MergeCore

Privacy Policy

Last updated: June 12, 2026

MergeCore ("we", "us") provides a desktop update manager for FiveM server scripts, a companion Discord bot, and the website mergecore.net. This policy explains what data we collect and how we use it.

1. Data we collect

Discord account ID and username — provided by you when you link your Discord account through Discord OAuth during signup.
Patreon subscription status and tier — provided through Patreon OAuth and Patreon webhooks, used to verify your active subscription.
Email address — only if shared by Patreon as part of your subscription profile.
Device identifier (HWID) — a one-way hashed identifier of your PC, generated by the MergeCore desktop agent to bind your subscription to your devices and prevent account sharing. The raw hardware values never leave your machine.
Basic technical logs — standard server logs (IP address, timestamps) for security and abuse prevention, retained briefly.

2. Discord bot data

Our Discord bot operates on our official support server and on partner servers whose owners explicitly added it. The bot reads server member and role information transiently to verify customer roles and assign or remove entitlement roles on our own server. This information is processed in memory and is not stored in any database. The bot does not read or store message content.

3. How we use data

To verify your subscription and grant access to script updates you are entitled to.
To bind your subscription to your devices (HWID) and manage your device slots.
To assign the correct roles on our Discord server.
To provide support and prevent abuse.

We do not sell your data, show ads, or share your data with third parties beyond the services listed below.

4. Storage & security

Data is stored in a PostgreSQL database on our server hosted by Hetzner (EU). Database access is restricted to the server itself (localhost only). Traffic is encrypted via HTTPS (Cloudflare).

5. Third-party services

Discord — account linking (OAuth) and bot functionality.
Patreon — subscription billing and status.
Cloudflare — website delivery and protection.
Hetzner — server hosting (EU).

6. Retention & deletion

Account data is kept while your account exists. You can request deletion of your data at any time by contacting us — we will remove your records within 30 days, except where retention is required for fraud prevention or legal reasons.

7. Changes

We may update this policy and will change the date above when we do.

8. Contact

Questions or deletion requests: admin@mergecore.net or our Discord support server.