Privacy notice

This notice describes the personal information Tebex Studio FiveM handles when you browse the store, buy a resource, publish a review or write to support: what it is, what it is used for and how long it is kept.

Anything unclear can be asked through the contact form.

Who is responsible

Tebex Studio FiveM is an online store for FiveM resources built by partner studios. Here, “we”, “us” and “our” mean Tebex Studio FiveM, and “you” means anyone who visits it or buys from it.

What is collected

The aim is to hold no more than it takes to deliver an order and keep the store running.

What you give us

• Your name and email address, entered at checkout, so that the download links and the receipt can be sent to you.
• A postal code, which the payment provider asks for to verify the card address and for tax purposes.
• What you write to support, together with the email address you send it from. A contact message is emailed to the support inbox and is not saved in the store’s database.
• A review: the name you choose to show and the text you publish.

What is recorded as you use the store

• Your IP address and the rough location it implies, written to server logs and used to prevent fraud, block abuse and count requests and errors.
• Your browser’s user-agent, on the same log line.
• Order details: the order number, the resources in it, the total and currency, and when each change of status happened.
• Where an order came from: the page you arrived on, the site that sent you and any campaign tags in that link. This is held in your browser tab and reaches us only with an order attempt.
• Signals from Cloudflare Turnstile when a form is sent, used to keep automated abuse out.

Card details

Card numbers, security codes, expiry dates and 3-D Secure data are typed into a form hosted by our payment provider. They never pass through Tebex Studio FiveM’s servers and are never stored by us. What comes back to us is a transaction reference that reveals nothing sensitive, and whether the payment succeeded.

Why

• To fulfil your order: creating its download link and sending that to you by email.
• To answer what you send through the contact form.
• To prevent fraud and limit abuse.
• To keep the tax, accounting and other records the law requires.
• To send the occasional note about new releases and updates to the email address used at checkout, including when an order was not paid for. Every such email has a way to unsubscribe, and you can also ask us to stop.
• To improve the store: fixing errors, making pages faster and deciding what to work on next.

Your personal data is never sold, and it is not used for advertising that follows you to other sites.

Browser storage

The store keeps only what it needs to work:

• A cart cookie that the browser cannot read, which ties your basket, kept on our server, to your visit for up to 30 days.
• A session cookie, set only when an administrator signs in. Shoppers never get one.
• Tab storage for where an order came from, described above. It lasts 30 minutes and ends with the tab.
• Cloudflare Turnstile cookies, short-lived, set on form pages to check that a person is sending.
• Cloudflare’s __cf_bm cookie, set automatically as part of its protection of the site.

No marketing cookies and no third-party analytics cookies are used.

Service providers

Each of these receives only what its part in running the store requires:

• Our payment provider, which processes payments and handles your card details directly, under its own privacy policy.
• Cloudflare, for DNS, content delivery, protection against attacks, and Turnstile.
• An email delivery provider, which sends order emails and support replies.
• A hosting provider, whose servers run the store and hold its database.

How long it is kept

• Order records: for as long as tax and accounting law requires, typically seven years.
• Contact messages: in the support inbox only, for at most two years from the final reply, then deleted. The store’s database holds no copy.
• Server logs: rotated, and deleted once they are 30 days old.
• Reviews: for as long as the resource is listed, or until you ask for yours to be removed.

Your requests

You can ask us to:

• tell you which of your personal data we hold;
• put right anything in it that is wrong;
• delete it, apart from records the law obliges us to keep, which are mainly order records kept for tax; or
• give you a copy of what you provided to us.

Make the request through the contact form, from the email address the data is held under. We aim to reply within 30 days.

Transfers between countries

The store’s infrastructure and service providers operate in more than one country. Where personal data moves out of the country it came from, the safeguard relied on is each provider’s standard contractual clauses or an equivalent mechanism.

Children

The store is not aimed at anyone under 16 and does not knowingly gather personal data from children of that age. If you think a child has sent us information, tell us and it will be deleted.

Revisions

When this notice changes materially, the date at the top of the page changes with it. A change of substance will also be emailed to the existing customers it affects.

Questions

For a question about this notice or about your data, use the contact form.