Legal
Privacy Policy
Last updated: July 11, 2026
1. Who we are
This Privacy Policy describes how GTAOutfits (“we”, “us”, “our”), available at gtaoutfits.com, processes personal information when you use our website and related services (the “Service”).
GTAOutfits is an independent fan project and is not affiliated with Rockstar Games or Take-Two Interactive. See our Legal & disclaimers page.
Privacy contact: privacy@gtaoutfits.com (or legal@gtaoutfits.com).
2. Scope
This policy applies to visitors and registered users of GTAOutfits worldwide. Where local laws grant stronger rights (for example the EU/UK GDPR, Swiss FADP, California CCPA/CPRA, Brazil LGPD, Canada PIPEDA, Australia Privacy Act), we intend to honor those rights as described below.
3. Information we collect
Account & identity (via GTAFriends OAuth). When you sign in, we receive identifiers and profile fields from GTAFriends such as your GTAFriends user ID, username, avatar URL, platform, bio, supporter status, and public profile URL. We create or update a local GTAOutfits user record linked to that account.
Profile content you provide. Optional Outfits bio, profile banner image, and similar profile customizations stored on our systems.
User-generated content. Outfit titles, descriptions, tags, screenshots and other media you upload, likes, saves, follows, comments, and reports.
Technical & usage data. IP address, browser type, device information, approximate location derived from IP, pages viewed, referrers, and timestamps. We use session cookies for authentication. Hosting and CDN providers (e.g. Cloudflare) may process request logs as part of delivering the Service.
Moderation & safety. Actions taken by moderators, reports you submit, and related notes needed to enforce our Terms.
Email notification preferences. If you opt in, we store your preference flags (and opt-in timestamp) locally and sync them to GTAFriends so digests can be delivered. We do not store your email address on GTAOutfits; GTAFriends holds the address associated with your account.
We do not intentionally collect government ID numbers, precise GPS, or payment card data on GTAOutfits.
4. Why we process data (purposes & legal bases)
Depending on your region, we rely on one or more of the following bases:
- Contract / service delivery — to create your account, show your profile and outfits, sync with GTAFriends, and operate uploads and feeds.
- Legitimate interests — security, abuse prevention, moderation, improving the Service, analytics of aggregate traffic, and displaying community challenges.
- Consent — where required for optional cookies, and for optional GTAOutfits email digests (explicit opt-in; default off). We do not send marketing newsletters from GTAOutfits beyond the optional trending digest you choose.
- Legal obligation — when we must retain or disclose information to comply with law, court order, or valid legal process.
5. How we share information
We do not sell your personal information.
We share data with processors who help run the Service, under appropriate agreements:
- Supabase — database and related backend hosting.
- Cloudflare — website hosting, CDN, security, and object storage for media (e.g. R2).
- GTAFriends — authentication and profile sync so you can use one login across the ecosystem. If you opt in to GTAOutfits email notifications, GTAFriends sends those messages using the email on your GTAFriends account (we do not store your email address on GTAOutfits). You can change or turn off these preferences on your GTAOutfits profile or at gtafriends.com/profile#email.
We may disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or reorganization (with notice where required).
Public profiles, approved outfit posts, usernames, and avatars are visible to other users and may be indexed by search engines.
6. International transfers
We and our providers may process data in the United States and other countries. Where required (e.g. transfers from the EEA/UK/Switzerland), we rely on appropriate safeguards such as Standard Contractual Clauses or the provider’s comparable transfer mechanism.
7. Retention
We keep account and content data while your account is active and as needed to operate the Service. After deletion requests or prolonged inactivity, we delete or anonymize personal data within a reasonable period, unless we must retain it for security, dispute resolution, backups, or legal compliance. Moderation records may be kept longer when necessary to prevent abuse.
8. Security
We use industry-standard measures such as encrypted transport (HTTPS), access-controlled databases, and session cookies. No method of transmission or storage is 100% secure; you use the Service at your own risk regarding residual security risk.
9. Your rights
Depending on where you live, you may have rights to access, correct, delete, or export your personal data; restrict or object to certain processing; withdraw consent; and lodge a complaint with a supervisory authority.
California (CCPA/CPRA). We do not “sell” or “share” personal information for cross-context behavioral advertising as those terms are commonly defined. You may request know/access, deletion, and correction. We will not discriminate against you for exercising privacy rights.
EEA/UK/Switzerland. You may contact us to exercise GDPR rights. You may also contact your local data protection authority.
To exercise rights, email privacy@gtaoutfits.com from the email associated with your GTAFriends account when possible, and describe your request. We may need to verify your identity.
10. Children
The Service is not directed to children under 13 (or under 16 where required by local law). We do not knowingly collect personal information from children. If you believe a child has provided data, contact us and we will take appropriate steps to delete it.
11. Cookies & similar technologies
We use essential cookies and similar storage for sign-in sessions and basic preferences (such as theme). These are necessary for the Service to function. We do not currently use third-party advertising cookies. Browser settings can block cookies, but then sign-in may not work.
12. Automated decisions
We do not use personal data for solely automated decisions that produce legal or similarly significant effects about you. Content may be ranked or filtered using algorithmic signals (e.g. likes, trending scores) for feed quality.
13. Changes
We may update this Policy from time to time. The “Last updated” date will change, and material changes may be highlighted on the site or via notice when appropriate. Continued use after changes means you acknowledge the updated Policy.
14. Related documents
These pages are provided for transparency and compliance best practices. They do not constitute legal advice. For situation-specific counsel, consult a qualified attorney.