HomeLegal
Terms of Service
The rules that govern the Clubhouse AC website, dashboard, scanner application and related tools. Read them before using the Service.
- Last updated
- October 24, 2026
- sections
- 14
Includes the Acceptable Use Policy
On this page
- 01Acceptance of Terms
- 02Age and Eligibility
- 03Description of Service
- 04Acceptable Use Policy
- 05Subscriptions and Payments
- 06Data Collection and Privacy
- 07GDPR and Legal Compliance
- 08Scanner Technology and Kernel Access
- 09Account Termination
- 10Enforcement
- 11Disclaimer of Warranties
- 12Limitation of Liability
- 13Changes to Terms
- 14Contact
- 15Technology Disclosure
Acceptance of Terms
By accessing or using Clubhouse AC ("the Service"), including the website, dashboard, scanner application and related tools, you agree to be bound by these Terms of Service. If you do not agree to these terms, do not use the Service.
Age and Eligibility
Clubhouse AC is not offered to children. To create an account, purchase a subscription or otherwise use the Service you must be at least 16 years of age, or the higher digital-age-of-consent set by the law of your country of residence (for example: 15 in Czechia, Denmark, France and Slovenia; 14 in Austria, Bulgaria, Cyprus, Italy, Lithuania and Spain; 13 in Belgium, Estonia, Finland, Ireland, Latvia, Malta, Poland, Portugal, Sweden and the United Kingdom). Where you are between the digital age of consent and the age of majority in your jurisdiction, you further confirm that a parent or legal guardian has reviewed and consented to these Terms on your behalf.
By clicking "Create account" or otherwise submitting the sign-up form, you represent and warrant that you meet the age threshold above, that all information you provide is truthful and that you have the legal capacity to enter into a binding agreement in your jurisdiction. Providing false age information to gain access to the Service is a material breach of these Terms and grounds for immediate termination of your account under Section 09 (Account Termination).
Notice to server administrators.
If you issue a PIN to a player who is a minor under the law of the country they reside in, you (as the data controller for that scan) are responsible for obtaining any parental or guardian consent your local law requires before the scan is run. Clubhouse AC will honour verified parental or guardian requests to erase a minor's scan report under Article 8 GDPR, Article 17 GDPR ("right to be forgotten"), and equivalent protections under CCPA/CPRA and other applicable law.
Reports of underage users.
If you believe that a user of Clubhouse AC is under the applicable age threshold, or that a minor's personal data has been submitted to the Service without appropriate consent, contact us through the channels in the "Contact" section below so we can remove the account and any related personal data without undue delay.
Description of Service
Clubhouse AC provides anti-cheat scanning and forensic analysis tools for FiveM server administrators. The Service includes a desktop scanner application, a web dashboard, PIN-based scan management and related APIs.
Acceptable Use Policy
You agree to the following rules when using Clubhouse AC:
No Self-Scanning.
You may not scan your own computer to test, preview or circumvent detections. The scanner is intended solely for server administrators to verify the integrity of other players' systems. Self-scanning to learn what is detected and then evade those detections is strictly prohibited.
No Scanning Friends or Associates.
You may not use the scanner on friends, associates or anyone you have a personal relationship with for the purpose of helping them identify and evade detections. Scanning your friend will result in an immediate ban.
No Reverse Engineering.
You may not decompile, disassemble, reverse engineer or otherwise attempt to derive the source code, algorithms or detection signatures of the scanner application or any component of the Service.
No Tampering.
You may not modify, patch, hook, inject into or otherwise tamper with the scanner application or its communications with the server.
No Sharing or Redistribution.
You may not share, redistribute, resell or make the scanner application available to unauthorized parties. Your subscription and PINs are for your server's use only.
No Evasion Assistance.
You may not use information obtained from the Service to help others avoid or circumvent anti-cheat detections.
No Abuse of PINs.
PINs must only be issued to players who are being scanned as part of a legitimate server verification process. PINs may not be used for harassment, coercion or any purpose other than their intended use.
No Automated Access.
You may not use bots, scripts or automated tools to interact with the Service except through officially provided APIs.
Subscriptions and Payments
Access to the Service requires an active subscription. Subscriptions are billed according to the plan selected at checkout. Slot availability is limited and subject to change. Refunds are handled on a case-by-case basis at our discretion.
By purchasing, you agree that delivery of your product may take up to one week due to order volume and fulfillment queue times.
