Software Policy

This Software Policy ("Policy") is the licence under which we make the RPP Launcher available to you. It sits alongside our Terms of Service and Privacy Policy. By installing, running, or using the RPP Launcher, you accept this Policy in full. If you do not accept, you must not install or use the RPP Launcher.

1. About us & definitions

The RPP Launcher is published by Phytoventures Ltd (company number 16388003) of Belmont Suite, Chorley New Road, Horwich, Bolton, England, BL6 6HG ("Phytoventures", "we", "us", "our").

In this Policy:

• "Software" means the RPP Launcher Windows desktop application, including its installer, the embedded Vue user interface, the Rust backend, configuration files, icon and brand assets, the auto-update channel, and any patches, modifications or new versions we make available to you.
• "Service" has the meaning given to it in our Terms of Service.
• "Anti-Cheat" means the integrity-monitoring component built into the Software, described in detail in section 7.
• "You" or "your" means the natural person who has installed and is using the Software.
• "Device" means the computer on which you install the Software.

2. Ownership of the Software

The Software is owned by Phytoventures Ltd. All intellectual property rights in the Software, including, without limitation, the source code, compiled binaries, design, brand, user interface, icons, fonts that we control, and the configuration of the Anti-Cheat, are and remain the exclusive property of Phytoventures Ltd, or our licensors.

Nothing in this Policy transfers any ownership of the Software to you. You receive a personal right to use the Software under section 3, and nothing more.

3. Licence we grant you

Subject to your continuing compliance with this Policy, our Terms of Service, and our Privacy Policy, Phytoventures grants you a personal, non-exclusive, non-transferable, non-sub-licensable, revocable, royalty-free licence to download, install and run the Software on a Device that you own or lawfully control, solely for the purpose of:

• signing in to your Roleplay Project account;
• viewing information about your Roleplay Project account, characters and the Service;
• connecting to the Roleplay Project FiveM server; and
• receiving the Anti-Cheat protections described in this Policy.

This licence is granted to you as an end user. You may not transfer it to anyone else.

4. Things you must not do

You must not, and must not permit any other person to:

• copy, redistribute, publish, sell, rent, lease, sub-licence or otherwise commercialise the Software;
• reverse engineer, decompile, disassemble, attempt to derive the source code of, or otherwise inspect or interfere with the binaries of the Software, except to the extent that such restrictions are expressly prohibited by applicable law;
• modify, alter, adapt, translate or create derivative works from the Software, in whole or in part;
• remove, alter or obscure any copyright, trade mark, attribution or other proprietary notices in or on the Software;
• circumvent, disable, tamper with, evade, hook, intercept, replace, patch, or otherwise interfere with the Anti-Cheat, the auto-update mechanism, the signature verification process, or any other security feature of the Software;
• use the Software to inject code, mods, overlays, helpers, hooks or third-party software into the Roleplay Project FiveM server in a way that gives any player an unfair advantage or that breaks the Service;
• use the Software in connection with any cheat, trainer, kernel-mode bypass, hardware-ID spoofer, packet sniffer aimed at the Service, automation or "bot" tool, or any other utility we reasonably consider to be unfair, abusive, or designed to evade the Anti-Cheat;
• use the Software on, or to access, the Service from any account that we have suspended or terminated;
• impersonate any other person, or claim to act on our behalf, when running or distributing the Software;
• use the Software in any way that breaches our Terms of Service, our Privacy Policy, or any applicable law.

5. Updates and patches

The Software contains an automatic update mechanism. When a new version is released we publish an update manifest at https://roleplayproject.net/client/update.json. The Software checks that manifest shortly after start-up and at regular intervals afterwards.

If a newer version is available the Software will download the updated installer, verify it against a public signing key burned into your installed Software, and prompt you to restart to apply the update. We do not install updates without prompting you.

You agree that we may make changes to the Software, the manifest, the update channel, the Anti-Cheat rules, and the signing keys from time to time, without notice to you. We may discontinue, suspend, or change the Software, or any feature of it, at any time without liability.

6. How the Software works

So that you can make an informed decision about installing the Software, this section explains what it does in plain language.

