Privacy Policy

This Privacy Policy explains what data SX Development (the "Store") collects, what our infrastructure providers collect on our behalf, and how that data is used. We collect the minimum we need to run the Store. Most of the data involved in an actual purchase is handled by our payment provider, Tebex, not by us directly.

1. Data we collect directly

The Store itself sets one piece of data on your device: a basket cookie.

• Basket cookie (basket_ident) links your browser to your basket on Tebex, so it stays there as you browse. It doesn't contain your name, email, or payment details, just a reference number. It expires automatically after 30 days.
• Theme, currency, and language preferences are stored in your browser's local storage, not sent to us or anyone else. These stay on your device.

2. Data collected during checkout & sign-in

Checkout and sign-in both happen on Tebex's own domain, not ours. When you check out, Tebex collects and processes information such as your name, email address, billing details, and payment information in order to process your order; that information goes directly to Tebex and never passes through our servers. When you sign in, Tebex handles the authentication (for example via your CFX/FiveM forum account) and only passes your username back to us. We never see or store a password. For details on what Tebex itself collects, see Tebex's Privacy Policy.

3. Data collected by our infrastructure (Cloudflare)

The Store is served through Cloudflare, which acts as our CDN and security layer for every visitor, regardless of whether you make a purchase. As part of that, Cloudflare processes your IP address and general request/traffic metadata, and may set a small number of security-related cookies (for example for bot and abuse protection). We can see aggregated, non-identifying analytics through our Cloudflare dashboard, things like approximate visitor country, browser, and traffic volume, but not information that identifies you personally. See Cloudflare's Privacy Policy for details on what they collect and how long it's retained.

4. Embedded YouTube videos

Some product pages let you play a trailer hosted on YouTube using YouTube's Privacy Enhanced Mode (youtube-nocookie.com). The YouTube player is not loaded until you click Play and then confirm you want to load it in the consent prompt that appears; your choice is remembered in your browser's local storage so you're not asked again. Once confirmed, your browser connects to YouTube to load the embedded player and video. YouTube may receive information such as your IP address and browser/device information and may use cookies or similar technologies. For more information, see Google's Privacy Policy for details on what they collect and how it's used.

5. How we use data

We use the data described above to:

• keep your basket and checkout working across page loads;
• fulfil orders and provide support related to a purchase;
• detect and prevent fraud, abuse, and security threats; and
• understand aggregate traffic to the Store (for example which pages are popular) so we can improve it.

We do not sell your personal data, and we do not run ad-tracking on the Store.

6. Who we share data with

We don't handle your payment details ourselves, so there's nothing for us to share there; Tebex collects that directly from you at checkout, as described above. What we do share is your basket contents with Tebex so it can process your order, and general hosting/traffic data with Cloudflare as our infrastructure provider. If you contact support, that conversation happens on Discord, subject to Discord's own Privacy Policy. We don't share your data with anyone else beyond what's needed to run the Store.

7. Data retention

The basket cookie expires automatically after 30 days. Order and payment records are retained by Tebex per their own policies, including as required for tax, accounting, and fraud-prevention purposes. We don't keep a separate copy of your checkout data ourselves.

8. Your rights

Depending on where you live, you may have the right to access the data we hold about you, correct it, have it deleted, object to or restrict certain processing, receive a copy of it in a portable format, or withdraw consent where processing relies on it. For the small amount of data we hold ourselves (mainly the basket cookie and any support conversations), reach out to us via Discord and we'll action your request. Since most personal data related to a purchase (name, email, billing details, payment history) is held by Tebex rather than us, requests about that data are usually best directed to Tebex directly.

9. Data security

We hold very little data ourselves, and what we do hold (the basket cookie) is not readable by scripts on the page and is only ever sent to our own server. We don't maintain a separate database of customer information. For everything handled by Tebex or Cloudflare, security is governed by their own policies, linked above.

10. Children's privacy

The Store is not directed at children. Our payment provider, Tebex, requires customers to be at least 16 years old to purchase, and we do not knowingly collect personal data from anyone younger than that.

11. International data transfers

Tebex and Cloudflare operate global infrastructure, so your data may be processed in countries other than your own as part of normal operation of their services.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

13. Contact

Questions about this policy can be sent to us via Discord.