The short version
We keep what your account needs and nothing more. If you sign up, we store your email address, a hash of your password, your profile, and what you save or track. If you join the newsletter, we store that email address and send the newsletter until you unsubscribe. We count visits with Vercel Web Analytics, which sets no cookies and shows us totals, not individual visitors. There are no ad trackers, and one cookie: the one that keeps you signed in.
The community board, submissions, and notifications are still demos. What you do there stays in this browser and is never sent to us.
What we store for your account
You can browse GTA 6 Supply without an account. When you create one, these are kept in our database:
- Email address
- Used only to sign you in, confirm your address, and reset your password. It is never shown on your profile or to other people.
- Password
- We store a one way hash of it, never the password itself. Nobody here can read it, and it is never logged.
- Profile
- Your username, display name, avatar choice, and bio.
- Saved entries and progress
- The entries and topics you save, and the checklist items and map places you mark as done.
- Preferences
- Your spoiler level, motion, map and feed view settings, and notification and email settings.
- Sessions
- One record per signed in device: a session id and token, when it was created and last updated, when it expires, and the IP address and browser user agent it was created from. Signing out removes that record; otherwise it expires 30 days after you last used the site.
- Reset links
- Password reset requests keep a short lived token until it is used or expires an hour later.
To slow down password guessing, the sign in and sign up forms keep brief counters keyed by IP address. They are not linked to your account and reset within minutes.
What stays in your browser
The demo features keep their data in your browser's storage, under keys that start with gta6supply:. None of it is sent to us, it does not sync between devices, and nobody else can see it. We never read storage that belongs to other sites.
- Community demo
- Topics, replies, reactions, follows, reports, and which notifications you have read. Posts carry your profile name, but they live only here.
- Drafts and submissions
- Unsent drafts and discovery submissions. For attached images, only the file name and size are kept; the image is never uploaded.
- Conveniences
- A working copy of your preferences, which spoilers you chose to show, and small page states such as a pending save while you sign in.
How we count visits
We use Vercel Web Analytics to see how many people visit, which pages they read, and which sites send them here. It sets no cookies and shows us totals, not individual visitors. To tell visits apart, Vercel uses a hash made from each request and discards it after 24 hours.
For each page view, it records:
- Page
- The page address and its pattern, such as /news/[slug], without anything after a question mark or #. Search terms and links from emails are never included. Profile pages are recorded as /u/[username], without the name.
- Referrer
- The site that linked you here, such as a search engine, when you arrive from another site.
- Location
- Your country, and your region or city where Vercel can tell, worked out from the request. It is not tied to your IP address.
- Browser
- Browser name and version.
- Operating system
- Operating system name and version.
- Device type
- Phone, tablet, or desktop.
- Time
- When the page was viewed.
No personal data or account details are sent: not your email address, username, or password, and nothing you save, write, or search for. Password reset, email confirmation, and account pages are not counted at all, because their addresses can carry private links.
Only the live site counts visits. Preview builds and local copies send nothing. Vercel describes what it collects in its Web Analytics privacy notes (opens in a new tab).
Account emails confirm your address, reset your password, and welcome you after you confirm. They come from our own domain and are delivered by Resend, which handles your address and the message to send it.
The newsletter is separate from accounts and you join it only on purpose. When you enter an address in the newsletter box, we store it with its status (waiting for confirmation, subscribed, or unsubscribed) and the dates it changed, and send one email with a confirmation link. Nothing else is sent until you press confirm. If you never confirm, the address is deleted after seven days. The newsletter goes out once a week, on Thursdays, with the news from the past seven days. Issues are delivered by Resend, which also keeps confirmed addresses as contacts. We record which issue went to which subscriber, so nobody gets the same issue twice. If you sign up on the countdown page for an email when GTA VI unlocks, we also store the store region you picked and when that one email went out. The calendar file on the countdown page is a download; we store nothing for it.
Every newsletter email has an unsubscribe link, and mail apps that offer a one tap unsubscribe button use it too. After you unsubscribe we send nothing more and keep the address only, marked as unsubscribed, so a later sign-up starts from a fresh confirmation. To have it removed completely, write to us at the address on the terms page. The email settings in your account do not send anything yet.
To stop the sign-up box being misused, we count sign-ups per connection and per address for an hour. The counts are stored under a one way code, never as your IP address or email.
How to delete your data
Delete your account from your account settings. It asks for your password, then removes your account and everything linked to it: email address, password hash, profile, sessions, saved entries, progress, and preferences. It cannot be undone.
The browser data above is separate. Remove it with the control below, or by clearing this site's data in your browser settings. Your account is not affected.
Keys this site writes in your browser, all starting with gta6supply:
- gta6supply:v1:state
- gta6supply:v1:scenario
Questions
Write to the address on the terms page with any question about your data, or to ask what we hold for your account.