Privacy Policy - RexShack

1. Introduction

This Privacy Policy explains how RexShack ("we", "us", "our") collects, uses, and protects your personal information when you visit https://www.rexshack.dev and purchase our digital RedM Products. By using the Site, you agree to the practices described here.

2. Information We Collect

We only collect the data needed to operate the store and deliver your Products:

Account details: your display name, bio, avatar, and email address, and, when you sign in with Discord, your Discord ID and username.
Purchase information: the Products you buy, order/transaction IDs, amounts, currency, and status (payment is processed by Tebex, so we do not store your full card details).
Reviews: ratings and comments you choose to submit on Product pages.
Session data: authentication cookies used to keep you signed in, and your shopping cart, stored in your browser.

3. How We Use Your Information

To process your orders and deliver the Products you purchase.
To provide customer support and respond to your requests.
To display your reviews and profile information where you've chosen to share them.
To prevent fraud and unauthorized use of our Products.
To improve and maintain the Site.

4. Legal Bases (UK/EU GDPR)

Where UK or EU GDPR applies, we process your data based on: performance of a contract (to deliver your purchase), our legitimate interests (fraud prevention, security, and improving our services), compliance with legal obligations (such as tax and accounting), and your consent where required.

5. Payment Processing

Payments are handled by Tebex. When you pay, your payment details are submitted directly to Tebex, who is responsible for securely processing them under its own privacy policy. We receive only the information necessary to confirm and fulfill your order.

6. Third-Party Services & Sharing

We do not sell your personal data. We share data only with the service providers that help us operate the store, including:

Tebex: payment processing and order fulfillment.
Discord: authentication and support.
Cfx.re / RedM platform: product delivery via Keymaster.
Supabase and Vercel: hosting and to run the Site and store account/order data.

We may also disclose information where required by law or to protect our rights, users, and services.

7. Cookies & Local Storage

We use browser cookies and local storage that are essential for the Site to function — for example, to keep you signed in and to remember your cart. We do not use third-party advertising or tracking cookies.

8. Data Retention

We keep your account and order information for as long as necessary to provide our services, support your licenses, and comply with legal, tax, and accounting obligations. When data is no longer needed, we delete or anonymize it.

9. Your Rights

Depending on your location, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. You can update or delete most of your account information yourself from your account settings, or contact us for anything else. You also have the right to lodge a complaint with your local data protection authority.

10. Data Security

We use reasonable technical and organizational measures to protect your data. However, no method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.

11. Children's Privacy

Our Site and Products are not directed to individuals under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. International Transfers

Your data may be processed in countries other than your own, including by our service providers. Where required, we take steps to ensure appropriate safeguards are in place for such transfers.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page with an updated "Last updated" date.

14. Contact

For any privacy questions or requests, contact us through our Discord server.