Privacy Policy

Phase Forensics (“Phase Forensics”, “we”, “us”, “our”) operates the website at phaseac.cc, the Phase Forensics scanner, and the official Phase Forensics Discord community.

We are responsible for the personal data described in this Policy, in the roles set out in Section 3. Privacy questions, requests and complaints are handled by our data protection contact, who can be reached by email or through our Discord community. We aim to respond to every request within one month.

Website (also “phaseac.cc”, “the Site”)

https://phaseac.cc, including its public pages, account areas, dashboard, purchase flow, support surfaces and related services.

Phase Account

A user-created account that grants access to the Website and enables use of the Scanner. Accounts are created by signing in with Discord.

Scanner (also “the Tool”, “Scan Tool”)

Phase Forensics’ proprietary forensic software, which examines a Windows device for indicators of cheat-related or unauthorised software.

Pin

A single-use link created by an Operator that authorises exactly one scan. One pin permits one scan and cannot be reused.

Operator (also “Customer”)

The account holder who creates a pin and receives the resulting report.

Scanned User

The individual whose device is scanned.

Scan Data

The forensic data collected from a Scanned User’s device.

IP Address

A unique numeric label assigned to a device on a network.

We act in two distinct roles depending on the data.

Data Controller

For account data, session data, purchase and licence records, support tickets, Lab submissions and general Website data, we determine how and why the data is processed.

Data Processor

For Scan Data collected from a Scanned User’s device, we act on behalf of the Operator who created the pin. In that case the Operator is the controller and is responsible for the lawful basis for scanning. We process Scan Data only to perform the scan, produce and filter the report, deliver it to the Operator, and as required by law.

A scan begins only when the person at the device enters the Operator’s pin and presses Start Scan. The Tool takes no action before that, does not run in the background, and does not install a persistent service.

Once started, the Scanner performs a forensic examination of the device. To establish whether cheat-related or unauthorised software is or has been present, it reviews technical information that Windows records as part of normal operation. Described in general terms, this may include:

• Information about the device and its configuration, and identifiers used to recognise the same machine across scans and to prevent abuse of the Service.
• Information about the software installed on the device, and records indicating that software has run or that files have been present — including where those records remain after a file has been removed.
• Information about the processes and services active during the scan.
• The status of the device’s security software.
• Limited contents of files on the device, examined only to check them against indicators of cheat-related or malicious software. The Tool is designed to surface only relevant indicators and not to collect or report unrelated personal content.
• The public identifiers (such as a user ID and display name) of gaming and chat accounts signed in on the device, used to identify alternate accounts. Passwords, authentication tokens and message content are not collected.
• The IP address the scan is uploaded from, used to operate the session, detect self-scanning, and enforce our Terms of Service.

Account details

We do not operate our own password system. You sign in with Discord, and we receive your Discord user ID, username, display name and avatar or banner image references, together with the list of servers you are in, which is used only to check membership of our support community. We do not request, receive or store your Discord password, and we do not collect your email address.

Session data

When you sign in we store a session token in hashed form, together with the IP address, browser user agent and last-seen time for that session, so that you can stay signed in and so that sessions can be reviewed and revoked.

Pin and download data

When a pin is created we store the IP address it was created from, and we record download counts along with the IP address and user agent used to download. This operates the pin, detects self-scanning (where a pin creator scans their own device, which is prohibited), and enforces our Terms of Service.

Purchase and licence records

Purchases are arranged through a private ticket in our Discord community. We record the plan, the payment method you select, and the licence issued. There is no card form on the Website: we never receive or store card numbers or other payment credentials, and payments are settled through the provider you choose, under that provider’s own terms and privacy policy.

Support tickets

The contents of tickets you open, along with transcripts and the staff member handling them, so that we can provide and audit support.

Lab submissions

Files you choose to upload for analysis, together with the metadata derived from them.

Security and audit records

Administrative actions and security-relevant events, recorded so that account and platform activity can be audited and abuse can be investigated.

We process personal data on the following legal bases:

Contract

To create and operate your account, provide the Services, issue licences and process purchases.

Consent

For the scan carried out by the Tool. A scan is started deliberately by the person at the device, can be declined simply by not starting it, and consent can be withdrawn at any time.

Legitimate interests

To secure the Services, prevent abuse and fraud, enforce our Terms, support fair play, and operate our business — balanced against your rights and freedoms.

Legal obligation

To comply with applicable law, including responding to lawful requests.

Operators

Filtered scan reports are delivered to the Operator whose pin created the scan, and, where the pin belongs to an enterprise workspace, to the members of that workspace who are permitted to view scans.

