Last updated November 14, 2026
Privacy Policy
LCGrid (lcgrid.xyz) is a dashboard for running Emergency Response: Liberty County (ER:LC) private servers on Roblox. LSGrid (lsgrid.xyz) is the same service for FiveM servers, run by the same team on the same systems, and this policy covers both: where it says LCGrid, it means LSGrid too. Here's what we collect, why, who sees it, how long we keep it, and your rights over it.
Who we are
LCGrid ("we", "us") is run by the LCGrid team from the United States. It runs lcgrid.xyz and the LCGrid Discord bot, and decides how the personal data described here is used. Reach us at support@lcgrid.xyz, or legal@lcgrid.xyz for privacy and data protection requests.
A few words we use
- Personal data: anything that can identify you, like your Discord ID or Roblox username.
- Server: a community's space on LCGrid, run by its owner and staff.
- Game data: what ER:LC's API reports about a private server, like who's in game and what happened.
- Service providers: the companies LCGrid runs on or connects to.
What we collect
When you sign in
You sign in with Discord. We receive your Discord user ID, username, display name and avatar. We ask Discord only for the identify permission, which doesn't include your email, your messages or your list of servers.
Your age
Before you use the dashboard, we ask the month and year you were born. We use it once to check you're 13 or older, and don't keep it.
Your sign-ins
For each sign-in we keep when it started and was last used, your browser and device (from its user agent), and a rough city and country from Cloudflare. We don't store your IP address. This powers "Where you're signed in" in Settings.
When you link Roblox
If you link Roblox, Roblox tells us your user ID, username, display name and avatar. We ask only for the openid and profile permissions. We can't act on your Roblox account, see your inventory or spend Robux.
What you and your team put into LCGrid
- Servers: name, colour, logo, banner, members, roles, invite codes and join requests.
- Staff management: shifts and breaks, leave requests, staff records (warnings, strikes, promotions and so on) and duty-rule checks.
- Moderation logs: the player's Roblox ID and username (on LSGrid, their Discord ID or license and in-game name), the reason, evidence links, who made it and when.
- Sessions: session messages and who voted in a session poll.
- Server directory votes: which servers you voted for and when, so you can vote once every 12 hours. Others only see the totals. If you delete your account, your votes still count but are no longer tied to you.
- CAD: units, callsigns, calls, notes, radio messages, roleplay civilians, vehicles, records and reports. These are roleplay characters and events and shouldn't hold anyone's real personal details.
When you pay for a plan
Card payments go through Stripe and Robux payments through Roblox. We never see your card or bank details. We keep which server the plan is for, the plan and how long it lasts, the amount and currency, the Stripe or Roblox reference for the payment, and who bought it and when. We keep this for as long as the law requires for payment records, even if you delete your account.
Game data from ER:LC
If a server connects its ER:LC server key, we read who's in game, the queue, joins and leaves, commands, kills, mod calls, positions, teams and vehicles from the ER:LC API. Most of it is only shown live. We keep a player count each minute, a "last 10 minutes in game" snapshot attached to warnings, kicks and bans as evidence, logs of what LCGrid did automatically, and camera reads of passing vehicles, for the times in our Data Retention policy.
Game data from FiveM (LSGrid)
If a server installs the lsgrid resource, that game server sends us, every 10 seconds, each player's in-game name, server ID, ping, position and heading, the vehicle they're in (model, plate and livery), their street and area, and their Rockstar license and Discord ID as the game reports them. It also sends joins, leaves, deaths, chat commands and staff calls. IP addresses and other account identifiers (Steam, Xbox, Microsoft) never leave the game server. The latest snapshot is replaced every 10 seconds and events are kept for 15 minutes. So a server's staff can find a player for moderation, we keep each player's in-game name, Discord ID or license, and when they were first and last seen on that server, for 90 days after they were last seen. Bans a server makes are kept until it lifts them or the server is deleted. The same evidence snapshots, player counts and game logs as for ER:LC apply.
From Discord
If a server connects a Discord server, the LCGrid bot reads that Discord's name, icon, banner, channels and roles, and which members hold linked roles, and posts the messages the team sets up.
Chatting with Gridley
If you chat with Gridley, the mascot on the front page, what you type is sent to Cloudflare's AI service to write the answer. We don't store the conversation, and it's forgotten when you close the page. Don't type personal information into it.
Cookies and browser storage
We use a sign-in cookie and a few short-lived security cookies, and keep small preferences in your browser. There are no advertising or tracking cookies and no analytics that follow you. Details are in the Cookie Policy.
How we use it
Only to run LCGrid: to sign you in, show your servers, keep the records your team asks for, post to Discord and run commands in ER:LC when your team tells it to, check ages, keep LCGrid secure, and answer you when you contact us. We don't sell your data, use it for advertising, or make automated decisions about you that have legal or similar effects.
Legal bases (UK and EU)
If UK or EU data protection law applies to you, we rely on:
- Contract: to give you the service you signed up for, like signing you in and running your servers.
- Legitimate interests: to keep LCGrid secure, prevent abuse, and let servers keep moderation records about players. We balance this against your rights, and you can object.
