Privacy Policy
Last updated: 9 October 2026
1. Who we are
This website, vellomods.com (the "Site"), is run by Vello Mods ("we", "us"). We make and sell digital content for the FiveM platform. For anything in this policy, or to use your rights, contact us at support@vellomods.com.
Purchases are processed by Tebex Limited, which acts as the seller and merchant of record. Tebex collects your payment and billing details directly and is responsible for them under its own privacy policy. We never see or store your card or payment account details.
2. What we process and why
Logging in and buying
When you log in with FiveM, Tebex tells us your Cfx.re username, user id and avatar address. We keep these in a signed login cookie for 7 days so you stay logged in. We send Tebex the contents of your basket, any coupon, creator or gift card code you enter, the username of a player you send a gift to, and your IP address (Tebex requires it to create a basket and uses it for fraud prevention and tax). Legal basis: performing the contract with you, and our legitimate interest in preventing fraud.
Discord verification
Some products, and some prize codes, are only for members of our Discord server. If you choose to verify, Discord tells us your Discord user id and whether you are a member. We keep that in a cookie for 24 hours. Legal basis: performing the contract with you.
Wishlist
Your wishlist is kept in your browser. If you are logged in, each saved map is also stored in our database with your Cfx.re username, so we can see which maps are in demand. Removing a map from your wishlist deletes that entry. Legal basis: our legitimate interest in planning what to build.
Support
Support takes place on our Discord server. When a ticket is closed, our bot keeps a record of it: your Discord user id and username, the ticket category, a link to the transcript, and who closed it. Legal basis: our legitimate interest in providing and reviewing support.
Reviews
If you submit a review through our Discord bot, we store your display name, Discord user id, rating and comment. Legal basis: your consent, given by submitting it.
Analytics, only if you allow it
If you choose "Allow analytics" in the cookie notice, we use PostHog to record page views, a few shop events and a replay of your visit (the pages you see, where you move and click) against a random visitor id. Anything you type and your username are masked in the replay, and we do not send your username or purchase details. If you do not allow it, nothing is collected. Legal basis: your consent, which you can withdraw at any time under "Cookie settings" at the bottom of every page. Details are in our Cookie Policy.
Security and server logs
Our hosting provider records requests to the Site, including IP addresses, and we use IP addresses briefly in memory to limit abusive traffic. Legal basis: our legitimate interest in keeping the Site secure.
We do not collect your email address through the Site, we do not send marketing email, and we do not sell personal data. Nothing on the Site makes automated decisions about you.
3. Who receives your data
- Tebex Limited (United Kingdom): login, basket, checkout, payment, delivery and refunds.
- Cfx.re: FiveM account login (through Tebex), avatar images, and a check that a gift recipient's username exists.
- Discord Inc. (United States): membership verification and support.
- Convex: our database (wishlist entries, support ticket records, reviews).
- Railway: hosting of the Site and its server logs.
- Tigris: storage of product images. No personal data.
- PostHog Inc. (United States): analytics, only with your consent.
- Google (YouTube): only when you play a showcase video.
Some of these providers are outside the European Economic Area, mainly in the United States and the United Kingdom. Where that is the case, the transfer relies on an adequacy decision or on the provider's standard contractual clauses.
4. How long we keep it
- Login cookie: 7 days. Discord verification cookie: 24 hours.
- Wishlist entries: until you remove the map from your wishlist or ask us to delete them.
- Support ticket records and reviews: until they are no longer needed or you ask us to delete them.
- Analytics: the visitor id cookie lasts up to 1 year; you can remove it at any time under "Cookie settings".
- Purchase records are kept by Tebex under its own policy and legal obligations.
5. Your rights
If you are in the EU, the EEA or the UK, you have the right to:
- Ask for a copy of the personal data we hold about you
- Have inaccurate data corrected
- Have your data deleted
- Restrict or object to how we use it
- Receive your data in a portable form
- Withdraw consent at any time, without affecting what was done before
- Complain to the data protection authority where you live
To use any of these, email support@vellomods.com or open a ticket on our Discord server at discord.gg/wUCBe922xg, and tell us your Cfx.re or Discord username so we can find your data. We answer within one month. For payment and billing data, contact Tebex.
6. Children
The Site is not directed at children, and purchases are subject to the age requirements of Tebex and of your payment method. If you believe a child has given us personal data, contact us and we will delete it.
7. Security
The Site is served over an encrypted connection, login cookies are signed and cannot be read by scripts, and access to the admin area is restricted to our team. No system is perfectly secure; if we become aware of a breach affecting your data, we will tell you as the law requires.
8. Changes
We will update this policy when what we do changes, and change the date at the top. For significant changes we will post a notice on our Discord server.