals if this occurs.

We keep personal data only as long as it is needed for the purposes above or as required by applicable law. Applications, reports, and appeals, along with the account details linked to them, are kept for as long as they are relevant to community membership and moderation, including handling future appeals. You can ask us to delete yours at any time (see Your Rights). Analytics data is retained according to our Google Analytics settings.

Depending on where you live, you may have the right to access, correct, or delete your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority.

To exercise these rights, email us at privacy@wildrp.com. We may ask you to verify your identity, for example by confirming the linked Discord account, before acting on a request. We will respond within one month, which may be extended to two months for complex or numerous requests.

The WildRP community, including applications, is for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has submitted information, contact us and we will delete it.

We take reasonable measures to protect personal data, but no method of transmission or storage is completely secure. You are responsible for protecting your own devices and accounts.

We may update this policy from time to time. The date at the top shows when it was last changed. Significant changes will be announced in the WildRP Discord.

For questions about this policy or your personal data, contact us at privacy@wildrp.com.