Terms of sale

Version 2026-09-23. They apply to every order placed on panel.lrd-store.com.

1. Who is selling

The LRD Store plans sold on panel.lrd-store.com are offered by SAPENSE (hereinafter "LRD" or "we").

• SAPENSE, a French simplified joint-stock company (SAS) with a share capital of €100
• Registered office: 173 rue de Courcelles, 75017 Paris, France
• SIREN 109 734 772, RCS Paris B 109 734 772
• EU VAT number: FR05109734772
• Publication director: Lorenzo Folliot
• Email: contact@rayor.fr
• Site hosted by OVH SAS, 2 rue Kellermann, 59100 Roubaix, France

2. What is being sold

A FiveM game server hosting and management service, sold as a monthly subscription, with no minimum term. Each plan entitles you to a hosted game server, isolated from others, with the memory, processor and disk allocated to it in the table below, a prepared game base, and the panel features included in that plan. The host's physical machine also hosts other customers' servers.

Memory, processor and disk: the limits assigned to each plan's server at the machine host. The processor is counted in cores of the host machine.

Prices are given in euros, all taxes included, for one month of subscription. The price shown is the one you pay: the tax is included in it, and the breakdown appears on your invoice.

The price includes French VAT at 20%. Should our sales to consumers established in other European Union countries exceed €10,000 in a calendar year, the VAT of their country of residence would apply to them instead, declared through the Union one-stop shop; the price shown would not change for all that.

A business established in another European Union country, whose VAT number is confirmed by the EU VIES register, is invoiced excluding VAT: the VAT is due by the business (reverse charge). A customer established outside the European Union is invoiced excluding VAT, as French VAT does not apply. The price excluding VAT is the displayed price divided by 1.2; it is shown before payment.

3. Ordering and payment

Orders are placed online. Payment is handled by Stripe: no card number passes through our servers and we keep none. The server is created once the first payment is accepted.

Ordering takes two or three steps: your billing details (if they are still missing), your server (style and name), then a summary of the plan, the price and your details. At this last step, you accept these terms and, through a separate box, ask for your server to be put into service as soon as payment is made (see Article 9). Until payment is confirmed on Stripe's secure page, the “Back” button lets you return to each step and correct any mistakes. Once payment is accepted, your order is confirmed by email, with a copy of the terms you accepted.

If you have a promotional code, you enter it on the payment page: the discount is shown there before you pay.

These terms and the contract are offered in French and in English; the contract is concluded in the language you are using on the site when you order. Each version of these terms is archived exactly as it was and remains available on this site, at an address such as cgv.php?v=…; the version you accepted is saved with your order. SAPENSE keeps the contract and the terms you accepted, with their date and version, for 10 years, and will send you a copy on simple request to contact@rayor.fr (Article L213-1 of the French Consumer Code).

The subscription is monthly and renews automatically, each month, on the date of the first payment, until cancelled. The invoice for each instalment is available from your account. Invoices are issued electronically; by accepting these terms you consent to this (article L441-9 of the French commercial code). From 1 September 2027, invoices addressed to a business customer established in France will go through an approved e-invoicing platform.

You can change plan at any time from your server's Subscription page. The change is immediate, and the price difference is calculated pro rata for the days remaining in the current period: it is added to your next invoice, or deducted from it if the new plan is cheaper.

If you are a business: the price is payable when ordering, then at each due date. Any late payment automatically incurs penalties at the interest rate applied by the European Central Bank to its most recent refinancing operation, increased by 10 points, plus a flat fee of €40 for collection costs (Articles L441-10 and D441-5 of the French Commercial Code).

5. Cancellation

You can cancel at any time from your account. Cancellation takes effect at the end of the month already paid for: the server stays open until then, and no further charge is made.

The cancellation is confirmed to you by email, with its effective date. As long as the paid month is not over, you can withdraw it from the same page. On that date, the server is suspended, then deleted for good 3 days later, along with its files and database (see Article 6). During that period, a new subscription reopens it as it was.

6. If a payment does not go through

This is the most important part of this document: it says what you stand to lose, and when.

1. A refused charge is reported to you by email. Your server stays open for 7 days, giving you time to update your payment method.
2. After that, the server is suspended: it is switched off, your players can no longer connect to it, and its settings are no longer reachable. Nothing is deleted.
3. Everything is kept as it is for 3 further days. A payment within that period reopens the server exactly as it was.
4. At the end of that period, the server is deleted for good: the machine, all its files, its database and its settings in the panel. The deletion cannot be undone. Only the panel database's daily backups, which hold its settings but neither its files nor its game database, keep them for another 14 days. A warning is emailed the day before.

It is up to you to export whatever you wish to keep before these periods end.

7. Your data

We keep the information needed for billing and for the service to run. Your server's game database password and your Cfx.re licence key are encrypted. After a server is deleted, orders and payments are kept to meet our accounting obligations.

