Privacy policy
Last updated: September 2026
This policy explains what personal data we process on GeTAmmo, why we process it, and which rights you have under the GDPR.
Data controller
The data controller is GeTAmmo. Contact details are on the Contact page.
Data we collect
Account and session: email, hashed password, role, activity dates, and masked IP address in security logs. External sign-in (SSO): account identifier and email shared by Google, Discord, Steam, or Xbox. Shop and Support/Premium: cart contents, email, order/payment status, delivery details (Fourthwall), and granted Premium time (Paddle). Tools and notify list: garage scanner usage count, scan-allowance cookie (with masked IP and browser family), and email saved for new-feature alerts. Cookie consent: chosen categories, decision time, masked IP, and account ID (if signed in).
Sign-in with external accounts
When you sign in with Google, Discord, Steam, or Xbox, we store only the identifier needed to link your account. You can disconnect providers in your profile (except your last sign-in method).
Shop, orders, and support (Premium)
Physical product sales are fulfilled by Fourthwall, and portal support or ad-free Premium packages by Paddle (acting as sellers / Merchant of Record under their own terms and privacy policies). We share the data needed to open checkout and receive payment confirmation, order status, and delivery details to manage your account and handle claims. We do not collect or store payment card numbers. When partners process data outside the EEA, we rely on GDPR standard contractual clauses.
GTA 5 garage scanner
The scanner photo is used only transiently to read vehicle names (in server RAM or on your device) and is discarded immediately — we do not store the photo or recognized names. To count free scans we use a first-party cookie (scanner_client_id, 30 days) and a server counter record, which is linked to your account after sign-in.
Feature notify list
Signing up for a new-feature alert (e.g., My garage or the interactive map) is used solely to send a one-time launch email. Guests can request removal via the Contact page.
Cookies
Essential cookies support sign-in sessions, the shop cart, and the garage scanner counter. Optional cookies (preferences, analytics, marketing) are controlled by the consent banner, and we record proof of your choice on the server. See the Cookie policy page for details.
Advertising
When ads are enabled and you grant marketing consent, we display Google AdSense ads (on pages and during scanner breaks). Google and its partners may use cookies to personalize ads under their own policies.
Affiliate links and advertising (Amazon Associates)
GeTAmmo participates in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for sites to earn advertising fees by advertising and linking to Amazon websites (including amazon.com, amazon.co.uk, amazon.de, and localized Amazon stores). When you click on an affiliate link to Amazon, third-party cookies or tracking technologies may be placed on your browser by Amazon to track referrals and credit qualifying purchases. These cookies are subject to Amazon's own privacy policy.
Who receives your data
We share data only as needed to run our services: with sign-in providers (Google, Discord, Steam, Xbox), Fourthwall (shop), Paddle (support and Premium), Google (ads after marketing consent), and Amazon (when following affiliate links). We do not sell personal data.
Your rights (GDPR)
In your profile you can download a copy of your data (JSON export) and request account deletion (with a 30-day cancellation window). You can also change cookie consent at any time in the site footer or lodge a complaint with a supervisory authority (in Poland: UODO).
Retention
Account data (including tool usage history and notify-list entries) is kept while your account is active and for 30 days after a deletion request, after which it is permanently erased. Inactive guest scanner profiles are deleted after 30 days, and guest notify-list entries after the feature launches or on request. Security logs and cookie consent records are kept for up to 365 days. Order and payment records are kept for the period required by accounting and consumer laws (anonymized upon account deletion).