Privacy and cookie policy
Last updated: November 11, 2026
This policy explains what personal data the jak-x.online website and the Jak X Online game servers use, why, and the rights you have over it under the General Data Protection Regulation (GDPR).
Who is responsible
The data controller is the Jak X Online team. For anything about your data, write to us through our Discord server (Support channel).
What data we use
- On this website: there are no sign-ups or forms. Only if you accept analytics, Google Analytics collects the pages you visit, your approximate location, your device and browser, and how you got here. Your language and your cookie choice stay only in your browser.
- Game account: name and number, password (stored as a hash), stats, records and ghosts, friends, clan and clan messages, match history and race replays.
- Security data: the IP address and the console or emulator identifier you connect from, the history of addresses your account signed in from, sanctions and anti-cheat logs.
Why we use it and on what basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Run your account, the game servers, stats, records, friends and clans | Providing the service you asked for (art. 6.1.b) |
| Keeping the servers safe: anti-cheat, sanctions, stopping abuse and multi-accounts | Our legitimate interest in a fair and secure service (art. 6.1.f) |
| Knowing how many people visit the website (Google Analytics) | Your consent, which you can withdraw at any time with "Cookie preferences" at the bottom of every page (art. 6.1.a) |
| Answering the authorities when the law requires it | Legal obligation (art. 6.1.c) |
We do not sell your data, we do not show advertising and we do not use your data to build profiles.
What other players see
Your racer name, stats, records, clan, friends list status and whether you are online are visible to other players, in the game and on the Jak X Online websites. Your IP address is never shown.
Who else handles it
- Hosting providers, who process data only on our behalf and under contract.
- Google (Google Analytics), only if you accept analytics.
- Discord and YouTube, if you join our server or channel, under their own privacy policies.
Google and Discord are based in the United States: transfers rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
How long we keep it
- Game account: while it exists. When it is deleted, its data is erased, except the minimum needed to keep a sanction in force.
- Race replays: 7 days, unless the staff keeps one (for example, to review cheating).
- Security logs: only as long as they are useful to protect the service.
- Google Analytics data: 14 months at most.
Your rights
You can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. Write to us through our Discord server (Support channel); we answer within one month.
If you think we have not respected your rights, you can complain to the data protection authority of your country (Spanish Data Protection Agency (AEPD) in Spain).
Minors
Accounts are for people aged 14 or over (or the age your country sets). If we learn that a younger child signed up without permission, we will delete the account.
Security
Passwords are stored as hashes and the website only works over an encrypted connection (HTTPS). The connection between the game and the servers uses the console's original protocol, which is older and less protected: do not reuse an important password for your game account.
Changes
If this policy changes in an important way we will let you know on the website or on Discord. The date at the top shows the current version.