Privacy policy
Last updated: May 2026.
This page describes what data FiveBan (operated at fiveban.xyz)
collects, how it is used, and what your rights are.
Short version
- We log Discord IDs of confirmed cheaters and contextual evidence (server name, ban reason, evidence URLs).
- We use only essential cookies (login session, language preference).
- We do not run advertising trackers, Google Analytics, or fingerprinting.
- We do not sell your data — ever.
What we collect
Authenticated users (Discord OAuth)
When you sign in via Discord, we receive your Discord ID, username, display name, avatar URL and which roles you have on the official FiveBan Discord server. This is stored in a session cookie until you sign out.
Cheater records
Public record (/lookup, /api/v1/check):
- Discord ID
- Last known username
- Status (clean / suspicious / confirmed)
- Ban reason
- Date of ban
- Number of related accounts (alts)
Internal staff record (not exposed publicly):
- Evidence URLs / screenshots
- Cross-server message excerpts (gathered with the originating server's permission)
- Staff notes
- Ticket transcripts
API key holders
If you operate a FiveBan-protected server, we log:
- Your server name + Discord owner ID
- API key (hashed at rest; raw value shown only once at issue)
- Number of API hits / day (rate-limit & abuse detection)
Lookup logs (check_logs)
Each lookup (Discord /check, website lookup, API hit) is logged with
partial caller identifier (e.g. api:abc123… for keys, or
authenticated user ID). Used for abuse detection. Retention: 365 days.
Cookies
fiveban_locale— language preference (1 year)fiveban_cookies_ack— that you've seen this banner (LocalStorage)authjs.session-token— login session, HTTP-only, encrypted__Secure-authjs.callback-url— OAuth callback only
That's it. No tracking pixels, no third-party analytics.
Sharing
- We share data with partner FiveBan servers via the API: when you
use
/check, the response contains the public ban record described above. - Confirmed cheaters' Discord IDs may be shared in the
#evidence-archivechannel of our Discord (Members can read this). - Subpoena / court order: if compelled by EU court, we comply, but we publicly disclose the request to keep our community informed.
Your rights (GDPR / CCPA)
You can:
- Export your data — open a Discord ticket → Privacy. We respond within 30 days with a JSON dump.
- Request deletion — also via Discord ticket. If you're a confirmed cheater, we keep the record (legitimate interest = community safety), but anonymize personal fields (username, avatar). The hashed identifier stays for cross-server detection.
- Object to processing — see above; case-by-case.
- Lodge a complaint with your data protection authority. CZ: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7.
Data controller
This site and the FiveBan dataset are operated as a community project. Reach out via Discord ticket → Privacy for the legal entity / contact person.
Changes
We'll bump the date at the top and post a changelog entry on #changelog
in Discord. Material changes (e.g. selling data) would require explicit
consent — but we don't plan any.