The cookies set by the site are detailed on the Cookies page.

Data controller

SAPENSE, whose details are given in section 1, is the controller of the data relating to your account, your orders and your payments.

Data processed

• Account: email address, name, nickname and picture sent by Rayor Connect at each sign-in, chosen language, creation and last-visit dates.
• Billing: name, company, VAT number, postal address and optional phone number; orders, payments (amount, status, reason for a refusal), subscriptions and free trials; date and version of the terms accepted, date of the request for immediate activation and, if applicable, of your withdrawal.
• Your server: settings, uploaded files (logo, images, music, packs, SQL files), team members and their rights, Discord alerts, API keys (with the last IP address that used them), Cfx.re licence key and game database password, the last two encrypted.
• Action log: who did what and when in the panel (author's email address, action, detail).
• Sign-in: a session cookie and preference cookies; for the free trial, a fingerprint of your internet connection computed with HMAC, the panel not keeping your IP address for this fingerprint. Your IP address does, however, appear in the web server's technical logs (date, page requested, browser).

Purposes and legal bases

• Performance of the contract (Article 6(1)(b) GDPR): creating your account, processing your orders and your subscription, running your server and sending you service emails.
• Legal obligation (Article 6(1)(c) GDPR): issuing invoices and keeping accounting records for 10 years (Article L123-22 of the French Commercial Code), and archiving contracts concluded online (Article L213-1 of the French Consumer Code).
• Legitimate interest (Article 6(1)(f) GDPR): the security of the service, the prevention of abuse and proof of our exchanges, for example the action log, the web server's technical logs and the limit of one free trial per account and per internet connection. For that limit, only an HMAC fingerprint of the connection is kept, not the address itself.
• Consent (Article 6(1)(a) GDPR): remembering the language guessed for you, only if you accept it on the Cookies page, where you can withdraw your consent at any time.

Your email address is needed to create an account. Your name and postal address are needed to take out a paid plan, because they appear on invoices: without them, the order cannot go through. Company, VAT number, address line 2 and phone number are optional.

Retention periods

• Account and billing details: for as long as you use your account. An account with no sign-in for 3 years and no server is automatically deleted, after a warning email sent a month before; you can also ask for it to be deleted at any time (see “Your rights” below).
• Paid orders, payments and invoices: 10 years, including after a server is deleted or the account is erased (accounting obligation), then deleted. Orders that were never paid (abandoned or declined) are deleted after one year.
• Free trial register (account and connection fingerprint): 3 years after your last trial, so that the same account or the same connection cannot take one trial after another. Your email address is removed from it if your account is erased.
• Action log: 1 year. Lines that serve as proof of a contract (for example acceptance of the terms or the request for immediate activation) are kept for 10 years.
• Your server's data: until the server is deleted (see section 6). Only the last 60 versions of its settings are kept. Attendance (player counts, with no identities) is kept for 62 days.
• Web server technical logs (IP address, date, page requested, browser): erased by the automatic log rotation of the server hosting the site.
• Sign-in session: until you sign out or close the browser. Preference cookies: 1 year.
• Backups of your game server: one copy of its database a day, the last 7 kept 30 days at most. They contain your players' data, and are deleted along with the server. The archives of its files are kept at the host, in a number limited by your plan.
• Log of your game server's movements (your players' money and items, with their FiveM identifier): money details are kept for 90 days, then replaced by daily totals without player identifiers; item details are deleted after 30 days. Everything is deleted with the server.
• Backups of the panel database: one copy a day, kept for 14 days. Erased data may remain in them during that period.

Processors and recipients

Your data is neither sold nor rented. It is only passed to the providers the service needs, each for its own part:

• Stripe: payment, subscriptions, invoices and the “My card and invoices” area. Stripe receives your email, your name or company, your address and your phone number if you provide one; it alone processes card data. Stripe also acts on its own account, as a separate controller, for fraud prevention and compliance with its legal obligations; in that capacity it collects information about your payment and your device, including your IP address.
• OVH SAS: hosting of the site, the panel database, uploaded files and backups, on servers located in the European Union.
• The game machine host: it runs your server and its database, and receives the server name, the owner's email address and the Cfx.re licence key.
• The email sending service (an SMTP relay or, failing that, the server hosting the site): it receives the recipient's address and the content of the messages.
• Rayor Connect: the sign-in service. It manages your login and password, and passes your email, name, nickname and picture to the panel.
• Discord, only if you connect your alerts to it: the panel then sends your notifications (outage, payment, trial, bans with the player's name, the reason and the author's email) to the channel you chose.

Stripe and Discord may process data in the United States. These transfers rely on the European Commission's adequacy decision of 10 July 2023 (the EU-US Data Privacy Framework, Article 45 GDPR) or, failing that, on standard contractual clauses (Article 46); a copy of these safeguards is provided to you on request. The partner shop Tebex, if you buy a script there, acts on its own account.

