Privacy and cookies
What this site stores in your browser, which services handle your data, and how long each keeps it.
Who is responsible
TK Scripts, Finland, runs tkscripts.com and is the data controller for it. Tebex handles payment data and is responsible for it under its own policy.
What this site stores in your browser
Items your cart and checkout need are stored without asking. Analytics runs only after you accept it. Change your choice any time with Cookie settings at the bottom of the page.
| Name | Where | What it holds | How long | When |
|---|---|---|---|---|
| Cart and checkout | ||||
tk. | Local storage | The package numbers in your cart. No prices, names or account details. | 24 hours after your last change | When you add something to your cart |
tk. | Session storage | The Cfx.re username you entered for a gift. | Until you close the tab | When you buy a script as a gift |
tk. | Session storage | The reference of your cart at Tebex, so checkout can continue after the Cfx.re login. | Until you close the tab | When you continue to checkout, subscribe or use Buy now |
tk. | Session storage | The plan you chose, or the one item you are buying with Buy now. | Until you close the tab | When you subscribe or use Buy now |
tk. | Session storage | The packages handed to Tebex checkout. | Until you return from checkout or close the tab | When checkout opens |
tk. | Local storage | The package numbers sent to Tebex checkout and the time, so the cart can tell you they already went to checkout. | Up to 24 hours after checkout opens, or sooner if you cancel or remove the items (a cart checkout that finishes also clears it) | When checkout opens |
tk. | Session storage | Cart suggestions you dismissed or used. | Until you close the tab | When you act on a cart suggestion |
| Analytics | ||||
tk. | Local storage | Your cookie choice and its date. | 12 months, then we ask again | When you accept or reject |
tk. | Session storage | The page where your visit started and the campaign that brought you (for example a YouTube link). | Until you close the tab | Only after you accept analytics |
ph_<key>_posthog | Cookie (PostHog, this site) | A random visitor ID and the current session ID. | 365 days | Only after you accept analytics |
ph_<key>_posthog, | Local storage | PostHog's copy of those IDs, its settings and your analytics choice. | Until you reject analytics | Only after you accept analytics |
ph_<key>_window_id, | Session storage | Which tab a session belongs to. | Until you close the tab | Only after you accept analytics |
| Discount code strip | ||||
tk. | Local storage | That you hid the discount code strip, and until when. | 30 days | After you hide the strip |
Services that handle your data
Tebex
Tebex Limited sells and delivers our scripts and handles checkout and payment. Through Tebex we receive the limited customer information needed to deliver your purchase and provide support, which may include your name, email address, IP address and Cfx.re username; we use it to fulfil the purchase (GDPR Art. 6(1)(b)). Adding to cart stays in your browser. Your browser talks to Tebex directly once you continue to checkout, subscribe or use Buy now: for the Cfx.re login, the items and codes in your order, and payment. On script, bundle and plan pages after your first tap, click or key press, and when you open the cart, your browser also asks Tebex once for the current prices, so the page can show the price in your currency where Tebex uses one. That request shows Tebex your IP address, as any request does, and sends no cookies or account details. Where the cart is not used, for example with JavaScript off or site storage blocked, the buy buttons open the Tebex store page instead. Tebex privacy policy (external site).
Our order record
When Tebex reports an order, we keep:
- the transaction ID, packages, amounts and dates
- any discount code IDs and creator code
- the subscription status
- the page where your visit started and, when known, the campaign that brought you
- a one-way code made from your Cfx.re account ID
We do not keep your email address, name, IP address, card details or the discount codes you entered. We use this record to count sales and answer support questions, which is our legitimate interest (GDPR Art. 6(1)(f)), and keep it for up to 13 months, then delete it. Tebex keeps its own payment records under its own policy. Tebex privacy policy (external site).
Recently bought list
The home page can list scripts that were bought lately, each with a day such as "Today". Our server reads the recent payments Tebex lists for the store and passes on only the package and the day: never a buyer name, an amount or a time of day. If you buy something, it can appear there in that form. To name the day correctly where you are, your browser sends its time zone name (for example Europe/Helsinki) with the request for the list. The list rests on our legitimate interest in showing what sells (GDPR Art. 6(1)(f)).
PostHog
PostHog Inc. measures how the site is used, as our processor, and stores the data in the EU (Frankfurt). It runs only if you accept analytics (consent: GDPR Art. 6(1)(a) and section 205 of the Finnish Act on Electronic Communications Services). It then records the pages you view, your clicks and store actions such as adding to cart, your device type and rough location (city and country, from your IP address), and may record your visit as a replay with everything you type hidden. If you buy, your order carries your PostHog visitor ID, so the purchase can be linked to the visit. Rejecting stops it and deletes its cookie and storage.
Without asking, our server counts each page it serves and sends PostHog only the page, the referring site, the page here you came from when either page is a guide, the campaign name, your country and your device type, with no IP address, cookie or visitor ID. It also sends PostHog each purchase from our order record, without your name, email, IP address or payment details. Both rest on our legitimate interest in knowing how the store is used (GDPR Art. 6(1)(f)). PostHog privacy policy (external site).
YouTube
Product videos load from YouTube (Google) only when you press Play. YouTube may then store data on your device. Before that, the video is a picture hosted on this site. If you rejected analytics, Play opens the video on youtube.com in a new tab instead. Google privacy policy (external site).
Newsletter
With your consent (GDPR Art. 6(1)(a)) we email you new scripts, release news and offers. If you ticked the email box at Tebex checkout, Tebex passes us your address for this. We keep your address while you are subscribed. Every email has an unsubscribe link: using it, or your mail app's unsubscribe button, withdraws your consent and is your objection to direct marketing (GDPR Art. 21).
Brevo
Brevo (Sendinblue SAS, France) sends our emails and holds the newsletter list for us, as our processor. It receives your email address and the emails we send you. Brevo privacy policy (external site).
Community feedback
Some pages quote public comments from the Cfx.re forum and YouTube, with the name they were posted under and a link to the original, and reviews left after a TK Scripts support ticket, with the reviewer's initials. TK Scripts chooses which ones are shown; showing what customers say is our legitimate interest (GDPR Art. 6(1)(f)). We remove a comment or review when its author asks: contact us as shown under Who is responsible.
Cloudflare
Hosts and delivers this site. Cloudflare processes your IP address and request details to serve pages and protect the site, which is our legitimate interest (GDPR Art. 6(1)(f)). Cloudflare Web Analytics is turned off on this site. Our own server logs record no names, emails or account identifiers. Cloudflare privacy policy (external site).
Some of these services can process data outside the EU and EEA: Google and Cloudflare under the EU-US Data Privacy Framework, PostHog Inc. under the EU Standard Contractual Clauses and Tebex Limited, a UK company, under EU adequacy decisions or the Standard Contractual Clauses.
Your choices and rights
- Rejecting or withdrawing analytics changes nothing about browsing or buying.
- To see, correct, delete, restrict or get a copy of what we hold about you, or to object to its use, contact us on Discord or by email.
- You can complain to the data protection authority where you live; in Finland, the Office of the Data Protection Ombudsman (external site).
Our Terms of Service also describe what we receive through Tebex.