Data Collection and Privacy
The scanner performs a one-time forensic snapshot of the machine on which it is run. Each scan begins only after a player voluntarily redeems a PIN that the server administrator has issued to them, which constitutes the player's informed consent to the collection described below.
System forensic data.
The scanner collects information that anti-cheat investigators rely on to identify the presence of cheat software, including: operating system details, hardware identifiers (used for ban enforcement and scan attribution), running processes, loaded modules, installed programs, recently executed binaries, file system metadata, registry artifacts, event log excerpts, network adapter information, IP addresses and active/recent network connections, DNS cache entries, and similar forensic signals.
Browser forensic records.
During a scan, supported local browser profiles may be read for browser history, download records and cache metadata. Collected fields include URLs, page titles, visit and download times, download destinations and profile and source paths. These records can include unrelated browsing activity and personal or sensitive information. The browser collector does not open saved-password or cookie databases. Review this scope before agreeing to start a scan and decline the scan if you do not accept it. Opening-photo permission is separate and does not itself start this browser collection.
IP addresses.
In addition to the network data collected by the scanner during a scan, Clubhouse AC logs the IP address of any device that accesses the website, dashboard or APIs (including scan submissions). IP addresses are used for security purposes such as rate limiting, abuse prevention, fraud detection and troubleshooting. They may also be included in a scan report as part of the forensic record.
Visual forensic evidence.
The scanner captures screenshots of the player's display(s) at the moment of the scan. These images are used by server administrators as part of their review to corroborate findings (for example, to verify that a flagged process matches an on-screen overlay) and serve as an audit trail of the scan environment. Screenshots are stored alongside the scan report under the same access controls as the rest of the report.
Transport and storage.
Collected data is transmitted to Clubhouse AC over encrypted connections. Scan reports use a scan session; opening screenshots use a separate permission tied to the consented download. Access to a given scan report is restricted to the administrator who issued the PIN, that administrator's authorized staff and Clubhouse AC personnel responsible for operating the platform. Reports are not made public.
Notice to scanned users.
Server administrators are responsible for informing players, in advance of issuing a PIN, that running the scanner will collect the categories of data described in this section, including screenshots. Players who do not wish to be scanned should decline the PIN. Redeeming a PIN and completing a scan constitutes acceptance of this collection.
Scanner lifecycle telemetry.
The player's download page asks for explicit permission to capture and send a screenshot of all displays each time that downloaded EXE opens, before PIN entry or scanning and without another screenshot-consent popup. Screenshots may show private information in other applications. Permission applies to that download while its PIN and recorded permission remain valid. Download the EXE only for your own use; share the download-page link with other players so they can make their own choice. You may decline by leaving the checkbox unchecked. To stop future opening photos, stop opening and delete that copy.
Opening notifications.
A consented opening sends the screenshot, protocol version, reported hardware identifier and reported Discord identity. The server also observes the connection's IP address and links the notification to the intended player on the PIN. The notification and screenshot are forwarded to authorized reviewers in configured Discord channels, where Discord processes and stores a copy. A download-linked notification does not verify the identity of the person opening the file. The protected-account exclusion remains in force. Older copies may instead send metadata only or wait for in-app consent and PIN validation. A lifecycle event or client-reported tamper alarm does not, by itself, prove cheating or reverse engineering.
Tamper-alarm telemetry.
Independently of the PIN-based scan flow, the scanner checks for signs of attempts to reverse-engineer, patch, unpack, hook, debug or otherwise tamper with it. When a security check raises an alarm, and only then, the scanner transmits a bounded environment snapshot to Clubhouse AC for abuse investigation. The snapshot contains: the scanner's own file path, hash and signature status; the operating-system build; the machine name; a partial username (usually masked to first character, underscore count and length, unmasked only for well-known analysis-sandbox accounts such as IEUser, WDAGUtilityAccount or vagrant); the chain of parent processes that launched the scanner; the command-line the scanner was started with (secrets in key=value form redacted before transmission); the elevation and integrity level of the scanner's own token; whether the operating system is in Test Mode; a shortlist of loaded modules and running processes matched against a known reverse-engineering-tool set; and debugger-presence flags. It does not contain the full running-process list, the loaded-module list of unrelated programs, file contents, browser history, RAM contents, screenshots of user activity, credentials, personal files or anything about other applications the user has installed. Collection is one-shot per tamper event, bounded to under 80 ms of the scanner's own wall time, capped at approximately 8 KB per event, and does not occur during any normal scan or on any machine where no alarm has been raised. This telemetry exists to identify the party attempting to circumvent the anti-cheat and to correlate repeated attempts across time; it is retained for 180 days and then automatically deleted. See the Privacy Policy for the corresponding lawful basis, recipients and data-subject rights.
