Back to home
Legal

Privacy Policy

How PulseShield collects, uses, and protects your personal data. We take your privacy seriously and are committed to being transparent about our practices.

Effective: June 25, 2026 GDPR Compliant

1Introduction

PulseShield (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, purchase our anti-cheat software, or use our services.

We operate under Czech law (EU) and comply with the General Data Protection Regulation (GDPR), which is one of the most comprehensive data protection frameworks in the world. By using PulseShield, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, please discontinue use of our services immediately.

This policy applies to all visitors, users, and customers of PulseShield. It covers data collected through our website, the PulseShield anti-cheat software, dashboard interfaces, API integrations, Discord bots, and any other services we provide.

2Information We Collect

We collect only the minimal data necessary to provide and continuously improve our anti-cheat service. We do not collect any data beyond what is explicitly described below.

Account Information

  • Email address — Required for account creation, license delivery, and service-related notifications. We use your email to send you license keys, payment receipts, and critical security alerts.
  • Discord user ID — Optional. Used for support ticket identification and Discord webhook integration. You can disconnect your Discord at any time from your dashboard settings.
  • Authentication provider IDs — When you sign in with Discord, Google, or other providers, we store the provider's unique identifier for your account to enable seamless login.

Server and Detection Data

  • FiveM server IP address and port — Used to validate your license and ensure the software is running on authorized servers only. This also helps us prevent license abuse.
  • Server name, slot count, and player count — Displayed in your dashboard for monitoring purposes. This data helps you track your server activity at a glance.
  • Detection logs — When a potential cheater is detected, we record player identifiers, cheat type classification, timestamp, and severity level. This data is essential for the anti-cheat to function and is shared with the server license holder.
  • Resource metrics — CPU usage, heartbeat status, and module versions are collected to monitor software health, detect issues, and push updates when needed.

Billing Information

  • All payment processing is handled securely by our payment processor Polar.sh (powered by Stripe). We never have direct access to your full credit card numbers, CVV codes, or bank account details.
  • We store only your billing email address (may differ from account email), transaction amount, purchase date, and the license keys you have purchased. This information is necessary for tax compliance and customer support.
  • You can view your complete purchase history in your dashboard under License History at any time.

Technical Data (Collected Automatically)

  • IP address, browser type, and device information — Collected through our privacy-focused analytics for website optimization. This data helps us understand how users interact with our site and improve the experience.
  • Page views and interactions — We track which pages are visited and how they are used to improve our website content and navigation. This is anonymized where possible.
  • We do NOT use tracking cookies for advertising, remarketing, or cross-site tracking purposes. Our analytics solution is privacy-first and does not share data with third parties.

3How We Use Your Information

We use your information exclusively for the following purposes:

  • Providing and maintaining the anti-cheat service — This includes running detection algorithms, processing alerts, and keeping your server protected in real-time.
  • Processing license purchases and delivering license keys — We use your account email and billing information to complete transactions and deliver the purchased licenses to your dashboard.
  • Detecting, preventing, and addressing cheating activity — Detection logs are analyzed to improve our algorithms and protect the integrity of protected servers.
  • Service-related communications — We send license expiry reminders, payment receipts, security alerts, and important product updates. We will never send you marketing emails without your explicit consent.
  • Improving our detection algorithms and service reliability — Aggregated, anonymized detection data helps us identify new cheat patterns and release timely updates.
  • Complying with legal obligations and enforcing our Terms of Service — We may process your data as necessary to comply with applicable laws, regulations, or legal requests.

4Data Sharing and Third Parties

We respect your privacy and do not sell your personal information to anyone. We may share your data only in these limited, specific circumstances:

  • Payment processors (Polar.sh and Stripe): These companies handle all payment transactions securely. They receive your payment information directly and provide us only with confirmation of successful payment, transaction amount, and license metadata. They are PCI-DSS compliant and use industry-standard encryption.
  • Hosting providers: Our entire infrastructure is hosted within the European Union (EU) on ISO 27001-certified servers. Your data never leaves the EU.
  • Legal compliance: If required by law, valid legal process, or governmental request, we may disclose information. We will notify you of such requests when legally permitted.
  • Server owners (license holders): Detection logs from a specific server are shared with the server owner who holds the license for that server. This allows them to take appropriate moderation actions on their community.

