Privacy Policy

1. Information We Collect & Telemetry Transparency

FIVEBOOSTS operates as a performance stress-testing helper. We collect only the information necessary to securely validate license subscriptions and show diagnostic metrics in your user panel:

• Account Information: We store your email address, username, and registration timestamps. We do not store passwords because our system relies entirely on passwordless magic code authentication.
• Server Telemetry Logs: When your FiveM server executes our module, it periodically sends telemetry metrics (specifically Server FPS, physical RAM usage in MB, tick rate, and active simulated unit counts). These telemetry values are recorded in our database solely to render dashboard analytics and are automatically pruned.
• IP Whitelist Parameters: We record the server IP address configured in your security dashboard to validate authorized heartbeats.

2. Payment Token Processing & Polar.sh Integration

All subscription purchases, recurring invoices, and transaction processing are handled by our third-party merchant provider, Polar.sh. We do not collect, store, or process any payment card details, bank account numbers, or billing security codes on our servers.

When you subscribe, Polar.sh sends an encrypted webhook payload containing transaction IDs, plan limits, and customer email hashes to our servers. We save these references in our secure database logs to unlock the corresponding slot limits on your profile.

3. Cookie-Less Session Handling

We believe in maintaining a clean, privacy-respecting user interface. Our public website does not utilize any tracking cookies, analytics scripts, or third-party advertising pixels.

In our dashboard and administrative panels, we utilize a local session handler (`express-session`) containing encrypted cookie identifiers. These session cookies serve purely to verify that you are logged into your account and are immediately destroyed when you log out or close your browser tab.

4. Data Storage, Security, & GDPR Rights

Our database infrastructure is hosted securely on Railway.com. We apply strict security protocols to prevent unauthorized access, database leaks, or tampering. Under the GDPR and CCPA, you retain the following rights:

• The right to request access to the personal data we store on your profile.
• The right to correct inaccurate account fields.
• The right to withdraw newsletter opt-in consent.
• The right to request the total deletion of your account.

5. Automated User Data Deletion

If you wish to terminate your account and wipe all associated telemetry logs, license tokens, and email records from our systems, you can trigger an automated data purge. Simply contact us via Discord support or send a request from your registered email. Purges are completed automatically within 48 hours of verification.