Privacy Policy

• Discord account info when you sign in: your Discord ID, username, avatar and email.
• Billing info if you buy a plan, the Pro Pass or credits: your Polar customer ID, your plan status and your purchases (we never see or store your card details; Polar handles payments).
• Basic technical logs (e.g. requests and errors) to keep the Service running and secure.
• Tool usage: which tool you used and when, plus the names of the resources you scanned or exported and the resulting scores and finding counts.

Some tools work in your browser and upload nothing. Others send files to our server to build what you download, or to an AI service. This is what is sent and how long we keep it:

• In your browser, nothing uploaded: scans in the Script Optimizer and the Vulnerability Scanner, the Script Bridge analysis, and the Loading Screen Creator editor.
• Sent only to build the game files you download, and deleted as soon as they are ready: Tattoo Creator, Clothing Creator, Jewelry Creator, Ped Creator, Animation Creator, Vehicle Creator and Livery Creator.
• A car you upload to the Livery Creator or the Vehicle Creator with a paid plan or the Pro Pass: kept on your account, within your plan's storage (Free 250 MB, Pro Pass 1 GB, Starter 5 GB, Pro 25 GB, Studio 100 GB), until you delete it. If you cancel or move to a smaller plan and go over the new storage, you have 60 days before the cars you used longest ago are deleted, and we warn you by email. When your storage is full, the car is kept for 24 hours only, your last 5 at most, so the export can use it.
• 3D Model → FiveM and the Weapon Creator: the model sent for conversion and the resource we return are deleted after 30 days. A conversion you publish in the gallery is kept while it is published.
• AI generation in the Prop Creator, the Weapon Creator, the Ped Creator, the Jewelry Creator and the Icon Generator: your prompt or image goes to Tripo or KIE. What you generate stays in your library, and so does the image you uploaded to make a prop or a weapon.
• ORBIE fixes, the Server Fixer, the Resource Translator, the UI Themer and the Script Bridge conversion: the code or text you send goes to Anthropic. Translations are deleted 1 day after you get them (30 days if you never do). We keep the result of each ORBIE fix, so an identical request can reuse it, and the files sent to the Script Bridge with their result, to fix failed conversions.
• Your files: many downloads are also kept on your account (your last 40 files, up to 400 MB) until you delete them or turn off “Keep my files on my account”.
• Saved projects (with their media) and themes stay until you delete them. Gallery photos you don't publish are deleted after 7 days. When you download an export, we keep a preview image of it and its name.

To authenticate you, provide the tools, manage your subscription, prevent abuse, and improve the Service. We don’t sell your data.

• Discord, for sign-in (OAuth).
• Polar, for payments and subscription management.
• Anthropic, for ORBIE fixes, the Server Fixer, the Resource Translator, the UI Themer, the Script Bridge and parts of the Weapon Creator: the code, text, prompt or image you send.
• Tripo, for AI 3D models: your prompt or image.
• KIE, for AI images (the image a prop, weapon or ped starts from, icons, cinematic photos): your prompt or image.
• Resend, Brevo, Mailjet, to send our emails: your email address.

These providers process data under their own privacy policies. We don’t share your data with anyone else except where required by law.

We only use our own cookies: a session cookie that keeps you signed in (30 days), short cookies for the Discord sign-in (10 minutes), and a random visitor ID (1 year) that counts visits and which tools are used, shared with our store on theorb.tech. We don’t use advertising or cross-site tracking cookies.

We keep your account data while your account is active. You can request access to, or deletion of, your data at any time by contacting us. We’ll remove your account and associated records.

Sessions use signed, http-only cookies and data is stored on our own server. No method is 100% secure, but we take reasonable measures to protect your information.

The Service isn’t directed to children under 13, and we don’t knowingly collect their data.

We’ll post any updates here with a new “last updated” date.