Privacy Policy

To provide our services effectively and maintain the integrity of our platform, we collect and process certain types of data. Our data collection is guided by principles of transparency, necessity, and security.

Represented by: Gaston Dallavalle

Angelo de Peredo 2673, Córdoba, Argentina

Email: contact@anticheat.ac

EU/EEA & UK GDPR Representatives (Article 27)

If you are located in the EU or UK and have questions or concerns regarding your personal data, you may contact our appointed GDPR representatives:

EU Representative

Euverify Ltd (Ireland)
Unit 3D North Point House, North Point Business Park, New Mallow Road, Cork, T23 AT2P, Ireland

UK Representative

Euverify Ltd (UK)
3rd Floor, 86-90 Paul Street, London, EC2A 4NE, United Kingdom

To submit a Data Subject Access Request (DSAR), data deletion request, or any other GDPR-related inquiry, please use our secure portal: https://gdpr.euverify.com/verify/c0e9c62b-0d75-4c0d-9146-df73801cfdb2

Account and Platform Data

User Registration Information

• Email address: used for account verification, required for communications, encrypted storage, retained for account duration.
• Discord ID: service integration, support communications, community features.
• Nametag: public identification, community interaction, user recognition.

Authentication Data

• IP Addresses: login security, fraud prevention, 90-day retention.
• User-Agent: browser identification, system compatibility, security verification.

Transaction Information

• Payment processing: payment-related data is processed securely through our Merchant of Record, Lemon Squeezy (https://www.lemonsqueezy.com/privacy). Secure transmission with no local financial data storage on our servers.
• Transaction records: purchase history, service activation, compliance records.

Third-Party Platform Data (Discord Tracking)

• Server Metadata & Activity: identifiers for servers categorized as cheating communities; join dates and “last seen” timestamps within these servers.
• User Roles: current roles and permission levels; historical logs of any role modifications.
• Message History: content, context, and timestamps of messages posted within tracked servers.

Anti-Cheat & Scan Data

• Historical Scan Records: dates, times, and specific parameters of previous scans; final detection outcomes and system telemetry.
• Centralized Database Access: query access for authorized customers; visibility of historical scan results across the Ocean Anticheat network.

Ocean Scanner Technical Data

• VPN Detection: connection analysis, security verification, temporary storage.
• Operating System: version information.
• Hardware Identifiers: device-specific hashes including CPU, GPU, and motherboard models for unique identification. Encrypted storage, access controls, data minimization.
• Process Analysis: Windows process and service initialization timestamps; specific process memory data for integrity verification; system startup execution records.

System Activity Logs (Sysmon)

• If not already active, Microsoft Sysmon may be enabled on the device with your explicit consent

Game and Visual Data

• User account identifiers for scan history tracking.
• Active game process captures for integrity verification.
• Full-screen desktop screenshots: captured during scan initialization to visually verify the legitimacy of the scan, detect debugging or tampering attempts, and validate the integrity of the environment. This capture may include windows or content unrelated to the game, but is used solely for security and integrity verification purposes.

By accepting our Terms of Service and initiating the scan, you explicitly agree to this necessary data collection.

We process collected data for the following purposes:

• Service delivery and enhancement
• User experience optimization
• Security and anti-cheat system improvement
• Technical issue resolution
• Compliance with legal obligations

We maintain strict data sharing policies and do not share personal information with third parties except when required by law, necessary for service provision, or as part of a business transaction (with prior notification).

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

Important: When you are banned from our services, data deletion is paused solely for the duration of the appeal period (21 days). Unless a legal dispute or chargeback is active, data will be automatically deleted after this timeframe.

We implement industry-standard security measures to protect your data, including encryption protocols, access controls, regular security assessments, and secure data storage systems.

Full-screen screenshots are never used for monitoring general user activity or unrelated personal content; they are processed only as needed to verify scan integrity and detect debugging, tampering, or evasion attempts.

Our services operate from secure servers located in the United States and Argentina.

For EU/EEA/UK Users: We ensure your data is protected by implementing Standard Contractual Clauses (SCCs) approved by the European Commission, or by ensuring our third-party US hosting providers are certified under the EU-U.S. Data Privacy Framework.

Our service may contain links to external websites. We are not responsible for the privacy practices or content of these sites and encourage users to review their respective privacy policies.

The Service is primarily intended for users 18 years or older.

Global/US (COPPA)

Users between 13 and 17 years old may access the Service under strict conditions with verified parental consent. Users under 13 are strictly prohibited.

EU/EEA/UK (GDPR)

You must be at least 16 years old (or the applicable age of digital consent in your specific Member State) to use our Service. Accounts found to be in violation will be immediately terminated.

Whether you are protected by Argentine law, the GDPR, or the UK GDPR, we guarantee the following rights:

Access Rights

Request information about your stored data and obtain copies.

Data Control

Update, correct, or request deletion of your information.

Data Processing Transparency

Know how your data is being used and structured.

To exercise these rights, please use our Euverify DSAR portal linked at the top of this policy.

We process your data based on:

Performance of a Contract (Art. 6(1)(b) GDPR)

Account creation, scanner tool usage (including visual verification), and technical support.

Legitimate Interests (Art. 6(1)(f) GDPR)

Fraud prevention, service improvement, and security enhancement.

