01The short version
We run a map store, not a data business. We hold the least we can get away with: who you are on Cfx.re, what you bought, and the tickets you opened.
- No password of yours ever reaches us. Cfx.re handles sign in.
- No card details ever reach us. Tebex handles payment.
- We do not sell, rent or trade personal data. There is no advertising network on this site.
02What we actually receive
Three sources feed the account you see when you sign in.
- From Cfx.re: your account identifier and display name. That is the whole handover.
- From Tebex: transaction id, package, amount, currency, status and the billing country used for tax. Not the card.
- From you: whatever you type into a ticket, including any server logs or screenshots you attach.
The server also writes ordinary technical logs: request time, page, rough location derived from the IP address and the browser string. These exist to keep the site up and to spot abuse, and they are not linked to your purchases.
03Signing in with Cfx.re
The sign in button sends you to cfx.re, you authenticate there, and we get a token proving the account is yours. Your password is never typed on our site and never travels through it.
Your Cfx.re identity is also the key that licences bind to, which is why purchases follow the account rather than an email address.
04Payments
Tebex is the merchant of record. The checkout runs on their infrastructure, so card numbers, billing addresses and tax details are collected and stored by them under their own privacy policy.
What comes back to us is the order summary we need to deliver the product and answer support questions about it. Receipts are sent by Tebex, from their systems.
05Why we process it
- To perform the contract: deliver the licence, keep it valid, run the subscription.
- Legitimate interest: answering support, preventing fraud and leaks, keeping the service running.
- Legal obligation: keeping the records that tax and accounting rules require.
- Consent: only for optional things, such as update mail, which you can withdraw at any time.
07How long we keep it
- Account and licences: while the account exists, because that is what proves you own what you own.
- Order records: ten years, which is what accounting law requires of us.
- Tickets: two years after the ticket closes, so a recurring bug has history behind it.
- Technical logs: ninety days, then deleted.
08Your rights
Under the GDPR and Turkish KVKK you can ask for a copy of your data, ask us to correct it, ask us to delete it, object to certain processing, or ask for it in a portable format.
Write to privacy@venuk.net from the account you want to act on, or open a ticket while signed in. We reply within thirty days and we do not charge for it.
10Security
Traffic runs over TLS, access to the production database is limited to the people who need it, and administrative access requires two factor authentication.
No system is perfect. If a breach ever affects your data, we will tell affected users and the relevant authority within 72 hours of confirming it, and we will say plainly what happened rather than hiding behind a template.
11Age
This store is not aimed at children. You need to be at least sixteen, or old enough to enter a contract where you live, to buy from us. If we learn that a younger user has an account, we remove it.
12Changes and contact
When this policy changes in a way that matters, we update the date at the top and post a note in our Discord. Older versions are available on request.
Questions, requests or complaints go to privacy@venuk.net. If you are in the European Union you also have the right to complain to your local data protection authority.
Licence scope, refunds, subscriptions and support live in the terms of service.