Privacy Policy

Summary

This store collects as little as it can. There are no analytics, no advertising and no third-party trackers on this site. It sets no cookies of its own. Payment details never reach it — those go straight to Tebex Limited, who process the payment.

Who is responsible

For the data described below, the controller is ddainusshaa, contactable at contact@ddainusshaa.dev.

Tebex Limited is a separate controller for the payment itself. See their privacy policy for how they handle it.

What is stored in your browser

Three things, all in your browser's local storage rather than in cookies, and none of them shared with anyone:

• Your basket identifier. A random Tebex-issued reference so your basket survives a page reload. It is not linked to you personally.
• Pending basket actions. If you add something to the basket before signing in, the intended action is held so it can be applied after you return.
• Your sign-in session. The Cfx.re account username and ID returned by Tebex after you authenticate, so the store can show who you are signed in as and grant your licence to the right account.

You can clear all three at any time by clearing site data for this domain in your browser. Doing so empties your basket and signs you out; it does not affect a purchase that has already been delivered.

What is sent to Tebex

The store is a custom front end for the Tebex Headless API. To create a basket and take a payment, the following is sent to Tebex:

• Your IP address, which Tebex requires when a basket is created, for fraud prevention and tax purposes.
• The packages in your basket and the quantities.
• Your Cfx.re account identity, so your licence can be granted to the right account. Authentication happens on Tebex's own domain — this site never sees the credentials you use, only the username and account ID Tebex returns afterwards.
• Your payment details, which you enter into Tebex's checkout. They are never transmitted to or stored by this site.

What the server records

This site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes request data — including IP addresses — in order to serve pages and protect against abuse. Basket creation requests are also rate-limited by IP address to stop automated abuse; those counters are held in memory only and are not written anywhere.

No account is created on this site, and no database of customers is kept here.

Why, and on what basis

• To perform the contract — creating your basket, taking payment and delivering what you bought.
• Legitimate interests — keeping the store working and preventing fraud and automated abuse.
• Legal obligation — Tebex retains transaction records for tax and accounting purposes.

No consent banner appears because nothing here requires consent: the browser storage listed above is strictly necessary for the store to function, and there is no tracking to consent to.

How long it is kept

• Browser storage: until you clear it, or the basket expires.
• Support conversations by email or Discord: until they are no longer needed.
• Transaction records: held by Tebex under their own retention schedule.

Your rights

You have the right to request access to the personal data held about you, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable form. You also have the right to complain to your national data protection authority.

To exercise any of these, email contact@ddainusshaa.dev. For data held by Tebex as merchant of record — including payment and transaction records — contact them directly, since I have no access to it.

Children

This store is not intended for children. Purchases require you to be 18 or older, or to have the permission of a parent or guardian. See the Terms of Service.

Changes

This policy may be updated. The current version is always the one on this page; it was last updated on 28 July 2026.

See also the Terms of Service and Refund Policy.