GDPR and Legal Compliance
Clubhouse AC operates strictly within the law and complies with the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR"), the UK GDPR, the California Consumer Privacy Act (CCPA/CPRA) and every other applicable data-protection framework in the jurisdictions where our users and their players reside. Nothing this Service does is intended to, or does, break the law of the countries it operates in or the countries of the individuals it processes data about.
Roles under GDPR.
When Clubhouse AC processes personal data on behalf of a server administrator (for example, the forensic snapshot a scanned player produces when they redeem a PIN issued by that administrator), the administrator is the data controller and Clubhouse AC is the processor. When Clubhouse AC processes personal data for its own purposes (billing, account management, abuse prevention, aggregate detection telemetry), Clubhouse AC is the controller for that processing.
Lawful bases.
We rely on the following Article 6 lawful bases: (a) consent: a player voluntarily redeems a PIN after being informed of what the scan collects, which is their explicit, revocable consent to that collection; (b) contract: processing necessary to provide the Service to a paying subscriber; (c) legitimate interests: pursued by server administrators (protecting the integrity of their servers and their community) and by Clubhouse AC (operating, securing and improving the Service, preventing fraud and abuse), balanced against the rights and freedoms of the individuals concerned.
Your rights.
Individuals whose personal data we process may exercise their rights under applicable data-protection law, including: the right of access to a copy of your personal data, the right to rectification of inaccurate data, the right to erasure ("right to be forgotten"), the right to restriction of processing, the right to data portability, the right to object to processing based on legitimate interests and the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. You also have the right to lodge a complaint with your local supervisory authority. To exercise any of these rights, contact us through the channels in the "Contact" section below. We respond to verified requests without undue delay and within one month, extendable by two further months where necessary given the complexity and number of requests.
Retention.
Scan reports and their associated forensic artifacts (including screenshots and RAM-dump analysis output) are retained only for as long as necessary to serve the purpose they were collected for (server administrators' investigation and audit needs, and Clubhouse AC's operational and security needs), after which they are deleted or irreversibly anonymised. Account records and billing history are retained for the periods required by applicable tax, accounting and anti-fraud law. IP-address and abuse-prevention logs are retained on a rolling short-term window sufficient for rate-limiting and incident response, then discarded.
International transfers.
Some of our infrastructure providers process data in jurisdictions outside the EEA / UK. Where personal data is transferred to such a jurisdiction, we rely on adequate safeguards recognised under Articles 44-49 GDPR, including Standard Contractual Clauses and the EU-US Data Privacy Framework where applicable.
Security.
Personal data is transmitted over TLS, stored on infrastructure with access controls and audit logging, and accessible only by the server administrator who owns the report, that administrator's authorised staff and Clubhouse AC personnel whose role requires it. We notify affected controllers of any personal-data breach without undue delay in accordance with Article 33 GDPR.
No unlawful activity.
Clubhouse AC does not use, sell or share personal data for any purpose that is illegal under the laws applicable to us or to the individuals whose data we process. We do not perform surveillance of individuals outside the scope of a scan they consented to by redeeming a PIN, we do not exfiltrate credentials or personal files, and full forensic collection requires the scanner notice acknowledgement and an active PIN session. Basic lifecycle and security telemetry follow the separate disclosures above. If you believe any aspect of our processing is not compliant with applicable law, contact us so we can investigate and correct it.
Scanner Technology and Kernel Access
The scanner may use kernel access to inspect memory, processes, drivers and other operating-system structures that user-mode APIs cannot fully expose. This access supports defensive anti-cheat investigation. Kernel access does not guarantee that a report is complete or that a detection is correct.
Driver loading and Windows security changes.
The current scanner can use a third-party signed driver with known vulnerable capabilities, a technique called bring your own vulnerable driver (BYOVD). A signature on that transport driver does not make its capabilities safe or mean that Clubhouse AC's custom driver is Microsoft-approved. On compatible systems, the loader may temporarily change Windows driver-signature enforcement state to load an unsigned Clubhouse AC inspection driver. The scanner also has a path that uses a signed third-party forensic memory-capture tool. These are different acquisition paths, and the signed capture path does not replace every use of BYOVD in the current scanner.
