VI
Vice City
NEXUS
Sign In

Privacy Policy

Last updated: July 30, 2026

Who we are

vicecitynexus.live ("the Site", "Vice City Nexus") is operated by Gabriel Fernando Medina ("we", "us"), a sole trader trading as Vice City Nexus. We are the data controller for the personal data described on this page — meaning we decide why and how it is processed. This page is maintained by us; we are an unofficial GTA VI fan companion and are not affiliated with Rockstar Games or Take-Two Interactive.

What we collect, why, and on what basis

  • Email address — when you create an account, join the launch list, or join the Founding Member waitlist. Used to operate your account and send the updates you asked for. Basis: performance of a contract; consent for marketing email.
  • Account and profile data — display name, avatar, preferences, saved items, checklists, achievements, investigations, and membership status. Used to provide the service and keep your progress in sync. Basis: performance of a contract.
  • Messages and prompts — what you send to the AI Companion, investigation tools, or the contact form. Used to generate responses and reply to you. Basis: performance of a contract.
  • Purchase and membership records — subscription status, plan, billing period, and the customer/subscription identifiers issued by our payment provider. We do not receive or store your full card details. Basis: performance of a contract; legal obligation.
  • Usage and device data — page views, device type, approximate country, and IP address. Used for aggregate analytics, abuse detection, and per-IP rate limiting. Basis: legitimate interests in running and securing the Site.

Who we share it with

We use a small number of recipients to run the Site:

  • Stripe — our payment processor. Stripe handles card processing, subscription billing, invoicing, and sales tax calculation for Founding Member memberships. Stripe is an independent controller for the payment data it collects; see the Stripe Privacy Policy. We never receive or store your full card details. Cancellations and refunds are handled by us as seller of record.
  • Service providers (processors) — Lovable (hosting and app platform), Supabase (database and authentication), Google Analytics 4 (traffic measurement), an AI gateway provider (chat and investigation responses), and our email delivery provider.
  • Professional advisers — legal or accounting advisers, where necessary.
  • Authorities — where we are required to disclose by law.

We do not sell your personal data.

International transfers

Some of these providers process data outside your country, including in the United States. Where data leaves the UK/EEA we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

How long we keep it

  • Account and profile data — for as long as your account is open, then deleted within 90 days of closure.
  • Marketing email addresses — until you unsubscribe, then removed from active lists (we keep a suppression record so we don't email you again).
  • Chat and contact messages — up to 24 months, then deleted or anonymised.
  • Purchase and membership records — up to 7 years, where required for tax and accounting.
  • Analytics and security logs — up to 14 months in aggregate or pseudonymised form.

We delete or anonymise personal data once it is no longer needed for the purpose it was collected for.

Security

We apply appropriate technical and organisational measures to protect your data: encryption in transit (HTTPS) and at rest with our database provider, row-level access controls so accounts can only read their own data, restricted administrative access, secrets held in a managed secret store rather than in code, and rate limiting to reduce abuse. No system can be guaranteed perfectly secure, but we review these controls as the Site changes.

Your rights

Depending on where you live, you have the right to access, correct, delete, restrict, or object to our processing of your personal data, to portability, and to withdraw consent at any time (which doesn't affect processing already carried out). You can unsubscribe from any email using the link in the message, edit your profile in the app, or request deletion via the contact page. We respond within one month. If you're in the UK or EEA you also have the right to complain to your local data protection supervisory authority.

Cookies

We use essential cookies and local storage required for the Site to work (sign-in session, preferences, offline app data), and analytics cookies for Google Analytics 4 measurement. We do not use advertising cookies. You can block or clear cookies in your browser settings, and clear cached app data from Settings, without breaking core features.

Contact

Privacy questions or requests? Reach Gabriel Fernando Medina via the contact page.