Shared reports (Operator-initiated)

Phase Forensics does not itself publish scan reports. An Operator may choose, when creating a pin, to make the resulting report shareable by link, in which case it may be viewable by anyone holding that link. The Operator is the controller for that disclosure and is solely responsible for it; we provide the functionality only as a processor acting on the Operator’s instructions.

Discord

Sign-in, community features, support tickets, purchases and notifications operate through Discord, so data exchanged in those flows necessarily passes through Discord’s platform under its own privacy policy and terms.

Cloudflare

Provides DNS, content delivery, web-application security, rate limiting and object storage for the Website and the scanner download.

Hosting

Our application server and database run on dedicated infrastructure provided by our hosting provider.

Legal and safety

We may disclose data where required by law or regulation, or where necessary to establish or protect our legal rights, or to protect our users or the safety of others.

Some of the providers we rely on — for example Cloudflare and Discord — operate globally and may process data outside your country. Where personal data is transferred internationally, we rely on appropriate safeguards, such as Standard Contractual Clauses (including the UK International Data Transfer Agreement or Addendum where applicable), or transfers to jurisdictions covered by an adequacy decision.

We keep personal data only for as long as it is needed for the purpose it was collected for.

Unused pins

A pin that is created but never used is automatically revoked after one hour. Once revoked it can no longer be downloaded or scanned against.

Scan reports

A delivered report is retained in the Operator’s dashboard, under the Operator’s control, until the Operator deletes it. Acting as processor, we retain reports in accordance with the Operator’s instructions and delete them when instructed.

Session records

Retained until the session expires or is revoked, whichever comes first.

Account, licence and purchase records

Retained while your account is active, and afterwards only for as long as needed for legitimate purposes such as licence enforcement, fraud prevention, and legal or accounting obligations.

Support tickets, Lab submissions, security and audit records

Retained only for as long as needed for the purpose they were collected for and for our legitimate interests, and then deleted.

Subject to applicable law, you have the right to:

Access

Request copies of the personal data we hold about you.

Correction

Request that inaccurate or incomplete data be corrected.

Deletion

Request erasure where the data is no longer required.

Restriction

Request that we limit our processing in certain circumstances.

Objection

Object to processing based on your particular situation.

Data portability

Request transfer of your data to another organisation.

Withdraw consent

Where we rely on consent, withdraw it at any time.

To exercise any of these rights, contact us using the details in Section 15.

Data is processed and stored on secured servers with technical and organisational measures designed to protect against unauthorised access, loss or misuse. These include encrypted transport across the Website and the Tool, session tokens stored only in hashed form, role-based access control with audit logging for administrative actions, edge protection and rate limiting, and integrity checks that flag any scan whose results may have been tampered with.

We never ask for your Discord password and do not hold one. No system can be guaranteed perfectly secure, but we take reasonable and continuing steps to safeguard your data.

The Services are not intended for anyone under the age of 16, and we do not knowingly collect data from anyone under 16. Users aged 16 or 17 require the consent of a parent or guardian. If you believe a person under 16 has used the Services or been scanned, contact us so that we can take appropriate action.

We may modify, update or replace this Privacy Policy at any time, at our sole discretion. Changes take effect when published on this page and apply from that point. Your continued use of the Website or the Tool after a change constitutes acceptance, and it is your responsibility to review the current version. Nothing in this section affects any mandatory rights that cannot be waived under applicable law.

We operate an official Discord community and a bot within it, providing support ticketing, purchases, licence delivery, community features and moderation. For personal data processed through the community and the bot, Phase Forensics acts as the data controller. Your use of Discord itself is separately governed by Discord’s own Privacy Policy and Terms of Service.

Depending on how you interact with the server, we may process:

• Discord identifiers and profile data — your user ID, username, avatar, server and role membership and nickname, used to operate commands, manage roles and identify you within the community.
• Message content — to handle commands, operate community features and provide automated moderation, the bot receives messages sent in the channels it can see.
• Support and purchase tickets — the ticket, its contents, a transcript, and the staff member handling it, so that we can provide and audit support and fulfil orders.
• Account and licence records — the link between your Discord account and your Phase Account, and the licences issued to you, including delivery of licence and order notifications by direct message.
• Community records — invite attribution, giveaway entries and moderation actions, used to operate community features and enforce our server rules.

We process this data to operate the community and its features (contract and legitimate interests), to keep the community safe and prevent abuse (legitimate interests), to issue and manage licences (contract), and to comply with the law (legal obligation). Bot data is processed on our own infrastructure and, for account linking and licence issuance, is exchanged with the Phase Forensics platform described elsewhere in this Policy. Records are retained only for as long as needed for the relevant purpose and are then deleted. The age restrictions in Section 12 apply equally to the community and the bot.

If you have questions about this Policy, want to exercise your rights, or need support, reach out to us and we will get back to you.