Privacy Policy

1. Overview

MalibuTech (“we”, “us”) respects your privacy. This policy explains what information we collect, how we use it, and your rights regarding your data.

2. Data We Collect

We collect minimal data necessary to provide our services:

• FiveM / CFX Identity: Your CFX forum ID, username, and avatar when you log in. This is used to authenticate you and deliver your purchases.
• Discord Identity: If you choose to link your Discord account, we store your Discord ID, username, and avatar. This is used for support role assignment and notifications.
• Purchase Data: Transaction IDs, package names, amounts, and timestamps received from Tebex webhooks. We do not store payment card details — all payments are processed by Tebex.
• Analytics: We use Google Analytics 4 to understand aggregate site usage. Analytics cookies are only set after you accept them via the cookie banner; if you decline, measurement runs in cookieless mode (Google Consent Mode). No personally identifiable information is collected for this purpose.

3. How We Use Your Data

• Authenticate and authorize your account
• Deliver purchased products via Tebex Keymaster
• Provide technical support
• Send purchase confirmations and notifications via Discord
• Display recent purchases (anonymized) on our homepage

4. Data Storage & Security

Your data is stored in Supabase (PostgreSQL) with row-level security policies. Sessions are managed via cryptographically signed JWTs (HS256) with httpOnly, Secure, and SameSite cookies. All connections use TLS/HTTPS.

5. Third-Party Services

We integrate with the following third-party services:

• Tebex — Payment processing and license delivery
• Discord — Account linking and support notifications
• Supabase — Data storage
• Google Analytics 4 — Aggregate usage analytics
• Netlify — Hosting and edge delivery

6. Cookies

We use essential cookies required for authentication and cart functionality. First-party analytics cookies (Google Analytics 4) are set only with your consent, given through the cookie banner — declining keeps analytics in cookieless mode. You can change your choice at any time by clearing this site's data in your browser. We do not use advertising cookies.

• session — Authentication JWT (httpOnly, Secure)
• basket_ident — Tebex cart identifier

7. Your Rights

You have the right to request access to, correction of, or deletion of your personal data at any time. Contact us via our support page or Discord to exercise these rights. We will respond within 30 days.

8. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated through our Discord server.