Privacy

GrandTheftAuto.World is operated by IOTP (UK) Ltd. It is an independent fan platform and is not affiliated with or endorsed by Rockstar Games or Take-Two Interactive.

For anything about privacy or your data, contact iotp@iotp.net.

This notice covers the GrandTheftAuto.World website. It does not cover other companies’ websites, which have their own privacy notices.

We use Google Analytics 4 to understand how the site is used. It is switched off until you choose to turn it on. Until you accept, no analytics script is loaded, no request is made to Google, and no analytics cookies are set.

You are asked once, in a bar at the bottom of the page. Accepting, declining and ignoring it are all fine. Declining and ignoring have the same effect: no Google Analytics.

Our host’s cookieless page counts and performance measurements are not covered by this choice: they run for every visit, set no cookies and store no identifier on your device. They are described under “Who receives the information” below.

Google Analytics gives us information about visits rather than about people. Broadly, that is:

• which pages were viewed, and in what order
• how you arrived — a search engine, a link from another site, or directly
• approximate location, worked out from your IP address and no more precise than a general area
• device information such as browser, operating system and screen size
• basic interaction signals, such as how far down a page you scrolled
• which of certain controls you use: submitting a search, opening a search result, following a related link, using the business comparison, planner or vehicle price tools, sharing, downloading, pressing a sign-in button, saying you would use a weekly email, and viewing this week’s GTA Online page. Each is recorded with a fixed name for the control, the section of the site it is in and, for a search result, the kind of result (a vehicle, a character), never what you typed or which result you opened
• that a new account’s profile was created, without anything that identifies the account

Words you type into a search are removed from page addresses and titles before anything is sent to Google or to Vercel, so neither receives what you searched for. Analytics never receives your email address, your account, or anything you record in Vice Profile.

Reading this site never requires your name or email, and we do not try to work out who you are. Vice Profile, the part of the site that records your own progress, needs a free account — see “Your account and Vice Profile” below.

To find out which parts of the site are actually useful — which GTA VI coverage people read, which vehicle pages and searches get used, and whether people find what they came for. That decides what we build next.

Google provides Google Analytics and receives the analytics information described above, but only if you accept.

Vercelhosts GrandTheftAuto.World and handles the requests needed to deliver the site. We also use two of Vercel’s own measurement features: Speed Insights, which collects anonymous website performance measurements such as Core Web Vitals so we can understand how quickly and reliably pages work for visitors, and Web Analytics, which counts page views so we can see which pages are read. Search words are removed from the page addresses both receive. Neither sets analytics cookies, and neither stores a persistent visitor identifier on your device.

Nothing is stored on your device until you make a choice, sign in or use Vice Profile.

If you accept analytics, Google sets two cookies: _ga and a second beginning _ga_. They let Google recognise a returning browser and group page views into a visit.

Whichever you choose, we save that choice in your browser’s local storage under gtaw.consent.analytics.v1. It holds one word — your answer — so we do not have to ask again. It is never sent to our servers.

If you use the garage in Vice Profile (Vice Garage), your garage — which vehicles you own or want, each copy you add, and the custom names, storage locations, notes and favourites you give them — is saved in your browser’s local storage under gtaw.vice-garage. This is needed for the garage to work, so it does not wait for the analytics question. It is sent to our servers only as the private cloud copy in your account, while cloud sync is on (below). If saved garage data ever cannot be read, the original is kept unchanged under gtaw.vice-garage.quarantine rather than deleted. To remove your garage from this browser, use Reset in Vice Garage (and Discard for any set-aside copy), or clear this site’s data in your browser settings — either deletes it for good unless you have exported a copy.

Showing a vehicle works like the rest of the site: your browser loads that vehicle’s public picture and other site files from us. As with any website, our host receives ordinary technical details with those requests, such as the file requested, your IP address, browser information and the time. Your garage, its names and notes, and any export are not sent with them, but the pictures a browser loads can show which vehicles it displayed.

Vice Profile saves each kind of progress in your browser’s local storage, under a key of its own (the names are those of the trackers these used to be):

• Mission Tracker — which story missions you have marked complete, and when, under gtaw.mission-tracker, with any unreadable copy set aside under gtaw.mission-tracker.quarantine
• Achievement Tracker — which achievements on each supported platform list you have marked unlocked or cleared, and when, under gtaw.achievement-tracker, with any unreadable copy set aside under gtaw.achievement-tracker.quarantine
• Collection Tracker — which weapons, properties, businesses and collectible sets you have marked, your counts toward each set, and the ones you have starred or listed to hunt next, under gtaw.collection-tracker, with any unreadable copy set aside under gtaw.collection-tracker.quarantine

As with the garage, this is needed for Vice Profile to work, so it does not wait for the analytics question. Your progress is not sent to GrandTheftAuto.World’s servers except as the private cloud copy in your account, while cloud sync is on (below). It is never put into a web address, the page’s metadata or structured data, our sitemaps, analytics, or the body of any other request.

