Your privacy

Cookies and browser storage

The cookie banner controls optional first-party browser storage. Local storage is different from a cookie: these values stay in your browser and are not automatically sent with web requests. Our site code currently sets no cookies for analytics or advertising.

Accept preferences allows this site to remember your music on/off and volume choices, sunset or midnight appearance, motion setting, saved-file list, named collections, launch checklist, map reading checklist and spoiler filters across pages and visits. These settings are stored locally. Collections are uploaded only if you sign in and explicitly save your library to your account.

Reject optional removes those saved preferences from this browser and prevents the site from reading or saving them. The controls still work on the current page, but their choices and saved files reset when you leave it. Before you choose, optional storage stays off.

We save your accept or reject choice for up to 180 days so we can respect it without asking on every page. This necessary record contains only your preference and statistics choices, the date and the consent version. If your browser blocks storage, the choice applies to the current page and we may ask again on the next page.

Change cookie settings at any time, or use Cookie settings in the footer. Clearing this site's browser data also removes the choice. With JavaScript disabled, optional preference storage is inactive and the core pages remain readable.

Music and saved files

Music is hosted on this domain. It starts automatically where the browser permits it, or after a site interaction if autoplay is blocked. The sound control turns it off. Interacting with cookie settings does not trigger our autoplay retry. Accepting preferences lets us remember the sound choice on later pages. Playback does not contact an external music service.

Your saved-file list and map reading checklist stay in this browser when preferences are accepted. Map backups are files you explicitly download and can import on another device. They contain location identifiers and preferences, not an account or a cloud backup. The current checklist tracks files you have reviewed, not verified in-game completion.

Named collections and the launch checklist also stay on your device. A collection sharing link contains its name and chosen public page paths in the URL fragment. Anyone you share that link with can read and import that snapshot. Do not put private information in a shared collection name. Signing in and choosing Save this library to my account uploads a private backup. Loading a cloud library replaces the local library only after confirmation.

Hosting and security

Pages are served through Cloudflare to our AWS-hosted website. Hosting and security providers process request information such as IP addresses, timestamps and browser details to deliver and protect the service. Security features may use necessary cookies. The preference banner does not disable requests or security processing needed to load the site.

Fonts, artwork, the search index and interactive map data are served from this domain. We do not use hosting logs to build advertising profiles.

Trailer playback and external links

Trailer pages request preview images from YouTube. Pressing a trailer's play button loads a player from youtube-nocookie.com and connects your browser to YouTube; its own privacy terms then apply. This is a separate action from accepting local preferences. Outbound links also take you to sites with their own privacy policies.

Analytics and advertising

No advertising network or tag manager is installed. If you select the optional usage-statistics checkbox in Cookie settings, we load our owner-operated Umami script from stats.pm-axsus.com. It records public page paths, basic device information, an approximate country and named actions such as opening Discord or requesting a newsletter confirmation. It uses no analytics cookies. Query strings, URL fragments, email addresses, form text and member identifiers are not sent. Owner, account, request-removal, confirmation and unsubscribe pages are excluded. Confirmed subscribers are counted separately in our private database.

Statistics stay off before consent and after rejection. Do Not Track and Global Privacy Control also disable statistics. You can withdraw permission in Cookie settings. We do not call a Discord click a joined member or an opt-in request a confirmed subscriber. Future paid links and sponsor placements will be identified beside the content.

Community accounts and events

If member sign-in is enabled, Discord provides your account ID and display name through its identify permission. We do not request your email, messages, friends or server memberships, and do not store Discord access tokens. Signing in creates a necessary secure session cookie lasting up to 30 days, with a seven-day idle expiry. A temporary sign-in cookie expires after ten minutes.

Your member profile, collection backups and event RSVP history are private. Event pages show only aggregate RSVP counts. We keep inactive accounts for up to one year, and remove event RSVPs 90 days after the event. You can download your data or delete your account from My account. Deletion removes the active account, collections, RSVPs and sessions; backups have their own retention. It does not unsubscribe you from the separate newsletter.

Calendar downloads are snapshots stored by your calendar application. Later event changes do not automatically update them. Follow event announcements in Discord and check the event page before attending.

Private submissions and contact

Discovery, community-interest and partner forms send the fields you enter to a private database on our AWS server. We use them to review your request and, if you provide an email address, respond about that request. Community forms can optionally include your platform, time zone and play style to help us plan activities. These choices remain private. Community interest is not an email newsletter subscription. We never automatically publish submissions or sell contact information.

Requests are kept for up to 90 days and then removed by a daily cleanup. IP addresses are converted into a keyed hash for short-term rate limiting; raw IPs are not stored in the submission database. Hosting and security logs may separately contain request information as described above.

When form email delivery is enabled, Mailgun sends a receipt to the email address you provide and sends your submitted details to our private team inbox at [email protected], hosted by Google Workspace. These are messages about your request, not marketing subscriptions. Open and click tracking are disabled. Anonymous discovery submissions receive no visitor email.

Your confirmation email includes a private link to the request removal page. The page also provides that link after submission; keep it private. Using it removes the active website inbox record and cancels emails still waiting to send. A message already being delivered may still arrive. It cannot recall copies already sent to email inboxes; contact [email protected] to request removal of that correspondence. This does not retract published editorial content or correspondence needed for an agreed business relationship. Mailgun delivery logs, mailboxes and infrastructure backups have separate retention policies. A keyed address hash is retained for delivery failures and spam complaints to prevent further automated receipts.

Provide only the information needed for the request. Do not send secrets, payment details or sensitive personal information. No documents or images are uploaded through these forms. We ask before publishing an identifying contributor name.

Email subscriptions

When email signup is open, we collect your email address, selected topics and explicit consent. A confirmation email asks you to verify your address before you join the mailing list. Confirmation links expire after 24 hours; unconfirmed addresses are removed after seven days. Cookie choices, community-interest requests and private inquiries never subscribe you.

Our AWS server stores confirmed subscriptions, consent dates and topic choices. Mailgun processes email addresses, message content and delivery events to deliver our messages. Open and click tracking are disabled for messages sent by this newsletter. Replies go to [email protected], hosted with Google Workspace. These providers process data under their own service and privacy terms.

Every newsletter includes an unsubscribe link. Unsubscribing removes your plaintext address and preferences from our active subscriber record and cancels queued messages. A message already being delivered may still arrive. We retain a keyed address hash and minimal consent/suppression history to respect opt-outs and complaints; this is not used for advertising. Delivery attempt records and campaign snapshots expire after 90 days. Short-term rate-limit hashes expire after one day. Provider logs and infrastructure backups follow their separate retention policies.

Permanent delivery failures and spam complaints stop future sends. To change topics, unsubscribe and sign up again; another confirmation is required. For access, correction or deletion requests, contact [email protected]. There are no visitor accounts or public comments. You can also follow RSS updates without sharing an email address.

Private owner access

The owner dashboard is restricted to the team mailbox. Sign-in emails use single-use links that expire after 15 minutes. A necessary Secure, HttpOnly session cookie expires after eight hours, with one hour of inactivity allowed. It is used for authentication, not analytics. Sign-in rate-limit identifiers are keyed hashes. Stripped sign-in delivery records are retained for 31 days for sending limits; private administrative activity records expire after 90 days.

Changes

Changes to this page update the date above. New optional data uses will be disclosed before they are enabled.

Trademarks

GTA 6 Factz is an unofficial fan site. It is not affiliated with, endorsed by, or sponsored by Rockstar Games or Take-Two Interactive. Grand Theft Auto and all related marks are trademarks of their respective owners.