Privacy Policy

Last updated: January 1, 2026

This policy describes what data Cops & Robbers collects, why we collect it, where it is stored, and how you can request access or deletion. We keep it concise and honest — no legalese for the sake of it.

1. Introduction

This Privacy Policy explains how PeakAStudioz ("we", "us", "our") collects, uses, and protects your personal information when you play Cops & Robbers, visit our website, or interact with our community services. By using our services you acknowledge that you have read and understood this policy. If you do not agree with how we handle your data, please discontinue use of our services.

2. Information We Collect

We collect the following categories of data: Account Identifiers • Steam ID — collected when you play via s&box; used to uniquely identify your game account • Discord ID and Discord username — collected when you sign in to the website via Discord OAuth Game Data • Character name, level, and in-game currency (cash and bank balance) • Owned vehicles, weapons, and other in-game items • Player statistics (kills, deaths, arrests, robberies, playtime, and similar metrics) • Job/role history and progression Website Interactions • Feedback submissions, bug reports, and support tickets you choose to submit • Suggestion votes (which suggestions you upvoted or downvoted) • Email address if you voluntarily provide it in a support ticket Technical Metadata • Browser user-agent string and page URL, included automatically with bug reports to help us reproduce issues • Server-side connection logs (IP address, timestamp) generated by our VPS and Vercel hosting

3. How We Use Your Data

We use the data we collect for the following purposes: • Operating the game: saving and loading your character, progress, stats, and inventory • Providing the website: showing your account, feedback history, and the community ideas board • Improving the game: reviewing feedback, bug reports, and feature suggestions • Community moderation: investigating reports of rule violations, cheating, or harassment • Security: detecting and preventing abuse, exploits, or unauthorized access • Communication: responding to support tickets if you provided an email address We do not use your data for advertising, profiling, or any purpose unrelated to operating and improving Cops & Robbers.

4. Data Storage & Infrastructure

Your data is stored across the following systems: VPS (Virtual Private Server) Game character and statistics data is stored in a PostgreSQL database on a privately hosted VPS. The database port is not publicly accessible; all access is mediated by our REST API running on the same machine. Supabase Website data — including feedback submissions, suggestion votes, and associated metadata — is stored in a Supabase-hosted PostgreSQL database. Supabase is a managed database platform; their infrastructure is hosted on AWS. You can review Supabase's own privacy practices at supabase.com/privacy. Vercel The website itself is hosted on Vercel. Vercel may log request metadata (IP address, headers, timestamps) for operational purposes. You can review Vercel's privacy practices at vercel.com/legal/privacy-policy. Data is not transferred between jurisdictions beyond what is inherent to these third-party platforms.

5. Third-Party Services

Our services integrate with the following third parties: Steam / Valve Corporation Playing via s&box requires a Steam account. Steam authentication is handled entirely by Valve. We receive your Steam ID from s&box but do not interact with the Steam API directly. See Valve's Privacy Policy at store.steampowered.com/privacy_agreement. Discord Website sign-in uses Discord OAuth. When you authenticate, Discord provides us your Discord ID and username. We do not receive your email address, phone number, or any other Discord account data. See Discord's Privacy Policy at discord.com/privacy. Facepunch Studios Cops & Robbers is built on the s&box engine, developed by Facepunch Studios. Your base s&box account and any associated data are governed by Facepunch's own terms and privacy policy. We are not affiliated with Facepunch Studios. Supabase and Vercel are described in Section 4 above.

6. Data Retention

We retain your data for as long as your account is active or as necessary to provide our services. • Game save data is kept indefinitely so your progress is preserved between sessions • Feedback, bug reports, and support tickets are retained for operational and moderation records • Suggestion votes are retained to maintain the integrity of the voting board • Server access logs are typically retained for 30–90 days depending on the hosting platform If you would like your data deleted, see Section 8 (Your Rights).

7. Data Sharing

We do not sell, rent, or share your personal data with third parties for commercial purposes. Your data may be disclosed in the following limited circumstances: • To our hosting providers (Supabase, Vercel) as necessary to operate the service — these providers act as data processors under our instruction • If required by law, court order, or to protect the rights and safety of users or the public • In aggregate, anonymised form (e.g. "X users submitted feedback this month") — no individual can be identified from such reports Suggestion titles and votes are visible to other logged-in users on the public ideas board. No other personal data is shown publicly on the website.

8. Your Rights

Depending on your location, you may have rights regarding your personal data, including: • Access — request a copy of the data we hold about you • Correction — ask us to correct inaccurate data • Deletion — request that we delete your personal data • Objection — object to certain types of processing To exercise any of these rights, please contact us via our Discord server (see Section 10). We will respond within a reasonable timeframe, typically within 30 days. Note: deleting your game account data will result in permanent loss of your in-game progress, items, and stats. This cannot be undone.

9. Children's Privacy

Our services are not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly. Users between 13 and 18 should have the consent of a parent or legal guardian as described in our Terms of Use.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will announce them in our Discord community. The "last updated" date at the top of this page will always reflect the most recent revision. Continued use of our services after changes are posted constitutes your acceptance of the updated policy.

11. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out via our Discord server at discord.gg/nhJXbGQvW4. You can open a support ticket through the website at /feedback if you prefer.

Get in touch

What would you like to do?