Privacy Policy
What we actually process, why, and for how long.
Payments
We process no payment data. Transactions are handled by Tebex Limited, our official reseller and merchant of record. Your card details are entered on Tebex's side, never pass through our servers, and we cannot access them.
Tebex sends us back what delivery and support need: the order identifier, the amount, the products bought, and the Cfx.re or Discord account identifier attached to the order.
Account and delivery
To unlock a resource on your account we use Discord or Cfx.re sign-in. From it we take your identifier and username — never your password, never your messages, never the list of your servers.
The contact form emails us your name, your e-mail address and your message. Those messages are not stored in a database; they live in our mailbox for as long as it takes to handle your request.
Audience measurement and advertising
Vercel Analytics and Speed Insights measure traffic and performance in aggregate, with no tracking cookie and no individual profiling.
View counters on articles and documentation: so the same person is not counted twice, we store a non-reversible fingerprint (truncated SHA-256) of your IP address and browser for 12 hours. The IP address itself is never kept.
Google Ads, only if you accept it in the cookie banner: if you arrive from one of our ads, the click identifier in the URL is kept in your browser and later attached to the order, so we know which ads produce sales, and the Google Ads tag sets its own cookies. We send Google the click identifier, the order number, the amount and the currency — never your name or e-mail address. Those rows are kept for 30 days, then deleted automatically.
Without your consent the Google tag is not loaded and nothing is kept or sent. You can change your mind at any time with the Cookie settings link in the footer; refusing deletes the advertising items already stored.
What is stored in your browser
Items marked "with your consent" are only set if you accept advertising in the cookie banner; the others are needed for the site to work. None leaves your device unless stated otherwise above.
| Key | Purpose |
|---|---|
| tebex_basket_ident_v3 | Find your basket again between visits |
| hz-scripts-cart | Basket contents |
| hz-locale | Chosen language (cookie) |
| hz_consent_v1 | Your cookie choice, asked again after 6 months |
| hz_attribution_v1 | Ad click identifier, 90 days at most (with your consent) |
| hz_conversions_fired_v1 | Avoid counting a purchase twice (with your consent) |
| _gcl_au | Cookie set by Google Ads, 90 days (with your consent) |
| hz_pending_checkout_ident | Find the order again after payment |
Processors
Vercel (hosting), Tebex Limited (payment and delivery), Upstash (counters, Redis database), Google (ad conversion measurement), Discord and Cfx.re (identification for delivery).
We sell no data, and pass it to nobody other than the providers above, for the sole purpose of running the shop.
Retention periods
View fingerprint: 12 hours. Ad attribution data: 30 days server-side, 90 days at most in your browser. Contact messages: for as long as the request takes. Order history: kept by Tebex under its own accounting obligations.
Your rights
You can request access to, correction or erasure of your data, or object to its processing. Write to us through the contact page or open a ticket on our Discord.
For data held by Tebex — invoicing, payment methods — the request goes to Tebex Limited, which is the data controller for it.
The terms of Tebex Limited, our payment partner, complement this page.