This policy explains how LegendScripts handles personal data on legendscripts.xyz, store.legendscripts.xyz, docs.legendscripts.xyz and our support channels. It is written to meet the Israeli Protection of Privacy Law (including Amendment 13) and, for visitors in the EU/UK, the GDPR.
1. Who is responsible
The controller (database owner) is TODO: full legal name of the store owner or company, TODO: business address, Israel. Privacy questions and requests: privacy@legendscripts.xyz.
2. What we collect and why
| Data | When | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Technical data: IP address, browser type, pages requested, time | Every visit (server logs) | Security, preventing abuse, fixing errors | Legitimate interests |
| Cart and sign-in session (a random session ID, your cart and your Cfx.re username) | When you use the store | Running your cart, sign-in and checkout | Contract |
| Purchase records sent by Tebex: transaction ID, products, price, Cfx.re username, email, country | When you buy | Delivering, supporting and showing your purchases; accounting; fraud prevention | Contract, legal obligation |
| Discord ID, display name and avatar | When you sign in with Discord to post a review | Showing your review and preventing fake or duplicate reviews | Consent / legitimate interests |
| Tebex transaction ID (optional) | When you add it to your review | Showing a "Verified buyer" badge. It is never displayed publicly | Consent |
| Messages you send us (Discord tickets, email) | When you contact us | Answering you | Contract / legitimate interests |
We do not use advertising or tracking cookies, we do not build marketing profiles and we do not sell personal data. Card and payment details are entered on the Tebex checkout and are never received by us.
You are not legally required to give us any data, but without the data needed for a purchase (such as the Cfx.re account to deliver to) we cannot complete it.
3. Who receives data
- Tebex Limited - checkout, payments and merchant of record (Tebex privacy policy (opens in a new tab)).
- Cfx.re - delivers purchased assets to your Cfx.re account.
- Discord - only if you sign in with Discord or contact us there.
- YouTube (Google) - only if you choose to load a video.
- Our hosting provider, which stores the site and its data on our behalf.
- Authorities, where we are required by law.
Some of these providers are located outside Israel and the EU. Transfers are made under the safeguards required by law (for example adequacy decisions or standard contractual clauses).
4. How long we keep data
Server logs: up to 30 days. Store sessions: up to 30 days of inactivity. Purchase records: as long as needed to support your licence and for at least the period required by tax and accounting law (in Israel, generally 7 years). Reviews: until you delete them or ask us to. Support messages: up to 2 years after the case is closed.
5. Your rights
You may ask to access the personal data we hold about you and to have it corrected or deleted (subject to legal retention duties). Visitors in the EU/UK may also object to processing, restrict it, ask for portability and withdraw consent at any time. Email privacy@legendscripts.xyz; we answer within 30 days. You may also complain to the Israeli Privacy Protection Authority or, in the EU, to your local data protection authority.
6. Security
We use HTTPS everywhere, signed session cookies, restricted access to the admin panel, rate limiting and the minimum data needed. No system is perfectly secure; if we learn of a breach affecting you, we will notify you and the authorities as required by law.
7. Children
The Site is not intended for children under 16. We do not knowingly collect their data.
8. Cookies
See our Cookie Policy, where you can also change your choices.
9. Changes
We will post any changes on this page and update the date at the top. Significant changes will be highlighted on the Site.