Privacy.

Last updated: 3 September 2026

This Privacy Notice applies to the LEGEND CAVE website at legendscave.com, its shopping basket, account connection features, support links, and related pages. It describes the information processed by LEGEND CAVE. Tebex processes payment and checkout information under its own terms and privacy notices.

1. Who we are

LEGEND CAVE operates this independent storefront for FiveM resources, digital tools, and related support. The operating name currently configured for this site is LEGEND CAVE.

For privacy questions or a request about information held by this site, use the official LEGEND CAVE Discord support channel. A monitored privacy email address must be configured before public launch.

LEGEND CAVE is not approved, sponsored, or endorsed by Rockstar Games.

Tebex is the reseller and merchant of record for purchases completed through Tebex checkout. Tebex determines how it processes payment, tax, fraud, and checkout information. Review the Tebex privacy information and the Tebex checkout terms for that processing.

2. Information we process

When you browse

• Essential session information used for security, CSRF protection, account connection, and continuing a checkout.
• Privacy-minimized first-party analytics: a random visitor cookie, one-way visitor/session hashes, page path, UTC date, and external referrer hostname. This analytics layer does not store raw IP addresses, raw user agents, or query strings.
• Technical request information that may be recorded by our hosting provider, such as IP address, browser, device, date, time, and requested page, for security and service operation.
• Catalog and product information returned by Tebex. The storefront keeps a short-lived server cache so pages remain responsive; the cache is not an account profile.

When you use the basket

• Your browser may store selected package IDs, names, prices, currency, image URLs, and quantities in local storage so the basket survives page navigation. You can clear this through your browser settings.
• When you start checkout, the server session may temporarily hold your selected package IDs, FiveM username, email, coupon, creator code, gift recipient, basket identifier, and creation time.

When you start checkout

• A FiveM username is required by the storefront flow. An email address is optional and is used to help Tebex send a receipt or support a transaction.
• The server may send the checkout IP address, selected package IDs, basket links, and optional checkout details to Tebex to create and complete the basket.
• The application may store a basket identifier, username, email, price, currency, checkout status, and the Tebex basket payload in its order ledger so support and webhook processing can be traced.
• Payment card details and other payment credentials are handled by Tebex and its payment providers. Do not post them to LEGEND CAVE or Discord.

When you connect Discord

If Discord connection is enabled, Discord may provide the Discord user ID, username, display name, and—when configured—whether the user is a member of the configured LEGEND CAVE server. The application does not ask for or store your Discord password, and it does not retain the OAuth access token after the connection request. A server session keeps the linked identity while you use the site.

3. Why we use information

• To display the catalog and provide the storefront, basket, and checkout handoff.
• To create and trace Tebex baskets, deliver support, and investigate payment or delivery problems.
• To connect a Discord identity when you choose that feature and, if enabled, verify community membership.
• To prevent abuse, protect the site, validate signed Tebex webhooks, and keep service records accurate.
• To understand aggregate storefront reach, popular pages, and traffic sources so we can improve the site.
• To meet legal, accounting, tax, fraud-prevention, and dispute-handling obligations where applicable.

Depending on the context, the processing basis may be performance of a contract, compliance with a legal obligation, a legitimate interest in operating and securing the service, or your choice/consent for an optional feature.

4. Who receives information

Information may be processed by service providers needed to operate the site:

• Tebex: catalog, basket, checkout, payment, tax, fraud, delivery, and transaction support.
• Hostinger: website hosting, server operation, security, and database infrastructure.
• Discord: OAuth identity and community membership checks when you choose to connect Discord.
• Google Fonts and image/CDN providers: browser requests for fonts or remote package artwork may expose normal technical request information to those providers.

We do not sell personal information or run behavioural advertising on this site. The storefront uses a first-party lc_visitor cookie and server-side records for aggregate reach metrics; it is not used to build an advertising profile. Third-party services have their own policies and may process information independently.

5. Cookies, sessions, and local storage

The site uses an essential, HttpOnly session cookie with SameSite protection. It supports CSRF protection, checkout continuation, Discord connection, and account order history. When analytics is enabled, the site also uses an HttpOnly, SameSite lc_visitor cookie containing a random identifier so repeat pageviews can be estimated without storing your IP address. You can block or clear this cookie through your browser settings; doing so may reduce the accuracy of visitor counts but does not stop the storefront from working. The cart uses browser local storage; it is not a payment credential store. Disabling essential cookies or local storage may prevent the basket and checkout flow from working.

6. Retention

We keep information only for as long as it is reasonably needed for the purpose collected, including providing delivery and support, resolving disputes, preventing abuse, and meeting legal or accounting obligations. Analytics pageview records are configured to be automatically removed after the configured retention window, currently 180 days by default. Checkout sessions are temporary. Browser cart data remains until you clear it or the browser removes it. Order and webhook records may need to be retained longer than a temporary session because they document a transaction or a security event. When information is no longer required, we delete it or remove identifying details where practical.

7. Security

Production traffic is served over HTTPS. Tebex private credentials and database credentials are kept server-side outside the public document root. Tebex webhook requests are checked using the configured source IP allowlist and signature secret. No online service can guarantee absolute security, so please do not send passwords, API keys, payment details, or database credentials through public support channels.

8. International processing

LEGEND CAVE and its service providers may process information in countries other than the one where you live. Where applicable, providers use contractual, legal, or other safeguards for cross-border processing. Review the linked provider notices for their current locations and transfer mechanisms.

9. Your choices and rights

Depending on the law that applies to you, you may be able to ask for access to, correction of, deletion of, or a copy of personal information; object to or restrict certain processing; or withdraw consent for an optional feature. Contact us through LEGEND CAVE Discord support with the request and the account or transaction details needed to locate it. Tebex requests about payment records, identity verification, refunds, tax, or checkout data may need to be directed to Tebex.

If you are in South Africa, this notice is intended to support transparency under applicable data-protection law, including POPIA. You may also contact the Information Regulator where you have a complaint after giving us a reasonable opportunity to address it.

10. Age and children

The site is not directed to children. You must be at least 16 to purchase through the Tebex checkout, or older if the law where you live requires it. If you believe a child has provided personal information, contact us so we can review and remove it where required.

11. Changes to this notice

We may update this notice when the site, services, providers, or legal requirements change. The date at the top shows when the current version was published. Material changes will be highlighted where appropriate.