Privacy Policy

Last updated: July 2026

This Privacy Policy explains how Tworst ("we", "us") collects and uses information when you use Tworst Admin — the web panel at panel.tworst.com, the Discord bot, and the Discord Activity (the "Service").

1. Information we collect

Account information. When you sign in with Discord, we receive your Discord user ID, username, avatar, and email address, used to create and identify your account.

Purchase information. When you buy a license through Tebex, we receive the email address and transaction identifier associated with the purchase, to grant and manage your license.

Server & player data. When you connect a FiveM server, the Service processes data from that server so you can administer it — for example player identifiers (such as Cfx/Steam/license IDs), character names, and moderation records (bans, kicks, notes, logs). For this data you are the data controller and we act as a processor on your behalf.

Technical data. We use cookies for authentication and language preference, and may log IP addresses and request metadata for security, rate-limiting, and abuse prevention.

Discord Activity. When you open the Activity inside Discord, we use Discord's OAuth "identify" scope to authenticate you; we never receive your Discord password.

2. How we use information

• To provide, operate, and secure the Service;
• To authenticate you and maintain your session;
• To grant and manage licenses;
• To prevent abuse and enforce our Terms;
• To provide support.

We do not sell your personal information.

3. Cookies

We use a strictly necessary session cookie to keep you signed in (including inside the Discord Activity) and a cookie to remember your language. We do not use advertising or tracking cookies.

4. Third-party services (sub-processors)

We share data only as needed with:

• Discord — login, bot, and Activity;
• Tebex — payment processing and licensing;
• Our hosting/infrastructure providers — to run the Service.

These providers process data under their own privacy policies.

5. Data retention

We keep account and license data while your account or license is active and as needed for legal, security, and accounting purposes. Server and player data is retained while your server is connected; you can disconnect it or request deletion.

6. Security

We protect data with measures including encrypted transport (HTTPS/WSS), hashed tokens and secrets, scoped per-server credentials, and access controls. No system is perfectly secure.

7. Your rights

Depending on your location, you may have the right to access, correct, or delete your personal data, or to object to certain processing. To exercise these rights, contact us below. Because much of the server and player data is controlled by the server owner, requests about that data may be directed to them.

8. Children

The Service is not directed to children under 13 (or the minimum age Discord requires in your country), and we do not knowingly collect their data.

9. Changes

We may update this Policy; changes are reflected by updating the "Last updated" date above.

10. Contact

For privacy questions or requests, contact us on Discord at discord.gg/tworst or by email at support@tworst.com.