Privacy policy

JGS Store is a storefront. It does not run accounts, it does not keep a customer database, and it never sees a payment. Every purchase is made, billed and delivered by Tebex Limited, who are the merchant of record and who publish their own privacy notice covering the transaction itself.

What this site holds about you

• One cookie. Signing in stores a Tebex basket identifier in a cookie named basketId. It is httpOnly, so no script on the page can read it, and it lasts seven days. It is what makes a basket yours, and it is strictly necessary — without it there is no cart and no sign-in.
• Your Cfx.re username, while you are signed in. It lives on the Tebex basket, not here, and it is the account your scripts are delivered to. This site reads it to show who is signed in and to label a gift.
• Your display currency, if you choose one.Kept in your own browser's local storage. It never reaches the server.

What leaves this site, and where it goes

• Tebex receives your IP address when a basket is created, which they use for tax and fraud checks, and everything you enter on their checkout. From the moment you reach that checkout, your data is theirs to handle.
• The Cfx.re forum is asked for the public avatar belonging to a username, so a signed-in customer has a picture next to their name.
• Nobody is told where you are. Prices are shown in a local currency using the two-letter country code our hosting platform already attaches to your request. It is read once, in memory, to pick a currency — it is not stored, not logged and not sent on to anyone.
• Google Analytics runs only when this deployment is configured with a measurement ID, and it is set to anonymise IP addresses. If it is running, it sets its own cookies.

What this site never has

• Card numbers, bank details or any payment information — those go straight to Tebex.
• A password. Signing in is delegated to Cfx.re through Tebex.
• An email address. Tebex collects one at checkout; it is not passed back to this site.
• A database, a profile, or any record of you between visits beyond the cookie above.

Your rights

Signing out deletes the cookie, which is the entirety of what this site holds. For the order data itself — receipts, invoices, the email address you checked out with — Tebex is the controller: their support handles access, correction and erasure requests, and their privacy notice explains how. If you are not sure who to ask, start with our support page and we will point you the right way.