- Consent: for what you agree to in the Data Consent. You can withdraw it at any time by deleting your account.
- Legal obligation: when the law requires us to keep or share something.
Who can see it
Data in a server is visible to that server's members according to the roles and permissions its owner and staff set up. A moderation log about a player is visible to that server's staff.
Our own access
Only LCGrid's owners can reach the database directly. They look at personal data only when they need to: to fix a problem, answer a request you made, deal with abuse, or meet a legal duty.
Service providers
- Cloudflare hosts LCGrid and stores its data.
- Discord handles sign-in and receives the messages and role changes your team sets up.
- Roblox handles Roblox linking and player lookups.
- Police Roleplay Community, the maker of ER:LC, receives the commands your team runs in game.
- On LSGrid, your own FiveM server receives the kicks, bans, messages and staff changes your team sends. Nothing is sent to Cfx.re or Rockstar Games.
- Stripe handles card payments for paid plans, and Roblox handles Robux payments. Each follows its own privacy policy.
Other times we share data
- The law: if a court, police or regulator lawfully requires it, or we need to protect someone's safety.
- If LCGrid changes hands: if LCGrid is taken over or merged, your data may move with it. We'll tell you first, and this policy keeps applying to it.
Where it's stored
Cloudflare runs LCGrid on servers around the world, so your data may be handled outside your country. Where UK or EU law needs it, we rely on Cloudflare's standard data protection terms for those transfers.
How long we keep it
Each kind of data has its own limit in our Data Retention policy. In short: your account until you delete it, sign-in records for 30 days after they end, server data while the server exists (deleting a server deletes all of it), evidence snapshots and automation activity for 90 days, player counts for 30 days, camera reads for 7 days, and FiveM player lists for 90 days after a player was last seen. Live game data isn't stored.
Keeping it safe
Our Security page describes how we protect data: encryption, sign-in through Discord only, permission checks on every request, and limited access. No system is perfectly secure, but we work to keep LCGrid as safe as we can.
If something goes wrong
If a breach affects your personal data, we'll contain it, find out what happened, and tell you without unnecessary delay if it's likely to affect you. Where the law requires it, we'll also tell the relevant regulator, for example within 72 hours under UK and EU law.
Your rights
Wherever you live, you can ask us to:
- see the personal data we hold about you, and get a copy in a format you can reuse;
- correct anything that's wrong;
- delete your account and data;
- restrict or object to how we use it;
- withdraw your consent, by deleting your account.
Email legal@lcgrid.xyz from, or mentioning, the Discord account it's about. We may ask you to prove it's yours, and we'll answer within 30 days. Some things you can do yourself: unlink Roblox and sign out devices in Settings, or remove LCGrid from Discord under Authorized Apps.
You can also download or delete your data yourself in Settings, under Your data. The download is a file with everything we keep about your account. Deleting your account removes your sign-ins, Roblox link, server memberships, applications, notifications and staff records, and signs you out everywhere. If you own a server, delete it or ask us to hand it over first. We keep only what we need to enforce a ban or an age block on that Discord account, and the logs other people rely on, with your name replaced by "Deleted user".
If you're in the UK or EU and unhappy with our answer, you can complain to your data protection authority, like the ICO in the UK.
If you're a player a server has logged and you want to know what it holds, ask that server's staff first. We'll help if you can't reach them.
Children and COPPA
LCGrid is not directed to children under 13, and you must be 13 or older to sign in, or older if Discord's minimum age in your country is higher. Everyone is asked the month and year they were born before using LCGrid; we keep only whether they're old enough, not the date. We do not knowingly collect personal information from children under 13. If the age check shows someone is under 13, we delete their LCGrid data at once, end all their sessions, and block that account and browser from signing in again. We do the same if we later learn an account belongs to a child under 13.
A parent or guardian who believes their child under 13 has used LCGrid can email legal@lcgrid.xyz. We'll review what we hold, tell you what it is if you ask, and delete it.
Moderation logs and short-lived game records can be about Roblox players (on LCGrid) or FiveM players (on LSGrid) of any age. Those players don't use LCGrid and nothing is collected from them directly. We hold only their public Roblox ID and username, or for FiveM their in-game name and the Discord ID or license their game server reports, and what happened in game, use it only to support the internal operation of that server's moderation, and delete it on the schedule in our Data Retention policy. We follow the US Children's Online Privacy Protection Act (COPPA).
California and other US states
If you live in California or another US state with a privacy law, you have the rights above: to know what we collect and why, to get a copy, to correct it and to delete it. We don't sell or "share" personal data for cross-context advertising, we don't use sensitive personal data beyond running LCGrid, and we won't treat you differently for using your rights. The categories we collect are the ones under "What we collect".
Links to other sites
LCGrid links to Discord, Roblox, ER:LC and other sites. Their own privacy policies apply there, not this one.
Changes
If this policy changes, we'll update this page and the date at the top. If the change is big, we'll tell you on LCGrid and, if it affects what you agreed to, ask you to accept the Data Consent again.
Contact
Questions or help: support@lcgrid.xyz. Legal, privacy and data protection requests: legal@lcgrid.xyz.