Privacy Policy — INNOCENT RP

Last updated: August 21, 2026

This policy explains what personal data INNOCENT RP ("we", "us") collects when you use innocent-rp.store and its subdomains, our Discord community, or link your Discord account to our services, including the data requested through Discord OAuth, and how that data is used, shared, and retained.

If you have questions about this policy or want to exercise any of the rights described below, contact us at support@innocent-rp.store.

1. Who we are

INNOCENT RP is a FiveM roleplay server with an associated web store and community, operated from Bulgaria. For the purposes of the GDPR, we are the data controller for the data described in this policy, except where noted as processed by a third party under its own policy.

2. Cookies

Our site uses cookies that are strictly necessary for it to function, such as session handling, security, and basic preferences. These do not require your consent under applicable law, but we disclose them here for transparency.

We use one optional cookie, tied to the support form, which is only set if you explicitly opt in via a checkbox at the point of use. It is unchecked by default, and you may decline it without affecting your ability to use support.

Our checkout runs inline on our site via Tebex's embedded checkout widget. Tebex sets its own cookies during this process for cart and session handling, fraud prevention, and payment processing; these are governed by Tebex's Cookie Policy (https://www.tebex.io/terms-creator-agreement/cookie-policy).

We do not use non-essential cookies for advertising or cross-site tracking.

We use Vercel Web Analytics to understand site traffic. It does not use cookies or any persistent identifier — visitors are identified only by a temporary hash derived from the incoming request, discarded after 24 hours, and we only see aggregated statistics that cannot identify an individual visitor.

3. Data we collect

3.1 Account creation & Discord OAuth

Your account is created using your FiveM username/ID, obtained via Tebex's authentication flow at your first interaction with our store — this is the anchor identity for your account and is not sourced from Discord.

When you separately link your Discord account, we request the following via Discord's OAuth consent screen:

Discord ID, username, and avatar
Email address, from your Discord profile

3.2 Purchases & subscriptions, via Tebex

When you make a purchase, we receive and store the following from Tebex:

Order/transaction ID, amount, currency, and packages purchased
Email address used at checkout, which may differ from your account email, since the Tebex checkout email is not always your linked account email
Discord ID and FiveM username, where available at the time of purchase
IP address at the time of purchase, used for fraud and ban-evasion detection
Country and payment method type; we never receive or store full card numbers
Chargeback, refund, or dispute status, where applicable

Purpose: order fulfillment, entitlement and ownership tracking, customer support, and fraud and ban-evasion prevention. Legal basis: performance of a contract, to fulfill your purchase, and legitimate interest, for fraud and security purposes.

We also share your Discord ID with Tebex when you add a package to your basket, so that it can deliver associated Discord roles to your account.

3.3 Playtime data

We record playtime activity linked to your FiveM ID for account and ownership purposes.

3.4 Support tickets

We use Modora (modora.gg) as our ticketing provider.

If you are logged in, your Discord ID is shared with Modora to create and manage your ticket.
If you are not logged in (as a guest), only the email address you provide is shared with Modora.

Ticket conversation content is deleted upon ticket closure.

If you sign up for our free newsletter, we store your email address and IP address. One signup is permitted per IP address, to prevent abuse of promotional offers. This record is kept independently of any account and is not automatically deleted if you later delete your account.

3.6 Marketing & transactional emails, via Sender.net

Marketing emails are only sent if you explicitly opt in via a separate checkbox — either through our own newsletter signup form, or through a distinct marketing-consent checkbox Tebex's own checkout may present at purchase. Neither is ever pre-checked or bundled silently into login or checkout itself. Every marketing email includes an unsubscribe link.

Transactional emails — order confirmations and ticket updates — are sent as part of delivering our service and do not require separate consent. They are not affected by the marketing-email toggle in your account settings, which controls only marketing emails. The unsubscribe link required in every marketing email may also register as opting out of transactional email at the same time; if that happens, we automatically restore your transactional-email delivery the next time one is due, so you never permanently lose order confirmations or ticket updates.

Third party	What they receive	Purpose
Tebex	Purchase and payment processing data; Discord ID, for role delivery	Payment processing, order data source, Discord role delivery
Discord	OAuth authentication data	Login and identity linking
Modora (modora.gg)	Discord ID, if logged in, or email, if a guest	Support ticket handling
Sender.net	Email address	Marketing and transactional email delivery

Each of these providers processes data under their own privacy policy for anything beyond what we have instructed them to do on our behalf. We enter into data processing agreements with providers acting on our instructions where required.

5. International data transfers

Our website and database are hosted in the United States: Vercel for hosting, and Neon for our database. Vercel is certified under the EU-US Data Privacy Framework and also relies on Standard Contractual Clauses. Neon's Data Processing Agreement relies on the EU-US Data Privacy Framework for international transfers. Both are recognized transfer mechanisms under the GDPR.

Where any other provider we use is located outside the EU/EEA, transfers are covered by that provider's own compliance mechanism, such as Standard Contractual Clauses, as documented in their terms or DPA.

6. Data retention

Purchase, subscription, and fraud-related data, such as order IDs, IP address at purchase, payment method type, and chargeback data, is retained for the lifetime of your account, for support and fraud-prevention purposes.
Support ticket content is deleted upon ticket closure.
Newsletter signups are retained indefinitely, independent of account status, for anti-abuse purposes.
Upon account deletion, your directly identifying data, such as Discord ID and account email, is deleted. Purchase, subscription, and playtime records that reference your account are retained but stripped of identifiers linking them back to you, so they can no longer be associated with a specific person. We also notify Tebex of your deletion request, since some of this data originates from them.

7. Your rights

Under the GDPR, you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data
Restrict or object to certain processing
Request a copy of your data in a portable format
Lodge a complaint with your local data protection authority

Requesting deletion

To request account deletion:

If your account has a linked email, email us at support@innocent-rp.store from the email address associated with your linked Discord account.
If your account has no linked email, submit your request through one of our authenticated support categories, since we are unable to verify a deletion request via Discord ID or FiveM username alone, as these are public and not proof of ownership.

We aim to complete deletion requests within 30 days.

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected here with an updated "Last updated" date.

9. Contact

Questions about this policy or your data: support@innocent-rp.store