Our Privacy Policy
Short, because there is very little to say. This covers what this website keeps. What happens to your payment is Tebex's, and their notice covers it.
Tebex holds the purchase, not this site
Tebex is the Merchant of Record for this store. The checkout runs in their frame, on their servers, and your card details, billing address and email address go to them — never through here. This site never sees them, never receives them, and has nowhere to put them.
What this site keeps
Two things, and neither of them names you.
A counter, against a hashed address
Endpoints that would be expensive to spam — applying a coupon, creating a basket — are rate limited. The counter is stored against a hash of your IP address rather than the address itself, it holds nothing but a number, and it expires within the hour.
Reviews you posted in Discord
A review on this site is a message you wrote in a public channel of the Discord server, shown with the display name and avatar you chose there. Nothing is collected that you did not publish, and deleting the message in Discord removes it from the site.
What stays on your device
Your theme, your display currency, the basket you have open and — while the Config Editor has a file in it — that file and your edits to it are kept in your browser's own storage, on your device. Those are not cookies and are not sent to us: the config is never uploaded anywhere and is dropped after a day, and the basket identifier goes to Tebex, because that is who the basket belongs to. Clearing your site data removes all of it.
The language cookie
Every visit sets a cookie named NEXT_LOCALE, which holds the two letters of the language you are being served and nothing else. It lasts 365 days and is sent with each page request, because that is how the server knows to answer in the language you chose rather than your browser's. Choosing a language is what changes it, and from then on your choice wins over what your browser asks for. It carries no identifier, it cannot be used to recognise you, and clearing your site data removes it.
The Discord cookie, if you link one
Linking a Discord account before checkout sets a cookie named AlphaScripts.Discord. It holds the Discord user number and the tag Tebex handed back with it, and nothing else — no password, no email address. It lasts 30 days and is used for exactly two things: asking Discord whether that account is in the server, and drawing that step with a name on it. The name you see there is read from Discord at that moment and never stored here, which is why it is your display name rather than the tag in the cookie. Nothing about this goes back to Tebex, none of it is used to recognise you anywhere else, and until you link an account the cookie does not exist. "This isn't me" in that same panel deletes it immediately. While you are away at Discord a second cookie named AlphaScripts.DiscordReturn holds the page you left, for 15 minutes, and is deleted the moment you come back. Clearing your site data removes both.
One cookie that is not ours
Where a buyer's picture appears — the recent purchases on the home page — it is loaded from the Cfx.re forum, because that is where the account it belongs to lives. Their server answers that request by setting a cookie of its own, on their domain, and there is no way to show the picture without it. It is theirs rather than ours: nothing here reads it and nothing here can, and blocking third-party cookies in your browser removes it at the cost of the picture and nothing else.
The purchases on the home page are Tebex's
The row of recent purchases is published by Tebex and read from their API when the page is built. Nothing about it is stored here — not the name, not the picture, not the date — so a purchase leaves this site the moment it leaves theirs, including when it is refunded. The only figure kept anywhere is a count of how many sales there have been, which is one number and belongs to no one.
Counting visits
Page views are counted with Vercel Web Analytics, which is cookieless and stores nothing on your device. It records which page was opened and coarse details of the request — country, browser, operating system, and which site linked here — and reports them only as totals. There is no identifier that follows you between pages, no profile, and nothing that can be traced back to one person. Purchases are counted as a plain tally of three steps, without a name, a basket or a price attached to any of them.
What this site does not do
There is no advertising, no advertising network, no cross-site tracking, no profiling and no sale of anything to anybody. Nothing here is used to decide what you are shown or what you are charged. The cookies described above are the only ones this site sets.
Removing something
Delete your message in Discord and the review goes with it. A purchase on the home page is Tebex's and goes when they remove it. For anything else, ask in Discord and it is dealt with by hand, because at this size that is faster than a form.