Specifics on every piece of data we touch, how long we hold it, who we hand it to, and the rights you have to control it.
This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to cybernet.gg, the CyberNet Launcher, the CyberNet Plugin, Public Servers we operate, and Hosted Servers we provision under our hosting service.
We do not sell your personal information.
cn_session containing a 256-bit random opaque token (no personal data)When you connect to any CyberNet server (Public or Hosted):
The Service includes proximity voice chat. Voice is encoded with the Opus codec on your machine, transmitted over a dedicated channel to the server, mixed and spatialized server-side, and forwarded to nearby Players. We do not record or persist voice audio in normal operation. Short-lived buffers exist transiently in server memory only as required to perform the spatial mix.
Payment is processed by Stripe, Inc. We receive only a non-card token, the last 4 digits of your card, the card brand, the billing country, and information necessary to manage your subscription. We never see the full card number, CVV, or expiration date.
The Launcher reports its version, the operating-system version, and basic launch-error diagnostics so we can debug crashes. It does not transmit gameplay data or scan your filesystem beyond the Cyberpunk 2077® installation directory.
We use a single first-party session cookie (cn_session) to keep you signed in. We use temporary cookies to manage Discord OAuth flow. We do not use third-party advertising or cross-site tracking cookies.
For accountability, every administrative action taken via cybernet.gg (role changes, server registrations, bans, key issuance, etc.) is recorded with the actor's User ID, the action, the target, the originating IP, the User Agent, and a redacted JSON of details. This is retained as described in Section 4.
When you connect to a Hosted Server, the Operator and their delegated staff can see:
Operators are bound by these Terms and our Code of Conduct regarding the use of this information. We are not responsible for an Operator's misuse of information they receive in the course of operating their server; report any such misuse to abuse@cybernet.gg.
These providers process information on our behalf under their own privacy commitments.
We may disclose information in response to a valid legal process, to protect the safety of any person, to investigate fraud or violation of these Terms, or as part of a corporate transaction in which the recipient agrees to honor this Privacy Policy.
| Category | Retention |
|---|---|
| Account profile | Until you delete the Account |
| Sessions | 14 days from last activity, or earlier on logout |
| OAuth state tokens | 1 hour |
| Audit log | Indefinite, as a security record |
| Per-server bans (server_bans) | Indefinite; deletion of Account replaces personal references with NULL |
| Server connection logs (per Operator) | Up to 90 days, unless the Operator has set a different retention |
| Stripe records | As required by Stripe and applicable financial-records law |
| Backups | Up to 30 days; deletions propagate to backups within that window |
If you delete your Account, your handle and personal data are removed from our active databases within 30 days, except as required for security, fraud prevention, or legal compliance.
Depending on where you live, you may have rights to:
Submit requests to privacy@cybernet.gg. We will verify your identity and respond within the time required by applicable law.
The Service is not intended for children under 13. EEA/UK residents must be at least 16. We do not knowingly collect personal information from children below the relevant age. If you believe a child has provided us information, contact privacy@cybernet.gg and we will delete it.
We are based in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S. and possibly other jurisdictions where our service providers operate. Where required, we use Standard Contractual Clauses or equivalent transfer mechanisms.
We use industry-standard practices including TLS for traffic in transit, salted bcrypt for password storage, HMAC-signed server registration, restricted database access, and audit logging of administrative actions. No system is perfectly secure; we make no guarantee against breach.
In the event of a personal-data breach affecting you, we will notify you and the relevant regulators within the time required by applicable law (typically 72 hours of becoming aware, where required).
We may update this Policy. Material changes will be announced at cybernet.gg or by email at least 30 days in advance, except where shorter notice is required for legal or security reasons.
privacy@cybernet.ggprivacy@cybernet.ggsupport@cybernet.gg