Consent (Art. 6(1)(a) GDPR)

With your consent, Microsoft Sysmon may be enabled on the scanned device if it is not already active, and its logs processed for anti-cheat purposes. It stays active after the scan, logging only file executions locally for use in future scans, including whether it was later removed. You may withdraw your consent at any time by uninstalling Sysmon.

While operating under Argentine jurisdiction as the Data Controller, we strictly follow international privacy best practices (GDPR/UK GDPR), implement robust data protection measures, and provide transparent data handling policies.

To protect your data, we implement technical safeguards (end-to-end encryption, secure transmission, security audits) and organizational controls (access control policies, incident response procedures).

In the event of a data breach, we will notify affected users promptly, investigate the incident thoroughly, take measures to prevent future occurrences, and comply with all applicable breach notification laws.

We work with trusted third-party providers for payment processing (Lemon Squeezy), analytics services, and cloud storage. All providers are contractually obligated to protect your data.

If we are involved in a merger, acquisition, or sale of assets, your data may be transferred. We will notify you of any change in data controller or changes to the privacy policy.

While we are based in Argentina, we respect the Children's Online Privacy Protection Act (COPPA): no collection of data from users under 13, and clear account termination if age violations are discovered.

Any disputes regarding privacy will be handled according to Argentine law.

Consumer Exception: If you are a consumer residing in the EU, UK, or Switzerland, this governing law clause does not deprive you of the statutory consumer protections afforded to you by your country of residence.

For any additional privacy-related questions or to exercise your rights, please contact us via email at contact@anticheat.ac, use our support ticket system, or submit a formal GDPR request through our Euverify portal.

Regarding security research and scanner usage: Authorized use cases, prohibited activities, and data collection boundaries are strictly defined to protect user privacy while maintaining gaming integrity.

We value community contributions to our security. Our recognition program includes responsible disclosure processes, license rewards for verified vulnerabilities, and safe harbor conditions for permitted testing.

We continuously improve our services through user feedback, security research contributions, and technical advancements.

• Email: contact@anticheat.ac [Slow Support]
• Discord: https://discord.com/invite/oceanscanner [Fast Support]

By using our services, you acknowledge that you have read and understood this Privacy Policy and agree to our data practices.

Wenn derselbe Spieler auf mehr als einem Server gescannt wird, der Ocean nutzt, kann Staff mit einem kostenpflichtigen Tarif eine minimale Zusammenfassung der Scans dieses Spielers von anderen Servern sehen, um Rechner zu erkennen, die zwischen Screenshares bereinigt wurden.

• Was geteilt wird: das Scan-Datum, das Ergebnis (legit, verdächtig, Cheating oder keines), das Spiel und wie die Scans zugeordnet wurden (HWID, Discord-Konto oder verknüpfte HWID).
• Was nie geteilt wird: der Server, das Enterprise, der Autor des Scans, die PIN, die Erkennungen oder sonstige Inhalte des Scans. Das gilt auch für als öffentlich markierte Scans: Scans anderer Server werden immer nur als diese Zusammenfassung angezeigt.

Nutzer können dies in den Einstellungen ausschalten, Enterprise-Eigentümer oder -Admins in den Enterprise-Einstellungen. Wer es ausschaltet, sieht auch keine Zusammenfassungen anderer Server mehr.

Gescannte Spieler, die ihre Scan-Daten entfernen lassen möchten, können uns über die unter „Kontakt für Support“ genannten Kanäle erreichen; diese Anfragen werden manuell bearbeitet.

Teile unserer öffentlichen Website, etwa die Startseite, die Dokumentation und der Blog, nutzen Google Analytics 4, einen Webanalyse-Dienst von Google LLC, um zu verstehen, wie die Website genutzt wird, und sie zu verbessern. Google Analytics wird auf den Anmeldeseiten und im Dashboard nicht geladen.

• Gemessen werden die besuchten Seiten, wie du auf sie gelangst und zwischen ihnen wechselst, dein Gerät und Browsertyp sowie dein ungefährer Standort (Stadt oder Land), der aus deiner IP-Adresse abgeleitet wird. Laut Google protokolliert oder speichert Google Analytics 4 keine IP-Adressen.
• Google Signals, Werbefunktionen und Anzeigenpersonalisierung sind ausgeschaltet, und die Einwilligungssignale für Werbung (ad_storage, ad_user_data, ad_personalization) werden immer als abgelehnt gesendet. Wir verwenden diese Daten nicht für Werbung.
• Im Europäischen Wirtschaftsraum, im Vereinigten Königreich und in der Schweiz ist die Analyse-Einwilligung standardmäßig abgelehnt: Es werden keine Analyse-Cookies gesetzt, und Google erhält nur cookielose Pings ohne Cookie-Kennungen, die es für aggregierte Modellierung verwendet. Überall sonst setzt Google Analytics Erstanbieter-Cookies (_ga und _ga_*), die bis zu 2 Jahre gültig sind.

Du kannst jederzeit widersprechen, indem du das Browser-Add-on von Google zur Deaktivierung installierst. Das Blockieren der Google-Analytics-Cookies (_ga und _ga_*) in deinem Browser verhindert nur, dass du über mehrere Besuche hinweg wiedererkannt wirst; deine Seitenaufrufe werden weiterhin gezählt. Beides beeinträchtigt die Funktion der Website nicht.