Privacy Policy

This Privacy Policy describes how fiveshield ("we", "us", or "our") collects, uses, and protects your personal information when you use our DDoS mitigation service, website, and dashboard. We are committed to protecting your privacy and handling your data transparently.

1. Information We Collect

We collect the following types of information to provide and improve our Service:

Account Information

• Discord user ID, username, avatar, and email address (provided via Discord OAuth)
• Server configuration details (IP addresses, ports, server identifiers)
• Billing information is processed directly by Stripe — we do not store your full credit card details

Automatically Collected Data

• IP addresses of players connecting to protected servers (for proxy routing and DDoS mitigation)
• Connection timestamps, player counts, and session data
• Traffic metadata for DDoS detection and filtering purposes
• Browser type, device information, and pages visited on our website

Payment Data

• Transaction history, billing amounts, and payment status
• Stripe customer ID — full card details are stored by Stripe, not by fiveshield

2. How We Use Your Information

We use the collected information for the following purposes:

• To provide, operate, and maintain the DDoS mitigation service
• To process payments and manage billing
• To detect, prevent, and mitigate DDoS attacks and other security threats
• To communicate with you about your account, service updates, or support requests
• To improve and optimize the Service

3. Information Sharing

We do not sell your personal data. We may share information only in the following circumstances:

• With service providers (Stripe for payments, OVH for infrastructure, Cloudflare for CDN) who process data on our behalf
• When required by law, regulation, legal process, or governmental request
• To protect the rights, property, or safety of fiveshield, our users, or the public

4. Third-Party Services

Our Service integrates with the following third-party services, each with their own privacy policies:

• Discord — authentication and community (discord.com/privacy)
• Stripe — payment processing (stripe.com/privacy)
• Cloudflare — CDN and website protection (cloudflare.com/privacypolicy)
• OVH — cloud infrastructure (ovhcloud.com/en/personal-data-protection)

5. Cookies and Local Storage

We use cookies and local storage for:

• Session management — to keep you logged in and remember your preferences (language, dashboard settings)
• Analytics — we may use basic analytics to understand how our website is used. We do not use invasive tracking cookies.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Player IP addresses and connection data used for DDoS mitigation are retained for a limited period (typically up to 30 days) and then deleted. Billing records are retained as required by applicable tax and financial regulations. You may request deletion of your account data at any time.

7. Data Security

We implement reasonable technical and organizational measures to protect your personal information, including encrypted connections (HTTPS/TLS), access controls, and secure infrastructure. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your personal data (subject to legal retention requirements)
• Portability — request your data in a structured, machine-readable format

9. Children's Privacy

The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete it.

10. International Data Transfers

Our infrastructure is primarily located in North America and Europe (OVH data centers). By using the Service, you consent to the transfer and processing of your data in these regions. We take reasonable steps to ensure your data is handled securely regardless of where it is processed.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this policy periodically. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

12. Contact

For privacy-related questions or to exercise your data rights, please contact us through our Discord community at discord.fiveshield.co or via our website at fiveshield.co.