Legal
Privacy.
Last updated: April 2026. The full privacy policy is being finalised. The summary below covers what Epoch collects today and how we handle it.
What we collect
- Account email and OAuth identity (Discord or Steam) for login.
- Server-level telemetry from the Lua addon: detection events, integrity signals, behavioral traces, screenshots when triggered by a detection.
- Player Steam IDs and persona names for servers running Epoch (limited to the players who connect to those servers).
- Standard request logs (IP, user-agent) for abuse mitigation, retained 90 days.
What we do not collect
- No `gmod.exe` process memory, no kernel-level data, no host fingerprinting.
- No data from servers not running Epoch.
- No data from players' devices outside the Lua sandbox.
Data ownership
Server operators own the telemetry from their own servers. Epoch is the data processor, not the controller. Operators can request export or deletion of their server's data at any time.
Contact
Privacy questions or data requests: reach out via the support channel linked in the dashboard.