Privacy policy
Last updated 5 November 2026
What Lootfront keeps about you and your store, and why.
What we store
- Your Discord account: id, name and avatar link, from signing in. We never see your Discord password and post nothing.
- Your stores: the Tebex public token, the store name Tebex gives us, the address, theme, settings and custom domain.
- Uploads: the images you upload for your store.
- Subscription: plan, status and renewal date from Lemon Squeezy. Card details stay with Lemon Squeezy, we never see them.
- Two cookies on this site: one keeps you signed in, a second lasts ten minutes and protects the Discord sign-in step.
The Tebex public token is public by design: every visitor's browser gets it to load your packages. Never paste your private Tebex key.
Store visitors
We set no cookies and run no analytics on store pages. The store loads packages, the basket and checkout straight from Tebex, under Tebex's privacy policy, and keeps the visitor's basket id in their own browser.
Who else handles it
- Cloudflare hosts the service and stores the data; it sees request data such as IP addresses.
- Discord, for sign-in.
- Lemon Squeezy, for the subscription.
- Tebex, for everything players buy.
We do not sell data or share it with anyone else.
How long, and your choices
We keep your data while you have stores with us. Email hello@lootfront.app to get a copy, correct it or have it deleted; deletion is done within 30 days. Billing records Lemon Squeezy must keep by law stay with them.