Privacy Policy.

Who we are

HeistGo is operated by the HeistGo team (“we”, “us”). We are responsible for the personal information described here. Questions: [contact@yourdomain.com].

What we collect

When you use the site without an account

• Basic technical data (IP address, browser type, pages requested), recorded automatically by our host to deliver the site and keep it secure.
• A referral code, if you arrive through an invite link, stored in a cookie (see Cookies below).

When you join the waitlist or create an account

• Your email address, used to send your sign-in code and, if you joined the waitlist, launch news.
• Your profile: console (PS5 or Xbox), the character you play, your referral code and who invited you.
• What you save in the tools: map markers and notes, car builds, outfits and money planner entries.

When you buy the Pass

Payment is handled by Stripe, Inc.. We receive confirmation that you paid, the amount and date, your plan and its renewal date, but never your full card number.

Please do not write sensitive personal information in your notes. We do not need it.

Why we use it

• To run your account and save your data across devices (performance of our agreement with you).
• To unlock what you paid for and keep records required by tax law (legal obligation).
• To credit referral rewards and creator codes (performance of our agreement with you).
• To send launch news if you asked for it; every email has a way to unsubscribe (consent).
• To keep the site secure and prevent abuse (our legitimate interest).

We do not sell or “share” your personal information for cross-context behavioral advertising, and we do not use it to profile you.

Who processes it for us

We only share data with service providers that help us run the site, under contract:

• Replit, Inc.: hosting.
• Supabase, Inc.: database and sign-in.
• Resend, Inc.: sign-in code emails.
• Stripe, Inc.: payments.

We may also disclose information if required by law, or as part of a sale or merger of our business, in which case this policy continues to apply.

Cookies

We only use cookies needed for the site to work. We use no advertising cookies.

• Sign-in cookies (names starting with sb-): keep you signed in. Removed when you sign out.
• Referral cookie (gta6_ref): remembers who invited you, for 30 days.
• Language cookie (heistgo_lang): remembers the language you chose (English or French), for one year.

How long we keep it

We keep your account data until you delete your account or ask us to. Waitlist emails are kept until you unsubscribe or until launch news is no longer relevant. Payment records are kept as long as tax law requires. Server logs are kept for a short period by our host.

Your rights

Wherever you live, you can ask us to access, correct, export or delete your personal information, or to stop sending you emails. Email [contact@yourdomain.com] from the address linked to your account. We answer within 30 days and we will not treat you differently for using these rights.

California residents have these rights under the CCPA/CPRA, including the right to know, delete, correct and opt out of sale or sharing (we do neither). Residents of the EU, UK and similar countries also have the right to object, to restrict processing, to withdraw consent at any time and to complain to their data protection authority.

International transfers

Our providers may store data in the United States or other countries. Where required, transfers rely on appropriate safeguards such as the standard contractual clauses.

Security

Data travels over encrypted connections, each account can only read its own saves, and sign-in uses one-time codes sent by email instead of passwords. No system is perfectly secure, but we take reasonable measures to protect your data.

Children

The site is not directed to children under 13, and we do not knowingly collect their personal information. If you think a child gave us their information, contact us and we will delete it.

Changes

If we change this policy, we will update the date at the top of this page, and tell account holders by email if the change is significant.

Contact

The HeistGo team. Email: [contact@yourdomain.com].