Last updated: October 4, 2026
This Privacy Policy explains how we collect, use, share, and protect personal data when you use our website, dashboard, and anticheat services (the "Services"), and the rights you have under the EU General Data Protection Regulation (GDPR) and similar laws. Please read it together with our Terms of Service.
The Services are operated by XeroScripts ("we", "us"), acting as a platform operator. For any privacy question or request, contact us by email at [email protected] or through our Contact page.
XeroScripts is the data controller for the operation of this website and for the accounts of customers (server owners) who sign in and manage their licenses.
For the personal data of players that is processed through the anticheat on a protected server, the owner of that server is the data controller. The server owner chooses to use XeroShield and determines the purposes of the processing, while XeroScripts acts as a data processor on the server owner's behalf and under their instructions, including for the shared ban network.
We periodically update this Privacy Policy to reflect changes in our practices, technology, and legal requirements. The date at the top shows when it was last updated. For significant changes we may also notify you by other means, such as an email or a notice on our website. Continued use of the Services after changes take effect means you accept the updated policy.
Account and customer data (server owners and staff):
Player data (people who connect to a protected server):
Screenshots and recordings capture only the in-game view of FiveM. They do not capture your desktop, other applications, or anything outside the game. We do not intentionally collect special categories of personal data.
We only collect and use data for the anticheat purpose and to operate the Services. We do not collect data for anything unrelated to the anticheat, and we do not use your data for advertising or unrelated profiling.
We do not sell or rent your personal data. We share personal data only with the providers and parties needed to run the Services:
If your data is processed because you connected to a server that uses XeroShield, we did not receive it directly from you. The server owner decides to use XeroShield and is the data controller of that server's data, responsible for informing you and for handling your requests. XeroScripts processes that data on the server owner's behalf, including the shared ban network.
You can exercise your rights by contacting the server owner, or by contacting us at [email protected], and we will route your request appropriately.
We keep personal data only for as long as necessary for the purposes above, for the duration of our relationship with you, or as required by law. As a provider of anticheat services, our legitimate interests require us to retain certain player data long enough to identify, investigate, and combat cheating and to enforce bans across the network.
We follow the principles of data minimisation and storage limitation, and delete or anonymise data once it is no longer needed. Because this is an anticheat service, the data required to keep a ban in effect is retained for as long as the ban applies. A request to erase such data cannot be granted while the ban is active, since removing it would effectively lift the ban and undermine the protection we provide. Where the law requires it, or for legitimate business purposes, we may retain limited information for a longer period.
We apply technical and organisational measures to protect your data against unauthorized access, alteration, disclosure, or destruction, including secure networks, access controls, and two-factor authentication for accounts. We review and update our practices to address new threats.
No method of transmission over the internet or method of electronic storage is completely secure, so we cannot guarantee absolute security. Please help protect your account by keeping your login credentials confidential.
In the event of a personal data breach, we will take steps to limit the impact and will notify affected users and the relevant supervisory authority where required by law.
Subject to applicable law, you have the right to access your personal data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. Where we rely on legitimate interests, you may object to that processing.
To exercise any right, email [email protected] or use our Contact page. We may ask you to verify your identity before we act, and we will respond within 3 days.
If you are in the EU or EEA and believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection supervisory authority.
Some cheat detections and bans, including cross-server matches, are generated automatically. Enforcement on a given server is decided by that server's administrators, and you can contest a ban or an automated match by contacting the server owner or us at [email protected].
The Services are not directed to children below the age of digital consent that applies in your country (16 under the GDPR, or as low as 13 in some EU member states). We do not knowingly collect personal data from children below that age.
If you have questions or comments about this Policy, email us at [email protected] or visit our Contact page.