This website
This site is a set of static files. It runs no analytics, sets no tracking cookies, embeds no
third-party scripts, and loads no external fonts, images or frames. Everything the page needs is
served from swisser.ac itself.
There is no contact form, no newsletter and no account. If you want to reach us you do it through our Discord server, where Discord's own privacy terms apply to that conversation.
What is stored locally
One item in your browser's local storage: a key named theme, holding either dark or light, written only if you use the theme switch. It never leaves your device, it is
not read by anyone else, and clearing your browser data removes it. There are no cookies.
Hosting
The site is served from a server we operate in Germany. As with any website, delivering a page involves your device connecting to that server, and the technical data required to complete the connection, such as your IP address, is processed for that purpose. We do not keep an access log for this site, and we do not build profiles from traffic.
The anticheat itself
This section describes the software, not the website. If you run a server with SwisserAC installed:
- Without a licence key configured, nothing is transmitted anywhere.
- With a licence key, three report types are sent to our backend: an inventory of network event names with counters and argument types, findings from the resource scan as resource, file, line and rule, and the identity data described below.
- Argument values are never transmitted. Code snippets and URLs are masked before upload, so keys, passwords and webhook URLs found by the scanner do not leave your machine.
- The complete, unmasked reports are written to disk on your own server and stay there.
Player identifiers
To recognise a player who returns, the resource records the identifiers each player presents when they connect, and which of them appeared together. That data lives on the server you run, and the operator of that server decides how long it stays and what their players are told about it.
The periodic report of that data replaces every value with a keyed hash first, computed with a key generated on that server which never leaves it. IP addresses never reach us in any form.
Separately, when a player connects, the identifiers they present are sent to us so we can tell the server whether that player has findings against them elsewhere. Those arrive in the clear: Rockstar licence, Steam ID, Discord ID, the platform identifiers and the FiveM player tokens. Each one is hashed in memory the moment it arrives, matched, and discarded. It is never written to a log, never stored, and never appears in a URL. What we keep is the hash.
Sending them rather than pre-hashing them is a deliberate choice: hashing on the server would mean handing every operator the key, and with it the ability to reconstruct the same analysis for anyone whose ID they happen to know. Recognising a returning player needs a licence to match a licence, and a hash does that just as well as the value does — which is why we do not keep the value.
We keep the resulting hashes and the findings attached to them for 24 months. Nothing we hold bans anyone automatically anywhere: what a server does with a signal is that server's decision.
Your rights
Under the GDPR you may request access to, correction of, or deletion of personal data we hold about you, and you may complain to a supervisory authority. Given the above, the honest answer is that this website holds none. For requests relating to the anticheat backend, contact us through Discord and we will point you to the responsible party for the server in question. For data about players, that is the server operator, not us.
This page still needs review by the operator before it is relied upon as a formal privacy notice, and the controller details belong in the imprint.