Privacy policy

This site sets no advertising cookie, uses no third-party tracker and resells no data. The only information processed is what the store strictly needs to work.

No consent banner is shown, because no analytics or tracking subject to consent is in use. The only cookies are the ones that hold your cart.

Depending on how you use the site, the following data may be processed:

• Browsing — IP address and technical headers, in server logs, for security and abuse rate-limiting.
• Cart — a cart identifier issued by Tebex, stored in a cookie that scripts on the page cannot read, plus an item count used to display the header badge. Both expire after seven days.
• Purchase — billing identity, email address and payment method, collected and processed exclusively by Tebex Limited. We never receive or store any banking data.
• Support — the Discord account and the messages you send us when you open a ticket, kept as the written record of the exchange.

• Running the store and delivering what you bought — performance of the contract.
• Security, fraud prevention and licence enforcement — legitimate interest.
• Handling support requests and keeping evidence in case of a dispute — legitimate interest.
• Accounting and tax obligations tied to sales — legal obligation.

• Site technical logs: 12 months at most.
• Cart cookies: 7 days, or until the cart is emptied.
• Support tickets: 24 months after the last message.
• Transaction records: 10 years, as required by accounting obligations.

Data is only passed to the providers the service cannot run without: the site host, Tebex for payments and delivery, and Discord for support. Each of them acts under its own privacy policy.

No data is sold, rented or shared for commercial purposes.

Under the GDPR you have the right to access, rectify, erase, restrict, object to and port your data.

To exercise those rights, open a ticket on the official Discord. We answer within 30 days. If the disagreement persists, you may refer the matter to your national data protection authority — the CNIL in France.

Note: erasing the data attached to an order does not cancel the licence, and does not remove the transaction records we are legally required to keep.

The site is served over HTTPS only, with a strict content security policy and hardened response headers. API keys and service credentials live server-side and are never sent to the browser. Administration access is restricted and logged.