Loading…
Use code
WELCOME10 in your basket.
How our hosted storefront uses information, and how Tebex handles checkout. Updated 26 October 2026.
402 Studio hosts and operates this website as a custom frontend for our Tebex store. We control the use of information for our storefront accounts, saved products, recorded order history, studio support, and PostHog tracking. Tebex separately operates checkout and handles its payment, billing, and transaction data under its own privacy notice. Contact us through our Discord server for questions about this website’s data.
Contact 402 Studio on DiscordWhen you continue to payment, the storefront redirects you to Tebex’s hosted checkout. Payment and billing details are entered directly with Tebex and its payment providers. Our site uses Tebex basket references and selected order information to show your basket, purchase history, and payment status. Order records include the transaction reference, Cfx.re identifier, products, quantities, amount, currency, dates, and status. Tebex’s notice explains its wider checkout processing and privacy contacts.
Read Tebex’s privacy noticeCfx.re sign-in through Tebex supplies your Cfx.re identifier and display name. We store these with a storefront account identifier to provide account features and link saved products and available purchases. Session records include security tokens, timestamps, connection IP, and browser information. Account access, saved products, basket actions, and purchase-history requests support the services you request. Security and abuse prevention support our legitimate interest in protecting the website; any records required by law are processed for that legal obligation.
Sign-in sessions last up to 30 days and renew during use. A basket cookie remembers your Tebex basket for up to seven days, and temporary sign-in security state is valid for ten minutes. Guest favourites, display currency, and animation preferences use local storage. Guest favourites are added to your account after a successful sign-in merge. A product selected before sign-in can remain in session storage until added successfully or the browser session ends. Valid tracking choices saved by an earlier version of the site are honoured for 180 days; after expiry, the default settings apply.
We use PostHog to understand storefront visits, product interest, store actions, page performance, and generic error events. Tracking starts automatically on eligible pages unless a valid saved preference or browser privacy signal blocks it. Events can include page paths, referring sites, campaign labels, product identifiers, quantities, basket totals, currency, browser and device information, and approximate location. Signed-in activity can be linked to your storefront account identifier. Signing out resets the browser’s analytics identity. URL query strings and fragments are removed from analytics URL properties. PostHog receives connection IP information and can use it to estimate location, such as country, region, and city.
Read PostHog’s privacy policyPostHog session replay is enabled with analytics by default. It records eligible page structure, public text, images, layout, clicks, and scrolling to help us understand usability. User inputs are masked, field-value attributes are removed, and link query strings and fragments are stripped. Private content, forms, embedded frames, request and response bodies and headers, console content, and canvas recording are excluded. Account, admin, basket, checkout, support, API, and authentication routes are excluded from browser tracking. PostHog cookies can last up to 180 days; its local storage remains until removed, and session storage lasts for the tab session. Do Not Track and Global Privacy Control disable analytics, replay, and gated external media. Stopping capture resets our browser analytics identifiers; requests to delete earlier data can be made through Discord.
We use your saved display currency or the country returned with your basket when available. Otherwise, a lookup sends your public connection IP to Country.is to suggest a supported currency. Lookup results are reused temporarily in server memory, for up to an hour after a successful lookup or five minutes after a failure. Expired entries are removed when looked up again; entries can also be removed by eviction or server restart. Exchange rates are retrieved from the European Central Bank through our server. YouTube players, scripts, and thumbnails can load automatically under the tracking settings above. YouTube and directly loaded product-image providers receive the connection information needed to serve their content.
Read Google’s privacy policyOur hosting and database infrastructure supports the website and account records. Tebex and Cfx.re receive information used for sign-in, purchases, and resource entitlements. Basket creation sends the connection IP to Tebex. PostHog receives the storefront analytics and replay described above. Country.is receives currency-location lookups, Google and media providers receive media requests, and Discord handles messages you send through studio support. These services may process information outside your country or the European Economic Area under their respective privacy notices.
The storage lifetimes above apply to the stated cookies, sessions, and browser settings. Account profiles, account favourites, and recorded order history remain stored without automatic expiry. Removing a favourite deletes it from your active saved list. Contact us through a private Discord ticket for account access, correction, or deletion requests. Where applicable law provides them, you can also request restriction or data portability, object to processing based on legitimate interests, and withdraw consent you have given. You can complain to your data protection authority. Contact Tebex directly about checkout information it controls; it manages that information under its own notice.
Send a storefront privacy request