Privacy policy
This privacy policy explains what personal data GTA6Sidekick ("we", "us") collects when you use https://gta6sidekick.com and the GTA6Sidekick app, why we collect it, how long we keep it and what your rights are. We wrote it to be read, not to be skipped. If anything is unclear, email privacy@gta6sidekick.com.
1. Who is responsible
The data controller is Nomast B.V., a company in formation under Dutch law, established in the Netherlands. Contact: privacy@gta6sidekick.com.
2. What we collect and why
2.1 Launch notification list
If you enter your email address to be notified at launch, we store that address, the page you signed up on, your browser language and the date. We use it to send you one launch announcement and the first weekly route. Legal basis: your consent (GDPR art. 6(1)(a)). You can unsubscribe with the link in every email or by emailing us, after which we delete your address within 30 days.
2.2 Account
When you create an account we store your email address, a user id, your sign-in method (email link or Google), your subscription status and the date you joined. If you sign in with Google we receive your email address and basic profile from Google; we do not receive your password. We use this to give you access to your account and to Premium features. Legal basis: performance of a contract (art. 6(1)(b)).
2.3 AI Sidekick questions
Questions you ask the Sidekick are sent to our server and, together with relevant content from our own knowledge base, to Anthropic PBC (USA) to generate the answer. We store the question, the answer and a daily counter per user (or, for visitors without an account, a hashed version of your IP address) to enforce the free daily limit and to improve our content. Please do not put personal data in your questions. Legal basis: performance of a contract and our legitimate interest in improving the service (art. 6(1)(b) and (f)). Anthropic acts as our processor and does not train its models on this data.
2.4 Payments
Premium subscriptions are sold by our merchant of record, Paddle.com Market Ltd (UK) and Paddle.com Inc. (USA). Paddle collects your payment details, billing country and, where required, tax id and processes the transaction; we never see your full card number. Paddle sends us your subscription status, plan and the email address used at checkout so we can unlock Premium. Paddle's privacy policy applies to the checkout: paddle.com/legal/privacy.
2.5 Push notifications
If you opt in to push notifications we store the push subscription your browser generates (an anonymous endpoint at Apple, Google or Mozilla) and link it to your account if you have one. We use it only to send the notifications you opted in to, such as the weekly route. You can turn this off in the app or in your browser settings at any time. Legal basis: consent.
2.6 Tracker and preferences
Your checklist progress, the items you own for the optimizer and your app preferences are stored on your device (localStorage / IndexedDB). If you are signed in they are also synced to your account so you can use them on another device.
2.7 Technical data and security
Our hosting provider automatically logs IP addresses, user agents and requested pages to keep the site secure and available. These logs are kept for a limited period and are not used to profile you. Legal basis: legitimate interest (art. 6(1)(f)).
2.8 Statistics and advertising
We currently do not use analytics or advertising cookies. When we introduce them we will ask for your consent first, and you will be able to withdraw it at any time via "Cookie settings" in the footer. See our cookie policy.
3. Who we share data with
We share data only with processors that help us run the service, under data processing agreements: Supabase Inc. (database, authentication and server functions; EU region), Anthropic PBC (AI answers), Paddle (payments), Google (sign-in with Google and, with consent, analytics and ads), Hostinger (hosting) and our email provider for transactional and launch emails. We do not sell personal data.
4. International transfers
Some processors are in the United States. Where data leaves the European Economic Area we rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
5. How long we keep data
| Data | Retention |
|---|---|
| Launch list email | Until you unsubscribe, at the latest 12 months after launch |
| Account data | As long as your account exists; deleted within 30 days after you delete it |
| Sidekick questions and answers | 12 months, then anonymised |
| Daily usage counters | 7 days |
| Subscription and invoice data | 7 years (Dutch tax law) |
| Push subscriptions | Until you unsubscribe or the endpoint stops working |
| Server logs | Up to 30 days |
6. Your rights
Under the GDPR you may ask us to access, correct, delete or export your data, to restrict or object to processing, and you may withdraw consent at any time without affecting earlier processing. You can delete your account yourself from the account page. For anything else email privacy@gta6sidekick.com; we respond within one month. You also have the right to lodge a complaint with your supervisory authority; in the Netherlands that is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
If you live in California or another US state with a privacy law, you have comparable rights to know, delete and correct, and to opt out of the sale or sharing of personal data. We do not sell personal data. Consent-based advertising can be switched off via "Cookie settings".
7. Children
GTA6Sidekick is intended for users aged 16 and older, in line with the age rating of the game it covers. We do not knowingly collect data from children under 16. If you believe a child has given us personal data, email us and we will delete it.
8. Security
All traffic is encrypted (HTTPS). Data is stored with providers that hold recognised security certifications, access is limited to what is needed, and API keys for third-party services are only ever held on our servers, never in the app.
9. Changes
We will update this policy when our service or the law changes. The date at the top tells you when it was last revised. For material changes we notify registered users by email or in the app.