Export creates a file on your device, and Import reads a file you choose on your device; neither is uploaded. If saved progress ever is damaged, the original is kept unchanged under the set-aside key above rather than deleted, and is never read back into the tracker. Progress saved by a newer version of a tracker is left exactly where it is, untouched. Reset in Vice Profile, or clearing this site’s data in your browser settings, removes that progress for good unless you have exported a copy.

Vice Profile loads pages and pictures like the rest of the site, and our host receives the same ordinary technical details with those requests described above for Vice Garage. What you have ticked, counted or starred is not sent with them. Once you are signed in, its home page also downloads a public list of the items this site catalogues — the same file for everybody — so it can count your progress in your browser; that request carries nothing about you or your progress.

Until 28 September 2026 these tools worked without an account, so your browser may already hold progress under the keys above. It is left exactly where it is. If you open one of their pages without signing in, the page reads it in your browser only to tell you it is there and to offer you a file of it; nothing is sent. After you sign in, Vice Profile asks before adding any of it to your account.

When you open a game in Vice Profile, your browser also remembers which game that was, under gtaw.preferences, so Vice Profile can offer to continue with it next time. It is a display preference, not progress: it holds only that game and when it was chosen. It is never synced to an account, never included in an export, and never sent to our servers or put into a web address. A Reset in Vice Profile does not remove it; clearing this site’s data in your browser settings does.

Vice Profile’s GTA Online dashboard keeps two more records in your browser’s local storage, each under a key of its own, and only once you record something in it:

• Holdings — which GTA Online businesses and properties you have marked as owned or no longer owned, and when, with the location, the upgrades and any private name you give each one; for a business, whether you have marked it running or paused, its setup done, how full its stock was when you last checked and any private note you add; and the goal you choose for what to buy next, under gtaw.holdings, with any unreadable copy set aside under gtaw.holdings.quarantine
• Progress log — which GTA Online jobs, activities, awards and other repeatable items you have marked, and when, with the counts, tiers, best results and weeks or events you record for them, under gtaw.progress-log, with any unreadable copy set aside under gtaw.progress-log.quarantine

They are handled exactly as the rest of your progress is: saved only when you use them in Vice Profile; sent to GrandTheftAuto.World’s servers only as your account’s private cloud copy, while cloud sync is on for them; exported and imported only as files on your device; set aside rather than deleted if damaged; and removed for good by clearing this site’s data in your browser settings, unless you have exported a copy.

Vice Profile — where you record your own GTA progress — needs a free account. Reading the rest of the site never does. Your progress is saved in your browser first; while cloud sync is on, your account keeps a private cloud copy of it, so the same progress is on every device you sign in on. You can turn cloud sync off, for everything or for any part of it, in your account. If you never sign in, no sign-in cookie is set and nothing about you is sent to the account service.

If you create one, your account holds:

• your email address, which is how you sign in — there are no passwords;
• a username, which is private;
• if you add them, a display name, an avatar picked from a small set of illustrations we provide, and a favourite game;
• a cloud copy of only those parts of your progress you choose to sync, and nothing from the others — the GTA Online holdings and progress log each count as a choice of their own.

There are no public profiles. Your profile and cloud progress are shown only to you, when you are signed in, and the database’s access rules let an account read and change only its own records.

Supabase holds accounts and cloud progress, as our processor, in its Ireland (EU) region, inside the European Union. Resend sends the sign-in emails, as our processor for that one task.

A signed-in browser keeps a sign-in session cookie so that you stay signed in; it holds no progress. Alongside your progress, your browser also keeps gtaw.cloud-sync, which records only which cloud revision each part of your progress last matched on this device — never any progress. Signing out removes that record and the session, and leaves the progress stored in this browser where it is.

Whenever keeping one copy would replace another, you are asked first. The copy being replaced is kept: on your device as the set-aside copy described above, or in your account as one of at most five replaced cloud copies per part, which you can download or discard. A replaced cloud copy stays in your account until you discard it or delete your account. When a part already has five, nothing is replaced automatically: the next replace is refused until you discard one.

Exports are created on your device. You can download everything your account holds from the account pages. Deleting your account removes the account, its profile, its cloud progress and its replaced copies from the live service straight away. It does not touch the progress stored in your browser, which stays until you reset it in Vice Profile or clear this site’s data.

Supabase also keeps encrypted backups of the database, as part of running the service. Data you deleted can remain in those backups for a limited time, until Supabase’s normal backup cycle replaces them.

• We do not use Google Analytics data for advertising in the current implementation.
• We do not build profiles of individual visitors.
• We do not sell or share your information with data brokers.

You can change your answer at any time, in either direction, using the control below. If you turn analytics off after having had it on, we delete the Google Analytics cookies we can identify and reload the page so nothing further is measured.

You can also clear cookies and site data in your browser settings, which removes both Google’s cookies and your saved choice. The next visit will ask again.

Questions about this notice, or about information we hold, go to iotp@iotp.net.