Privacy Policy

Last updated: 3 July 2026

This Privacy Policy explains how STG Scripts ("STG", "we", "us", "our") collects, uses and protects your personal data when you use our website at stgscripts.com (the "Website") and related services (the "Services"). By using our Services, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are

STG Scripts is an independent developer and seller of FiveM resources, operating the Website stgscripts.com. For any privacy-related request you can contact us at support@stgscripts.com.

2. Checkout & Payment

Our checkout is owned and operated by Tebex Limited, who act as the Merchant of Record for all purchases. When you buy a product, Tebex collects and processes your payment information, billing details and transaction data. We do not have access to your full payment card details. See the Tebex Privacy Policy for how they handle your data. If you opt in to marketing during Tebex checkout, your email is shared with us and added to our newsletter list (hosted by Brevo).

3. Data We Collect

Information you provide

• Newsletter subscription: if you subscribe, we collect your email address, stored and processed by our email provider Brevo.
• Discord authentication: if you log in with Discord, we receive your Discord user ID and pass it to Tebex to link your purchases for support and role assignment. We do not access your Discord password or private messages.
• Rewards / loyalty: if you take part in any rewards or loyalty feature, we store your Discord ID and reward progress in our database to operate that feature.
• Support communications: if you contact us by email or Discord, we retain those messages to provide support.

Information collected automatically

• Analytics: we use Google Analytics and Google Tag Manager to understand how visitors use the Website (pages visited, product and checkout interactions, referral sources, general location). This data is aggregated and does not directly identify you.
• Advertising: we use Google Ads conversion tracking. Where you arrive from an ad, a click identifier (gclid) may be temporarily stored to measure whether a purchase resulted from that ad.
• Session analytics: we use Microsoft Clarity to record aggregated, anonymised interaction data (such as clicks and scrolls) to improve the Website.
• Cookies & local storage: used for essential functionality (basket, currency preference) and, with your consent, analytics. See Section 6.
• Rate limiting: we temporarily store hashed IP addresses to prevent abuse of our Services. This data is automatically deleted after a short period.

4. How We Use Your Data

• To provide, operate and improve our Services
• To send newsletter emails (if you have subscribed)
• To pass your Discord ID to Tebex for purchase linking and role assignment
• To operate rewards or loyalty features you take part in
• To respond to support requests
• To measure advertising and analyse Website usage
• To prevent fraud and abuse

5. Legal Basis (GDPR)

• Consent: for newsletter subscriptions, marketing and optional analytics cookies. You can withdraw consent at any time.
• Legitimate interests: for analytics, security and improving our Services, where these do not override your rights.
• Contract: to provide support and features for products you have purchased.

6. Cookies

We use essential cookies (session, basket, currency preference), analytics cookies (Google Analytics, Microsoft Clarity, used only when you accept them) and advertising cookies (Google Ads conversion measurement). You can control optional cookies through your browser settings. Disabling essential cookies may affect Website functionality.

7. Third-Party Services

The following providers may process your data on our behalf:

• Tebex – checkout and payment (Merchant of Record)
• Brevo – newsletter and email
• Google – analytics, tag management and advertising
• Microsoft Clarity – session analytics
• Vercel – website hosting
• Discord – authentication and support
• Neon & Redis – database and rate-limiting infrastructure

8. Data Retention

• Newsletter: retained until you unsubscribe (link in every email).
• Discord ID: passed to Tebex and retained per their policies; retained by us only while needed for rewards features.
• Analytics: per provider default retention periods.
• Rate-limiting data: automatically deleted within minutes to hours.
• Support communications: retained as long as necessary to provide ongoing support.

9. Your Rights (GDPR)

You have the right to access, rectify, erase, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time. To exercise any of these rights, contact us at support@stgscripts.com. If you are in the EU/EEA, you also have the right to lodge a complaint with your national data protection supervisory authority.

10. International Transfers

Some of our providers are based outside your country. Where data is transferred internationally, appropriate safeguards (such as Standard Contractual Clauses or adequacy decisions) are relied upon.

11. Children's Privacy

Our Services are not directed at individuals under 16. We do not knowingly collect personal data from children under 16. If you believe we have, please contact us and we will delete it promptly.

12. Data Security

We use appropriate technical and organisational measures, including encryption in transit (HTTPS), secure authentication and access controls. However, no method of transmission over the internet is 100% secure.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted here with a new effective date. Continued use of our Services after changes constitutes acceptance of the revised policy.

14. Contact

Questions or requests regarding this Privacy Policy: support@stgscripts.com.