Inspection and scanner self-protection.
Evidence collection includes memory reads and inspection of kernel structures. The loading workflow can make the temporary driver-signature enforcement changes described above. Drivers and temporary service registrations may remain active for the relevant scan work rather than only a brief RAM-capture window. The intended purpose is evidence collection and scanner self-protection, not changing the player's files or gameplay.
Precautions and their limits.
The implementation includes kernel-policy checks, buffer-length validation and bounded reads in several handlers, exception handling around many memory accesses, restoration attempts for driver-signature enforcement, and cleanup attempts for temporary drivers, services and files. The inspection device restricts access to LocalSystem and elevated administrators. These measures reduce some risks but do not establish that the driver is free of vulnerabilities. Restoration and cleanup can fail, particularly if the scanner crashes, is forcibly terminated or the system loses power. Successful cleanup after normal operation is not a guarantee of cleanup after every failure.
Compatibility.
The loader checks for security policies that would block the BYOVD or unsigned-driver path and is designed to skip that path when those checks detect a restriction. Another acquisition path may be attempted where permitted, or the scan may continue with reduced coverage. This policy check is distinct from the temporary driver-signature enforcement change described above. Unavailable kernel evidence limits coverage and is not, by itself, proof of cheating.
Setup guidance and security settings.
Clubhouse AC's current setup guidance asks users to turn off Microsoft Defender real-time protection and Smart App Control before running the scanner. Turning these off reduces protection against malware and untrusted apps across the PC, not just for the scanner. This guidance does not ask users to turn off Secure Boot, Memory Integrity or the vulnerable-driver blocklist. These manually changed settings are separate from the loader's temporary driver-signature enforcement changes. Do not rely on scanner cleanup to restore settings you change manually. After scanning, turn real-time protection back on and verify it is enabled. Restoring Smart App Control depends on the Windows version, updates and device configuration. Read Microsoft's Smart App Control guidance before changing it. Users may decline the scan if they do not accept the security changes or restoration limits.
Risks and memory contents.
Kernel operations can cause system instability, freezes, crashes or a blue screen, interruption of other applications, loss of unsaved work, and security exposure while vulnerable capabilities or temporary security changes are active. Security software may block or flag the scanner or its drivers. Memory captures can incidentally contain personal or sensitive information from other applications. The anti-cheat purpose does not remove these risks. Save your work before starting and do not run the scanner on a machine where interruption would be unacceptable.
Notice and choice before scanning.
Server administrators must provide this kernel-access notice and the data-collection notice before asking a player to run the scanner. Players may decline to run it if they do not accept these operations or risks. A completed scan is not a substitute for advance disclosure or consent. Disabling an optional RAM dump does not necessarily disable other kernel inspection or scanner self-protection. These Terms do not waive rights that applicable law makes non-waivable.
Account Termination
We reserve the right to suspend or terminate your account and access to the Service at any time, with or without notice, for any reason, including but not limited to violation of these Terms. Upon termination, your right to use the Service ceases immediately. No refunds will be issued for terminations due to Terms violations.
Enforcement
Violations of these Terms, particularly the Acceptable Use Policy, may result in immediate account suspension, permanent ban and forfeiture of any remaining subscription time. We employ technical measures to detect violations including but not limited to self-scanning detection, anomaly analysis and behavioral monitoring.
Disclaimer of Warranties
The Service is provided "as is" and "as available" without warranties of any kind, either express or implied. We do not guarantee that the Service will be uninterrupted, error-free or that detections will be 100% accurate. False positives and false negatives may occur.
Limitation of Liability
To the maximum extent permitted by law, Clubhouse AC and its operators shall not be liable for any indirect, incidental, special, consequential or punitive damages arising from your use of the Service.
Changes to Terms
We may update these Terms at any time. Continued use of the Service after changes constitutes acceptance of the revised Terms. Material changes will be communicated via the dashboard or email where possible.
Contact
For questions about these Terms, contact us through our Discord server or via the dashboard.
Technology Disclosure
Portions of this platform were developed with AI-assisted tooling. All code, detections and security measures are architected, reviewed and maintained by the Clubhouse AC team.
Ready to continue?
Head back to the site or grab the scanner once you have a PIN from your server administrator.