Privacy policy

Effective 1 November 2026

Vice Stash is an unofficial companion app for Grand Theft Auto VI, made by Sea Creature (“we”, “our”, “us”). This policy explains what the Vice Stash mobile app and the website vicestash.com (together, the “Services”) collect, why, and what your rights are.

The short version: there are no accounts and no ads. What you set up in the app stays on your phone. If you allow notifications, we keep a push token to send them. Anonymous usage analytics show us how the app is used, without knowing who you are, and you can turn them off in the app’s settings. If the app crashes, a crash report helps us fix it.

For the purposes of the GDPR, the data controller is Yelysei Ruban, operating as Sea Creature, based in Poland. Contact: contact@seacreature.dev.

What stays on your device

Your console (PS5 or Xbox), your language, the cheats you save and whether launch reminders are on are kept in the app’s storage on your phone. They are not sent to us. If your phone backs up app data (iCloud or Google backup), that backup is handled by Apple or Google under their terms.

What reaches our servers

To show cheats and trophies, the app downloads them from our content server at cms.vicestash.com. Each request carries the language the content should be in and the technical data any internet request carries: your IP address, the time, and a basic description of the app and device making it (the user agent). We use this only to deliver the content, keep the service secure and fix problems. It is not linked to you, not used to build a profile, and not shared for advertising.

The website works the same way: loading a page sends the request data above to our hosting provider. The site sets no cookies and runs no analytics.

Notifications

Launch reminders are scheduled by the app on your phone, using your device’s own notification system; no data leaves the device for them.

News pushes — when new cheats are added, or news about the launch — are sent through Firebase Cloud Messaging, run by Google, to the players who turned on New cheats or Launch reminders. If you allow notifications, Firebase gives your app installation a push token, which is used only to deliver these messages, together with the topics you are subscribed to (one per switch). We do not link the token to your identity. You can turn notifications off in the app or in your device settings at any time; the token is then no longer used, and it expires after a period of inactivity.

Analytics

To learn which features are used and what to improve, the app uses Google Analytics for Firebase. It records usage events — such as screens opened, cheats, trophies, weapons and vehicles viewed or saved, what you search for in the app, the console chosen, whether notifications are allowed and which ones you get, whether a home-screen widget is placed and tapped, and whether you opened a notification — along with session length, app version, device model, operating system, language, country (derived from your IP address) and an app-instance identifier generated by Firebase. It does not use the advertising ID, and we do not use the data for advertising or share it with advertisers.

Analytics is on by default. You can turn it off at any time in the app under Settings ▸ Privacy ▸ Share usage analytics; from then on nothing more is collected. Google keeps analytics data for the retention period we set, at most 14 months, then deletes it.

Crash reports

If the app crashes or hits an unexpected error, it sends a crash report through Firebase Crashlytics, run by Google: what went wrong and where in the app’s code, the app version, device model, operating system, free memory and disk space at the time, and a Crashlytics installation identifier. Reports contain no content you entered and are not linked to your identity. We use them only to find and fix bugs. Google keeps crash reports for 90 days, then deletes them.

When you contact us

If you email us — for example to report a wrong cheat — we receive your email address and whatever you write, and use them only to reply and to fix the problem.

Ratings

If you choose to rate the app, the rating dialog is shown and handled by the App Store or Google Play. We only see the published rating, as any visitor to the store does.

Ideas, bug reports and the roadmap

Suggesting a feature, voting, reporting a bug, the roadmap and the “What’s new” notes run on Featurebase, opened from the app’s settings or the website. Reading them needs nothing from you. If you post or vote, Featurebase receives what you write, any screenshot you attach, the email address if you give one (so we can tell you when it’s done), and the technical data of your request. Posts and their votes are public on the board; your email address is not.

Our legal bases (GDPR)

We deliver content and keep the service secure because that is needed to provide the app you asked for (contract) and in our legitimate interest. Push notifications rely on your permission, given in the system dialog. Crash reports rely on our legitimate interest in keeping the app working. Analytics relies on our legitimate interest in understanding how the app is used and improving it, kept narrow — no advertising ID, no profiles, no advertising use. You can object at any time by turning analytics off in the app’s settings, which stops collection immediately. What you post on the feedback board you send of your own accord, so we can act on it (legitimate interest).

Who processes data for us

We do not sell or rent personal information. We use a small number of providers to run the Services:

We may also disclose information to authorities when the law requires it.

International transfers

Some providers may process data outside the European Economic Area, including in the United States. Where required, those transfers are covered by the EU Standard Contractual Clauses.

How long we keep it

Request logs are kept by our hosting provider for a short period for operations and security, then deleted. Analytics data is kept for at most 14 months, crash reports for 90 days. Push tokens are used until you turn notifications off or the token expires. Emails are kept as long as needed to resolve what you wrote about. Feedback posts stay on the board until they are no longer useful or you ask us to remove them. Data on your device is removed when you delete the app.

Your rights

Under the GDPR you can ask to access, correct or delete personal data we hold about you, object to or restrict its processing, and ask for a copy in a portable format. Because the app has no accounts, we usually hold nothing that identifies you; email us and we will check. To have your analytics and crash data deleted, see Delete your data. You can also complain to your data protection authority — in Poland, the President of the Personal Data Protection Office (UODO).

Children

Grand Theft Auto VI is a game for adults, and the Services are not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, contact us and we will delete it.

Changes

If the Services change — for example if we add sign-in or advertising — we will update this policy before that happens, post it here with a new effective date, and ask for your consent where the law requires it.

Contact

Sea Creature (Yelysei Ruban) · Poland
Email: contact@seacreature.dev