When you start the Software:

• it shows a window operated by the Software (built with the Tauri framework, using the Windows WebView2 runtime);
• it loads a sign-in screen and asks you to enter your Roleplay Project credentials;
• once you sign in, the Software stores a bearer token on your Device so you do not have to sign in every time;
• it makes HTTPS requests to https://ucp.roleplayproject.net to fetch your account data, your characters, the latest announcements, and the live state of the Roleplay Project FiveM server;
• it shows you a "Play" button which, when pressed, runs your locally-installed FiveM client and tells it to connect directly to play.roleplayproject.net;
• it runs the Anti-Cheat described in section 7 in the background;
• it checks for an updated version of itself and, with your permission, applies any update available;
• it sets a Discord Rich Presence ("In the launcher" or "Playing FiveM") if Discord is also running, so your Discord status reflects what you are doing on Roleplay Project;
• it derives a hardware fingerprint ("HWID") from stable data on your Device, described in section 8.

The Software runs entirely under your normal Windows user account. It does not install drivers, run as SYSTEM, modify the Windows kernel, or attempt to gain elevated privileges beyond those normally granted to an installed desktop application.

7. How the Anti-Cheat works

The Anti-Cheat is part of the Software. Its purpose is to detect and report use of known cheats with the Service, and to protect the fairness and integrity of the Roleplay Project community. This section describes everything the Anti-Cheat does at the date of this Policy.

7.1 Activation. The Anti-Cheat is enabled by default whenever the Software is running. It does the bulk of its work only while a FiveM process is detected on your Device. When FiveM is not running it idles cheaply.

7.2 Process scanning. The Anti-Cheat periodically asks Windows for the list of processes you are currently running, and compares the process names against a curated list of publicly-known cheat clients targeting FiveM (such as Redengine, Eulen, Hydrogen, Tornado, Cherax, Stand and others). The list is held inside the Software and updated in new versions.

7.3 Window scanning. While FiveM is running the Anti-Cheat enumerates visible top-level Windows windows and compares their titles against the same list of known cheat overlays. We do not read the contents of any window, only its title.

7.4 No memory or kernel access. The Anti-Cheat does not read the memory of any other process, does not hook into FiveM, does not load a kernel driver, does not capture your screen, does not log your keystrokes, and does not access your microphone or camera.

7.5 Reports. If the Anti-Cheat matches a known-cheat name against a process or a window title, it sends a single report to our server at https://ucp.roleplayproject.net/api/anticheat/report. The report contains:

• your HWID (see section 8);
• which of the two checks matched ("process" or "window");
• the name of the process or the window title that matched, and the cheat-name fragment that triggered the match;
• the version of the Software running;
• the time of the detection.

The same detection is only reported once per session, to limit traffic and noise. Repeated, repeated-after-quit, or persistently confirmed detections may also be considered.

7.6 What we do with reports. Reports feed a moderator queue. A human reviews matches before any sanction is applied to your account. We may use detection reports as evidence in our internal moderation process. We may share reports with law enforcement if we are legally required to do so, or if we reasonably believe they relate to an offence (for example, under the UK Computer Misuse Act 1990).

7.7 What we do not do. The Anti-Cheat does not impose any sanction on you, your account, your Device, or anything else. Any sanction that follows a report (warning, suspension, ban) is decided by us through our normal moderation procedures, which are set out in our Terms of Service.

8. Data we collect through the Software

The Software processes only the personal data necessary for it to do its job. The categories of data we process are:

• Account credentials: your Roleplay Project email/username and password, transmitted over HTTPS to ucp.roleplayproject.net, only to obtain a bearer token. We do not store your password on your Device.
• Bearer token: a long-lived session token issued by our server and stored locally on your Device by the Software, so you can stay signed in.
• Account profile: your username, email, rank, RPP+ subscription state, and similar account fields, fetched over HTTPS so the Software can show them to you.
• Character data: your characters' names and playtime, fetched over HTTPS for display on the dashboard.
• Hardware fingerprint (HWID): a stable SHA-256 hash of: your Windows MachineGuid, the MAC address of one of your network interfaces, and your computer's hostname. The HWID is a non-reversible identifier, it cannot be turned back into the underlying values. We use it to correlate Anti-Cheat reports with the same Device, to detect ban evasion, and to bind launcher sessions to a Device.
• Anti-Cheat detection data: the process names or window titles that matched the cheat list (as described in section 7).
• Telemetry on launches: when the Software updates itself, that update event is logged on our server for diagnostic purposes.
• Network metadata: when the Software talks to our server, our server may log standard request information including your IP address.

We are the controller of this personal data. Full details of how we hold and use personal data, your rights under the UK GDPR, and how to contact our data protection point are in our Privacy Policy.

9. Your consent to scanning

When you accept this Policy you are giving us your specific, informed, freely-given consent to the Anti-Cheat scanning described in section 7 on your Device, and to the processing of the personal data described in section 8 for the purposes stated there.

