This explains what data Pixel Studio collects, why we collect it, how long we keep it, and the rights you have over it. We collect the minimum that lets the product work — nothing for advertising and nothing sold to third parties.
Sign-in is via Discord OAuth. We receive your Discord user ID, username, avatar URL, and the email address attached to your Discord account. We do not see or store your Discord password.
If you choose to connect a Discord bot to your panel, we additionally store the bot's token (encrypted at rest), the guild IDs you authorize the bot in, and the role/category/channel IDs the bot needs to operate.
When the bridge runs on your FiveM server, the panel receives heartbeats, player join/load/drop events, in-game character data (citizenid, names, money, items, vehicles), and the responses to admin actions you trigger. This data belongs to your community — we host it on your behalf, scoped to your tenantId.
We never look inside tenant rows except (a) on your explicit support request, (b) to debug a confirmed platform incident affecting your tenant, or (c) when required by law. Support access is logged.
Every admin action (ban, warn, kick, screenshot, inventory edit, etc.) is logged with actor, target, reason, result, and the FiveM-side response timestamp. The audit log is the central trust mechanism of the product and is retained for at least ninety days.
System logs (HTTP request logs, application errors) are retained for thirty days for security and debugging. These never include passwords, tokens, or full request bodies of sensitive endpoints.
We use one essential cookie to keep you signed in, and one preference cookie to remember your language (ar/en). We do not use analytics cookies, ad cookies, or third-party trackers.
Sessions expire after thirty days of inactivity. You can sign out at any time, which immediately invalidates the session on the server.
Automatic card payments are processed by Stripe; some regions may use a manually issued PayPal invoice. We store order and provider identifiers, amount, currency, plan, and payment status, but we never receive your full card number or bank login.
If you use a coupon, the coupon code and its redemption are stored for fraud prevention and accounting.
We do not sell your data. We do not share it with advertisers. We share data only with the infrastructure providers we need to run the product: the cloud hosts running the panel and database, the email provider for transactional mail, the payment processor for billing, and Discord for OAuth and bot operations.
If you operate the optional landing site on a custom domain, requests to that domain pass through our reverse proxy on the same terms as the rest of the platform.
Active tenants: data is retained as long as the subscription is active. Cancelled tenants: data is retained for thirty days, then purged. Audit logs of moderation actions: retained for at least ninety days even after purge. Backups: rolling thirty-day window.
You can request export of your tenant data in JSON at any time via support — we deliver within five business days.
Per-tenant bridge tokens are stored hashed and matched on each request. All panel-to-FiveM calls are HMAC-SHA256 signed against the raw request body. Bot tokens and other secrets are encrypted at rest. Sessions are HttpOnly + Secure cookies.
Cross-tenant access is prevented at the database layer: every query is scoped by tenantId, and our test suite includes cross-tenant access regression tests on every release.
You can request access to all data we hold about you, correction of inaccuracies, deletion of your account (subject to the audit-log retention noted above), or export to a portable format. We honor these requests regardless of where you live.
We do not sell data, so there is no opt-out of sale to configure. We do not use targeted advertising profiles. If you believe a right has been violated, contact us first; if unresolved, you may contact your local data protection authority.
Pixel Studio is intended for FiveM server operators, typically eighteen or older. We do not knowingly collect data from children under the minimum age required by Discord's terms (thirteen in most regions, sixteen in some). If you become aware of an under-age account, contact us and we will remove it.
We may update this policy when the product or the law changes. The last-updated date at the top of this page reflects the current version. Material changes are emailed to active customers.
Contact: support@pixelstudio.studio for privacy or data requests.
