Privacy Policy

1. Who we are

The controller responsible for personal data processed through this website is:

• Operator: Vexel Scripts
• Contact: contact form

2. What data we collect

Purchases. Payments are handled by Tebex Limited, which acts as the reseller and merchant of record for every order. Your payment details are entered on Tebex's secure checkout and are never received or stored by us. Tebex shares with us the order information we need to deliver and support your purchase: your Cfx.re username, the email address you entered, the products bought, the amount paid, your country and the transaction ID.

Cfx.re login. To deliver scripts to your keymaster account, checkout requires you to sign in with Cfx.re. The login happens on Cfx.re's own pages; we only receive your Cfx.re username and account ID via Tebex.

Contact form. When you contact us we receive your name, email address, optional Discord username and your message.

Technical data. Like every website, our hosting provider processes your IP address, browser type and request logs to deliver pages and protect against abuse. Your IP address is also briefly kept in memory to rate-limit the contact form.

3. Why we use it (legal bases)

• Delivering your purchase and support – performance of a contract (GDPR Art. 6(1)(b)).
• Answering your messages – our legitimate interest in responding to enquiries, or steps prior to a contract (Art. 6(1)(f) / 6(1)(b)).
• Security, fraud and abuse prevention – legitimate interest (Art. 6(1)(f)).
• Tax and accounting records – legal obligation (Art. 6(1)(c)).

4. Cookies and local storage

We only use what is strictly necessary for the store to work, plus optional analytics if you agree:

• tebex.basket, tebex.pending-add (local storage) – remember your cart and finish adding a product after Cfx.re login. Essential.
• theme (local storage) – remembers dark/light mode. Essential.

The Tebex checkout and Cfx.re login pages are operated by those companies and set their own cookies under their own policies.

5. Who we share it with

We never sell your data. We use these service providers (processors or independent controllers):

• Tebex Limited – checkout, payments, tax handling (independent controller; Tebex's own privacy policy is linked on the checkout page).
• Cfx.re / Rockstar Games – account login and asset delivery via keymaster.
• Our hosting provider – serves the website and stores technical logs.
• Email / Discord – contact form messages are delivered to us by email (Resend) and/or a private Discord channel.

Some providers may process data outside the EEA. Where they do, transfers are protected by the EU Standard Contractual Clauses or an adequacy decision.

6. How long we keep it

• Order records: as long as required by tax and accounting law (typically up to 8 years).
• Contact messages: up to 2 years after the conversation ends, unless they relate to an order.
• Server logs: a short period set by the hosting provider (usually under 30 days).
• Local storage: until you clear your browser data.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time without affecting earlier processing. To exercise these rights, contact us using the details above — we'll reply within one month.

You also have the right to lodge a complaint with a data protection authority — in Hungary, the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH).

8. Children

The store is not directed at children under 16, and we do not knowingly collect their personal data.

9. Changes to this policy

We may update this policy when our services change. The “last updated” date at the top always shows the current version. See also our Terms of Service.