Privacy Policy

1. Overview

MalibuTech (“we”, “us”) respects your privacy. This policy explains what information we collect, how we use it, and your rights regarding your data.

2. Data We Collect

We collect minimal data necessary to provide our services:

• FiveM / CFX Identity: Your CFX forum ID, username, and avatar when you log in. This is used to authenticate you and deliver your purchases.
• Discord Identity: If you choose to link your Discord account, we store your Discord ID, username, and avatar. This is used for support role assignment and notifications.
• Purchase Data: Transaction IDs, package names, amounts, and timestamps received from Tebex webhooks. We do not store payment card details — all payments are processed by Tebex.
• Analytics: We use Umami, a privacy-focused, cookie-free analytics tool. No personally identifiable information is collected through analytics.

3. How We Use Your Data

• Authenticate and authorize your account
• Deliver purchased products via Tebex Keymaster
• Provide technical support
• Send purchase confirmations and notifications via Discord
• Display recent purchases (anonymized) on our homepage

4. Data Storage & Security

Your data is stored in Supabase (PostgreSQL) with row-level security policies. Sessions are managed via cryptographically signed JWTs (HS256) with httpOnly, Secure, and SameSite cookies. All connections use TLS/HTTPS.

5. Third-Party Services

We integrate with the following third-party services:

• Tebex — Payment processing and license delivery
• Discord — Account linking and support notifications
• Supabase — Data storage
• Umami — Privacy-focused analytics (no cookies, GDPR compliant)
• Netlify — Hosting and edge delivery

6. Cookies

We use only essential cookies required for authentication and cart functionality. We do not use tracking cookies, advertising cookies, or any third-party cookie-based analytics.

• session — Authentication JWT (httpOnly, Secure)
• basket_ident — Tebex cart identifier

7. Your Rights

You have the right to request access to, correction of, or deletion of your personal data at any time. Contact us via our support page or Discord to exercise these rights. We will respond within 30 days.

8. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated through our Discord server.