You can withdraw your consent at any time by uninstalling the Software. If you withdraw your consent you may still use other parts of the Service that do not require the Software, subject to our Terms of Service.

10. No warranty

The Software is provided "as is" and "as available". To the maximum extent permitted by law we make no representations and give no warranties or guarantees in connection with the Software, including (without limitation):

• that the Software will be uninterrupted, error-free, free from viruses, or secure;
• that the Software will meet your requirements or run on your Device;
• that the Anti-Cheat will detect all cheats or prevent all unfair play;
• that any defect or vulnerability will be fixed.

This does not affect statutory warranties that cannot be excluded under the laws of England and Wales.

11. Limitation of liability

Nothing in this Policy excludes or limits our liability for:

• death or personal injury caused by our negligence;
• fraud or fraudulent misrepresentation;
• any other liability that cannot lawfully be excluded.

Subject to the paragraph above, to the maximum extent permitted by law:

• we are not liable to you for any loss of profits, loss of business, loss of revenue, loss of goodwill, loss of data, loss of in-game assets, loss of opportunity, loss of anticipated savings, business interruption, or any other indirect or consequential loss or damage arising out of or in connection with your installation or use of the Software;
• we are not liable to you for any damage to your Device, to any other software running on your Device, to your data, or to any service operated by anyone else, arising out of or in connection with your installation or use of the Software, including any damage caused by the Software triggering an unrelated anti-virus or operating-system warning, by the Software being misclassified by any third party, or by any flaw, bug, or vulnerability in the Software;
• we are not liable for any loss or damage caused by anyone else's interference with the Software (for example, malware modifying the Software on your Device, or a third party making available a fake or tampered version of the Software);
• our total aggregate liability to you arising out of or in connection with the Software, whether in contract, tort (including negligence), breach of statutory duty, or otherwise, is limited to the greater of (a) the total amount you have paid to us in the twelve months immediately before the event giving rise to the liability, or (b) GBP £100.

You acknowledge that the Software is made available to you at no charge as part of the Service, and that the limits in this section reflect the fact that you are not paying us specifically for the Software.

12. Indemnity

To the maximum extent permitted by law, you agree to indemnify, defend and hold harmless Phytoventures Ltd, its officers, directors, employees, contractors, and agents, against any losses, liabilities, claims, damages, costs and expenses (including reasonable legal fees) arising out of or in connection with:

• your breach of this Policy, our Terms of Service or our Privacy Policy;
• your use of the Software in breach of any law;
• your interference with the Anti-Cheat, the auto-update mechanism, or any security feature of the Software;
• your distribution of any modified, tampered, or unauthorised version of the Software.

13. Open-source components

The Software includes open-source components (for example, the Tauri framework, the Vue.js library, the Font Awesome free icon set, parts of the Rust standard library, and various crates). Those components are made available under their respective licences and remain subject to those licences. Where required by an open-source licence, the licence text and attribution will be made available either in the Software or on request to [email protected].

Nothing in this Policy limits any rights you have under those open-source licences.

14. Termination

The licence in section 3 is in force from the moment you accept this Policy and continues until terminated.

14.1 You can end the licence at any time by uninstalling the Software from your Device.

14.2 We can end the licence immediately, on notice to you, if:

• you breach this Policy in any material way;
• we reasonably suspect you of cheating, attempting to bypass the Anti-Cheat, or otherwise abusing the Service;
• we cease to make the Software available, or we cease to operate the Service.

14.3 What termination means. When the licence ends you must stop using the Software, remove it from your Device, and destroy any copies of it. The provisions of sections 2, 4, 10, 11, 12, 15, 16, and 17 survive termination.

15. Changes to this Policy

We may change this Policy from time to time. When we do we will publish the updated Policy at https://roleplayproject.net/software-policy with a new "Effective from" date and version number. If the change is material, the Software will ask you to accept the updated Policy the next time you run it. If you do not accept, you must stop using the Software.

16. Governing law & jurisdiction

This Policy and any dispute or claim arising out of or in connection with it, or its subject matter or formation (including non-contractual disputes or claims), are governed by and construed in accordance with the laws of England and Wales. You and we both agree to the exclusive jurisdiction of the courts of England and Wales to settle any such dispute or claim, except that we may bring proceedings against you in the country in which you are resident in order to enforce our rights.

17. Contact

Questions about this Policy can be sent to:

• Email: [email protected]
• Post: Phytoventures Ltd, Belmont Suite, Chorley New Road, Horwich, Bolton, England, BL6 6HG

© Phytoventures Ltd · Company number 16388003 · Registered in England and Wales.