We do not share your personal data with any other third parties for their own marketing purposes. We do not use data brokers, advertising networks, or similar services.

5Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law:

Account Data

Retained for the duration of your active account. If you request account deletion, all associated data is permanently deleted within 30 days of the request.

Detection Logs

Automatically anonymized or permanently deleted after 90 days. Anonymized logs may be retained longer for statistical analysis and algorithm improvement, but can no longer be linked to any identifiable individual.

Billing Records

Retained for 10 years as required by Czech tax and accounting laws. After this period, they are securely and permanently deleted.

Analytics Data

Retained for a maximum of 26 months, after which it is either anonymized or deleted.

6Your Rights Under GDPR

If you are located in the European Union, you have the following rights regarding your personal data under the General Data Protection Regulation:

Right to Access

Request a copy of all personal data we hold about you. We will provide this within 30 days, free of charge.

Right to Rectification

Request correction of any inaccurate or incomplete personal data we hold about you. You can also update most data yourself via your dashboard settings.

Right to Erasure (“Right to be Forgotten”)

Request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent. Note that some data may need to be retained for legal compliance.

Right to Restrict Processing

Request that we limit how we use your data in certain circumstances, such as when you contest its accuracy or object to its processing.

Right to Data Portability

Request a copy of your data in a structured, commonly used, machine-readable format, and request that we transfer it to another controller where technically feasible.

Right to Object

Object to processing of your personal data based on legitimate interests, including profiling. We will comply unless we have compelling legitimate grounds that override your interests.

To exercise any of these rights, contact us at panel@pulseshield.my. We will respond within 30 days as required by law. You also have the right to lodge a complaint with your local data protection authority (in the Czech Republic, the Úřad pro ochranu osobních údaj&uringrave;).

7Data Security

We implement robust technical and organizational measures to protect your data from unauthorized access, alteration, disclosure, or destruction:

  • 256-bit TLS encryption for all data transmitted between your servers, our dashboard, and our infrastructure
  • Encrypted storage at rest using AES-256 encryption for all sensitive data in our databases
  • Regular security audits and penetration testing conducted by independent third-party security firms
  • Strict access controls — Only essential personnel have access to production data, and all access is logged and audited
  • ISO 27001-certified EU data centers — Our entire infrastructure runs on certified, secure European hosting providers

While we implement industry-standard security measures, no method of transmission or storage is 100% secure. In the unlikely event of a data breach affecting your personal information, we will notify you within 72 hours as required by GDPR.

8Cookies and Tracking

We use minimal cookies and similar technologies. Our approach to tracking is privacy-first:

  • Session cookie: Required for authentication when you log into your dashboard. This cookie is temporary and is deleted when you close your browser.
  • Preference cookie: Stores your language selection and theme preference for a better user experience.
  • We do NOT use third-party tracking cookies, advertising cookies, social media pixels, or browser fingerprinting technologies.
  • We use a privacy-focused analytics solution that does not track you across different websites. You can opt out of analytics collection at any time.

9Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes:

  • We will update the “Last updated” date at the top and bottom of this policy
  • We will notify you via email for significant changes that affect your rights or our data practices
  • We may post a notice on our website or dashboard prior to the changes taking effect

We encourage you to review this Privacy Policy periodically. Continued use of our services after changes take effect constitutes your acceptance of the updated policy. If you do not agree with the changes, you may close your account and discontinue use.

10Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please don't hesitate to contact us:

Email: panel@pulseshield.my

Data Protection Officer: panel@pulseshield.my

Company: PulseShield s.r.o.

Registered Address: Prague, Czech Republic

Response Time: We aim to respond to all privacy inquiries within 48 hours, and no later than 30 days as required by GDPR.

Last updated: June 25, 2026