Legal
Privacy Policy
How TopFive (operated by AxonAC) handles information. Last edited August 31, 2026 at 1:33 PM CDT.
1. Scope
This policy covers the website at https://topfive.gg, accounts, votes, reviews, jobs, reports, favorites, public profiles, on-site DMs, toolkit lookups, partner/sponsor applications and click counts, and the Discord vote bot / related APIs. It does not cover third-party game servers, Discord itself, Cfx.re, Tebex, or other sites you open after the leave-site warning.
2. Information we collect
You give us
- Account: username, email, password hash (not the raw password), optional Discord / Cfx.re link, bio and other public-profile fields you save (avatar URL, banner URL, website, location, tagline, accent, supporting server, show-Discord / allow-DMs)
- Listings: names, join codes, descriptions, tags, region/type/framework/game, Discord and store URLs, webhook URLs, claim/verify materials
- Community: votes, reviews, favorites, job posts, applications, reports, on-site DMs
- Partner / sponsor submissions. If you buy placement we also keep the inquiry and the public listing fields you approved
We collect automatically
- IP address, rough location derived from IP, browser type, device, referring URL
- Session cookies and login cookies needed to stay signed in and to stop CSRF / vote abuse
- Timestamps of votes, logins, listing edits, profile views, partner outbound clicks, and CFX syncs
- Public CFX server data we request (hostname, players, banner/icon URLs, tags) and store snapshots for uptime / last-seen
- A local “cookie accepted” flag in your browser so we do not keep showing the cookie notice
From Discord, if you connect it
- Discord user id, username, and the minimum OAuth profile Discord returns
- Guild id when a server owner links the vote bot
- Commands sent to the bot (for example /vote) and the outcome
3. How we use it
- Run the directory, accounts, votes, reviews, jobs, and dashboards
- Show live and historical player counts, last-seen, and uptime
- Show public profiles and count profile views (once per visitor session)
- Count sponsor clicks after you confirm the leave-site warning, and show those totals on the Partners page
- Deliver on-site DMs and unread alerts
- Enforce the 24h vote cooldown and anti-abuse limits (account + IP + related signals)
- Send webhook events you configured to your Discord channel
- Investigate reports, fraud, exploits, and legal demands
- Improve the product (aggregate traffic, error logs)
- Contact you about your account or a listing dispute
We do not sell personal information. We do not rent your email list.
4. Legal bases (if GDPR / similar applies)
- Contract: providing the account and listing you asked for
- Legitimate interests: security, abuse prevention, public directory display, product analytics
- Consent: Discord OAuth, optional marketing if we ever add it (we will ask)
- Legal obligation: tax, preservation requests, child-safety reports
5. What is public
Listings, vote totals, reviews, job ads, partner cards, public profiles (including supporting-server choice), and usernames attached to public activity are public on purpose. Profile view counts and partner click counts are visible in the places described above. Do not put home addresses, phone numbers, or private Discord tokens in a description or bio.
An open report can show a public “Reported” mark on a listing. Report details stay limited to staff.
6. Sharing
We share information with:
- Infrastructure vendors (hosting, DNS, email delivery if used) under their terms
- Discord, when you OAuth or use the bot / a webhook you saved — data then follows Discord’s policy
- Cfx.re, when we fetch public server info with a join code you published
- Listing owners, when you apply to a job or leave a review
- Authorities or complainants when we believe we must (safety, fraud, valid legal process)
- A buyer of the project, if the site is sold — they must honor this policy or give notice
Webhook URLs you store will receive event payloads. Anyone with that URL can see those events. Treat it like a password.
7. Cookies and sessions
We use essential cookies so you can sign in, cast one vote per listing per cooldown, keep forms secure (CSRF), and store flash messages. The cookie notice is an acknowledgment of that, not a marketing opt-in. We do not run a third-party ad pixel on the core listing flow. Blocking cookies will break login and voting. A localStorage flag remembers that you dismissed the notice.
8. Retention
- Account and listings: until you delete them or we close the account
- Votes and anti-abuse logs: kept long enough to enforce cooldowns and investigate fraud (typically months to years)
- Player samples: rolling window used for averages and last-seen
- DMs: kept while the thread exists; we may retain limited copies for abuse review
- Profile view and sponsor click counters: stored as running totals on the profile / partner row
- Reports and safety records: kept as long as needed to document enforcement
- Backups: rotated on the host’s schedule
9. Security
We hash passwords, restrict admin tools, and use HTTPS on the live site. No method is perfect. Do not reuse passwords. Tell us if you think an account was taken over.
10. Children
The service is not directed at children under 13. We do not knowingly collect personal information from them. If you believe we have, contact us and we will delete it.
11. Your choices
- Edit profile and listing fields in the dashboard
- Disconnect Discord where the UI allows it
- Request account deletion through site tools or a written request we can authenticate
- Some records (votes already counted, legal holds, aggregated stats) may remain in de-identified or limited form
EEA/UK/California-style rights (access, correction, deletion, restriction, portability, appeal) are honored to the extent the law requires and we can verify you.
12. International
The operator is in the United States (Wisconsin). If you use the site from elsewhere, you understand your data is processed in the U.S. and anywhere our host routes traffic.
13. Changes
We will update the date at the top when this policy changes. Keep using the site after a change means you accept the updated policy.
14. Contact
Privacy and legal requests: use the in-site report / account tools, or contact the operator of TopFive through https://topfive.gg. We will not act on unverified “delete this account” emails.
