Responsibility and contact
Emerald Anti Cheat, also known as Emerald AC, provides this website and anti-cheat software. For privacy questions, access requests, corrections, or deletion requests, email emeraldac@protonmail.com.
The operator of a protected game server hosts the player records and chooses how Emerald is deployed and how detections are acted on. That operator is responsible for its own server-side processing, access rules, and notices. Emerald handles website enquiries and its own access to player information for anti-cheat operation and support. Responsibilities depend on the processing each party actually carries out.
This notice covers the public website and the data categories reported by the client and server integration. Visiting the website does not install the client or authorise scanning of your device.
Website and contact data
Contact enquiries. The form collects your name, mobile number, email address, and message. It sends them through a Cloudflare Worker to Discord for the Emerald team to read, with a submission time and source label. The details are used to respond to your request and handle relevant access, integration, or support discussions.
Submitting the form is voluntary; all four visible fields are required by the current form. If you do not want to use it, you can email us instead. We receive the content and sender details made available by email or Discord when you use those channels.
Security and hosting. Cloudflare processes technical request information to serve and protect the site. The form service uses your IP address and normalised email address for submission rate limits. It does not append your IP address, browser user agent, or referrer to the Discord contact message.
Website measurement. The live website loads Cloudflare Web Analytics to measure website visits and performance. Cloudflare describes this service as using no cookies or localStorage for usage measurement and no visitor fingerprinting for analytics. Technical information is still processed when your browser connects to Cloudflare. See the Cookie Notice.
Optional video. The homepage uses a locally hosted poster for the Emerald film. No connection to Google or YouTube is made for the video until you choose Play film. Playing it loads YouTube's privacy-enhanced player. Google may then process technical information, such as your IP address, browser information, and playback activity, and use browser storage under its Privacy Policy. You can leave the player unloaded and continue using the website.
Player and device information
For anti-cheat operation in a protected game or server, Emerald receives the following categories through the client and connected server:
- IP address
- Connection information associated with the player.
- Hardware identifiers
- Identifiers associated with the player's hardware, used to distinguish devices in anti-cheat records.
- Platform identifiers
- Discord ID and Steam name supplied in the player or server environment.
- File and game-file information
- Names, paths, and signatures, including SHA-256 hashes. Reported file information does not include the contents of the files.
These records support cheat detection, player or device identification, and review of relevant detections. File paths and account names may contain personal information. An identifier or hash should not be assumed to be anonymous merely because it does not contain a real name.
Purposes and legal grounds
Enquiry details are used to answer the request, arrange access or integration, and provide support. Where GDPR applies, steps requested before an agreement or performance of an agreement may provide a basis when the legal conditions are met. Handling general support and protecting the website may rely on legitimate interests in responding to users and preventing abuse, subject to the required necessity and balancing assessment.
Anti-cheat processing supports the interests of Emerald, server operators, and players in detecting cheats and protecting fair play and service security. The relevant operator must establish a lawful basis for its deployment, assess the impact on players, and obtain any permission required by the applicable law. A contract with a server owner does not by itself establish a contractual basis for processing every player's data.
Any processing required by an applicable legal obligation must be limited to that obligation. Where consent is required, it must be requested separately and can be withdrawn as provided by law. Browsing the website or reading this notice is not blanket consent.
Providing contact details is not a legal obligation. A server may require the anti-cheat client as a condition of access. Refusing or stopping that client can prevent access to that protected server; ask the operator about its specific rules before joining.
Storage and retention
Player records. Player information is stored on the infrastructure of the server owners using Emerald. The standard player-data retention period is 30 days, with automatic deletion. The server owner controls the deployment, storage location, and any separately maintained copies or backups. The standard deletion period does not mean that every independent copy held by an operator or provider is erased at the same moment.
Contact enquiries. The 30-day player-data period does not apply to email or Discord contact messages. The website form does not implement an automatic deletion schedule for those messages. You can request deletion from Emerald through the privacy contact.
Cloudflare-managed technical information and rate-limit state are separate from the server's player records. A rate-limit window is not proof of a matching deletion period. Provider retention is governed by the applicable provider arrangements.
International processing
Player records are hosted on server owners' infrastructure. Ask the relevant operator where its player records and backups are stored.
Cloudflare, Discord, Proton, and Google (if you play the optional video) operate services internationally, so website and communication information may be processed outside your country. Where a cross-border transfer is regulated, the party making the transfer must establish the applicable lawful transfer arrangements and provide information about them. A provider's privacy notice alone is not a promise that every deployment has the same safeguards.
You can ask Emerald about transfers relating to its website and enquiries, or ask the server operator about its player-record deployment.
Detections, kicks, and bans
The server owner chooses whether a detection is logged, causes a kick, or causes a ban. A configured action can occur automatically. A kick or ban may restrict access to the protected server.
For an access decision, contact the server owner to request the reason and ask for review or to challenge the decision. For a suspected technical error or inaccurate Emerald record, contact emeraldac@protonmail.com. Do not post identifiers or detection records publicly.
Where laws governing solely automated decisions apply, the responsible party must address the relevant safeguards and any rights to human intervention and challenge. This notice does not confirm whether a particular server currently provides human review. Applicable statutory safeguards remain required.
Your privacy rights
Depending on the applicable law and circumstances, you may have rights to access and correct personal information, request deletion or restriction, object to processing, receive portable data where applicable, and withdraw consent where processing relies on consent. Withdrawal does not change the lawfulness of earlier processing.
Israeli law provides access and correction rights subject to its conditions. Where GDPR applies, requests are normally addressed within one month, with permitted extensions explained within that period. Some requests can be limited by lawful exceptions.
For server-held records, contact the operator of the server you used. You may also contact Emerald about its own processing of those records or for help identifying the responsible operator: emeraldac@protonmail.com. Include the relevant game, server, and account identifier so the request can be located. A proportionate identity check may be needed; do not send passwords or full identity documents without a specific, appropriate request.
You may complain to the competent data protection authority, including the Israeli Privacy Protection Authority or the authority in your EU/EEA country, without first giving up any other available remedy.
Players under 18
Emerald is also used by players under 18. There is currently no minimum-age restriction or built-in parental-authorisation process in Emerald. Games, platforms, and individual servers may have additional age rules.
Emerald and the relevant server operator must address any age-related safeguards or parental authorisation required by the applicable law before the relevant processing takes place. The absence of an age check does not remove those requirements. A parent or guardian can contact the privacy email or the server operator about a child's information.
Security, changes, and contact
The website and contact endpoint use HTTPS. Server owners manage security and permissions for their own deployments. Avoid sending passwords, API tokens, private source code, or personal information unrelated to your request.
The date at the top identifies this version of the notice. Material changes to processing must be communicated, and any required consent obtained, before the changed processing begins where applicable law requires it.
Privacy contact: emeraldac@protonmail.com.
