Legal

Privacy Policy

What we collect, why, and what you can do about it.

Last updated 1st May 2026·5 min read
01

Operator

Nexus Studio is an independent creator on the Tebex platform. Tebex Limited acts as Merchant of Record for every purchase you make through us. Privacy questions can be sent to support@nexusstudios.store.

02

Checkout & payments

Tebex Limited owns and operates checkout. They collect and process your payment details, billing data, taxes, and any chargeback flow. We never see your full card number. Their policy lives at Tebex Privacy Policy.

03

What we collect

From you, directly

  • Discord account info, if you log in with Discord (via OAuth) for support or admin access. We receive your Discord user ID, username, and avatar. We pass the ID to Tebex so your purchase can be linked to your account for support and role assignment. We do not store your Discord password, do not read your private messages, and do not access any servers you are in.
  • Cfx.re forum username, when you provide it during support so we can verify your Tebex license entitlement (licenses are tied to Cfx.re accounts).
  • Support communications,when you message us via email or Discord, we keep the thread for as long as it’s useful.

Automatically

  • Cookies and local storage, for your cart, currency preference, and core site behaviour.
  • Admin session cookies, a signed JWT for staff accessing the admin panel. Contains your Discord user ID and session identifier only.
  • Bot protection, if a service like Cloudflare Turnstile is used on a form, it processes minimal technical signals to verify you are human.
  • Rate limiting, short-lived hashed IP addresses to block automated abuse. Auto-deleted within hours.
04

Why we collect it

  • To run the site, the storefront, and your cart.
  • To pass your Discord ID to Tebex for purchase linking and role assignment.
  • To answer your support tickets.
  • To prevent fraud and platform abuse.
05

Legal basis

Where applicable data-protection law requires a basis, we rely on the following:

  • Consent: for any optional marketing communications. Withdrawable at any time.
  • Legitimate interests: for analytics, security, and improving the Services, where these interests do not override your rights.
  • Contract: to provide ongoing support for products you have purchased.
06

Vendors

The third-party services that may process your data:

  • Tebex Limited: checkout, payment processing, and Merchant of Record. Privacy Policy
  • Discord: authentication (OAuth) and support channel. Privacy Policy
  • Netlify: website hosting and edge delivery. Privacy Policy
  • MongoDB Atlas: database hosting for site configuration data. Privacy Policy
  • Cfx.re (FiveM): license verification — Tebex licenses are tied to Cfx.re accounts. Terms
  • Cloudflare: security and bot protection. Privacy Policy
07

Cookies

Two flavours:

  • Essential: cart, currency preference, session.
  • Security: bot and abuse protection.

Both can be disabled through your browser. Some site features will break if you do.

08

Retention

  • Discord linking: held by Tebex according to their retention policy.
  • Rate-limit hashes: auto-purge in minutes.
  • Support threads: kept for as long as the support relationship needs them.
09

Your rights

Depending on where you live, you may have any of the following rights:

  • Access: get a copy of what we hold.
  • Rectification: fix anything inaccurate.
  • Erasure: ask us to delete it.
  • Restriction: limit how we use it.
  • Portability: receive it in a machine-readable format.
  • Objection: opt out of legitimate-interest processing.
  • Withdraw consent: at any time, for anything we collect on consent.

Email support@nexusstudios.store to exercise any of these.

10

International transfers

Some of our vendors are based outside your country. Where data crosses borders, we rely on adequacy decisions or standard contractual clauses where applicable.

11

Children

The site is not intended for anyone under 16 and we do not knowingly collect data from children. If you believe we have, email us and we’ll delete it.

12

Security

Encryption in transit (HTTPS), access controls, and reasonable technical measures. No transmission over the internet is 100% secure, but we treat your data as if it were our own.

13

Changes

We update this when our practices change. The ‘Last updated’ date in the header is the source of truth. Continued use after we update means you accept the new version.

14

Contact

Nexus Studio
Email: support@nexusstudios.store