Last updated 3 September 2026
Privacy policy
GTA Corner is a small fan site. This page lists every piece of data it holds, why it holds it, and who else sees it — taken from the database schema, not from a template.
The short version
- Your email is never shown. The query that builds the public crew list does not select the email column at all.
- Your gamertag and Xbox profile are public on the crew finder — that is the point of registering.
- No account, no password. There is nothing to log in to.
- Ads arrive as push notifications. Only if you click Allow when your browser asks. Declining changes nothing about the site. Described in full below.
- Deletion on request. Ask and the row goes. There is no retention argument to have.
Who runs this site
GTA Corner is an independent fan community project. It is not affiliated with, endorsed by or sponsored by Rockstar Games or Take-Two Interactive. It is not a company; it is a website run by one person.
For anything on this page — a deletion request, a correction, or a question about your data — contact contact@1osolutions.com.
What the crew finder stores when you register
Registering on the crew finder writes one row to a Postgres database. That row is the whole of it:
| Field | Why | Public? |
|---|---|---|
| Email address | Identifies your registration so a second submission updates it rather than duplicating it | No — never selected by the public query |
| Gamertag or PSN ID | So a crewmate can send you a friend request | Yes |
| Platform, region, playstyle, mic | The filters other players search by | Yes |
| Xbox XUID, gamerscore, avatar URL | Returned by the Xbox lookup when a gamertag is confirmed | Yes, except the XUID |
| Recent games and achievements | Shown on your card so others can see how you play | Yes |
| Which page you registered from | To see which articles actually bring people in | No |
| Registration timestamp | Ordering the list | No |
There is no password, because there is no account. No payment details, because nothing is sold. No IP address or device fingerprint is stored in that row.
Two things are deliberately not captured even though the Xbox API returns them: your real name and your location. They are discarded at the point the response is read.
The Xbox lookup
If you register with an Xbox gamertag, the site asks a third-party Xbox Live API service for the public profile behind that gamertag — XUID, gamerscore, account tier, reputation, avatar URL, recently played games and recent achievements. All of it is data Xbox already publishes about that gamertag to anyone who asks.
Avatars and game cover art are hotlinked from Microsoft’s CDN rather than copied here, so your browser fetches those images from Microsoft directly and Microsoft sees that request. Nothing about you is sent to Microsoft beyond what loading an image involves.
A gamertag being confirmed on Xbox Live is not proof that you are the person who owns it. The site says so on the card, and marks ownership as proven only where it genuinely has been.
Advertising and push notifications
This site carries advertising from a third-party network operating from the domain 3nbf4.com. It is delivered as browser push notifications rather than as banners in the page, which works differently from ordinary web advertising and is worth understanding before you agree to it.
- Your browser will ask first. Notifications cannot be sent unless you click Allow on the permission prompt. Declining it costs you nothing on this site — every page works exactly the same either way.
- Allowing it installs a service worker. That is a script which stays registered in your browser for this site and can receive messages after you have closed the tab. The notifications you then receive are chosen by the ad network, not by this site, and their content is not reviewed here.
- The ad network receives data directly. Because its code runs in your browser, it can see your IP address, your browser and device details, and the identifier it assigns your subscription. That exchange is between you and the network; this site does not receive it and does not store it against your crew finder registration.
- Revoking it is one click. In any browser, open the padlock or site-settings icon beside the address bar, find Notifications and set it to Block. That stops them immediately and permanently, and you can also clear the worker under site data.
This site no longer runs Google AdSense, and no longer serves an ads.txt file.
Analytics
Page views are counted with Vercel Web Analytics, which Vercel documents as not using cookies and not tracking individuals across sites. It reports totals — which pages get read, roughly where from — not people.
Who else touches the data
- Vercel hosts the site and therefore processes requests to it, including server logs.
- Supabase hosts the Postgres database the registrations live in.
- OpenXBL is the Xbox Live API service the gamertag lookup goes through.
- Google serves the ads.
Nothing is sold, rented or handed to a data broker. There is no mailing list, and registering does not subscribe you to anything.
Your rights, and how to actually use them
Wherever you live, you can ask for a copy of what is held about you, ask for it corrected, or ask for it deleted. If you are in the UK, the EU or California you have those rights in law; the site does not distinguish, because it is simpler to honour them for everyone.
Email contact@1osolutions.com from the address you registered with, or tell us the gamertag on the card. Deletion removes the whole row, including the email; it is not a soft delete or a flag.
One honest limitation: this site cannot delete anything from Xbox Live. The profile data shown on your card is Microsoft’s, and what Xbox publishes about a gamertag is controlled in your Xbox privacy settings, not here. Removing your registration removes the copy shown here.
Children
The site is not directed at children under 13, and registration asks for a gamertag rather than an age. If you believe a child has registered, email the address above and the row will be removed.
Changes
If what is collected changes, this page changes with it — the date at the top is edited by hand when the policy itself changes, rather than being stamped automatically on every deploy so it always looks fresh.