Your players' data

For the players of your server (nickname, game identifiers, character data, position on the map, playtime, sanctions, economic transactions), you are the controller and we act as a processor within the meaning of Article 28 GDPR.

In that capacity, we only process this data to run the panel features you use, according to your settings, which serve as documented instructions, and for the duration of your subscription. If an instruction seems to us contrary to the GDPR, we let you know. The people who have access to it are bound by confidentiality, access is authenticated and secrets are encrypted. We help you respond to your players' requests and meet your own security obligations, and we notify you without delay of any data breach concerning them.

Our sub-processors for this data are the site host, the game machine host, the email sending service if you receive your alerts by email, and Discord if you connect your alerts to it. We notify you by email, before it takes effect, of any addition or replacement of a sub-processor; you can object by cancelling your subscription. Data sent to Discord, which may process it in the United States, is sent at your request, to the channel you have chosen, with the safeguards described above.

At the end of the contract, you can export this data, or ask us to return it to you, up until the server is deleted (Article 6). We then delete it, including from the panel database's backups once they expire; entries in the action log, a sanction for example, disappear no later than one year after they were recorded.

On written request, we provide you with the information needed to demonstrate compliance with Article 28 GDPR, and we allow audits, including inspections, carried out by you or by an auditor you appoint, with reasonable notice and under a confidentiality commitment. It is your responsibility to inform your players.

Your rights

You have the right of access, rectification, erasure, portability, objection and restriction of processing. To exercise them, write to contact@rayor.fr, or use the My account page: there you can download your data in JSON format, correct your billing details and request the erasure of your account. Your name, email and password are changed on Rayor Connect. We reply within one month.

You can object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest (action log, anti-abuse checks on trials, technical logs): we then stop it, unless there are compelling legitimate grounds, or it is necessary to establish, exercise or defend legal claims. You can also set instructions on the retention, deletion and disclosure of your data after your death.

The automatic refusal of a second free trial from the same internet connection can be reviewed by a person: just write to us.

Erasure is done by anonymising the account, once your servers have been deleted. The following are kept, for the periods stated above: paid orders, payments and invoices (accounting obligation; invoices already issued also remain with Stripe, with their details); the trial register, without your email address; and the action log, where your address as the author is replaced with “account erased”, though some lines may still cite it in detail until they are deleted.

If you believe your rights are not being respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).

8. Availability and liability

We use reasonable means to keep the panel and your server running continuously. This is an obligation of means: no availability rate is guaranteed.

Maintenance may interrupt the service. It is announced in advance whenever possible, and the state of the services is shown live on the public Service status page.

We do not automatically back up your game server (files and database). If a backup exists with the machine host, we restore it on request, without guarantee. Export what matters to you on a regular basis.

You are responsible for your server: its content, the mods, scripts and resources you install on it, and your players. You undertake to comply with the law and with the terms of use of Cfx.re and Rockstar Games.

Any outage attributable to us entitles you, on simple request by email, to a credit or a refund prorated to its duration.

If you are a business, our liability is limited, for all causes combined, to the sums you paid us during the 12 months preceding the event giving rise to it.

If you are a consumer, nothing in these terms limits your statutory rights, in particular the legal guarantee of conformity for digital content and services (Articles L224-25-12 et seq. of the French Consumer Code): in the event of a lack of conformity, you can have the service brought into conformity or, failing that, obtain a price reduction or the termination of the contract.

9. Right of withdrawal

If you are a consumer, you have 14 days from the conclusion of the contract to withdraw from it, without giving any reason (Article L221-18 of the French Consumer Code).

With every paid order, you expressly ask, through a separate box, for your server to be put into service immediately, without waiting for the end of this period. If you withdraw within 14 days, we refund what you paid, minus an amount proportional to the service provided up until the moment you informed us of your withdrawal (Article L221-25). The refund is made within 14 days of receiving your decision, using the same means of payment as for the order, unless you expressly agree to a different means (Article L221-24). It incurs no cost to you.

To withdraw, the simplest way is to use the Withdraw from the contract here feature, available on this site throughout the 14-day period: once you confirm, we immediately email you an acknowledgement of receipt showing the date and time of your withdrawal. You can also send us an unambiguous statement by email to contact@rayor.fr or by post to the address in Article 1, for example using the model form below.

Withdrawal ends the contract: the subscription is stopped at once, nothing more is charged, and the server is suspended then deleted like an ended subscription (Article 6). Remember to export what you want to keep.

The free trial involves no payment: there is nothing to refund.

Businesses buying for the needs of their activity are not entitled to a right of withdrawal, except in the case provided for by Article L221-3 of the French Consumer Code (a business employing five or fewer staff, for a contract that does not fall within the scope of its main activity).

10. Disputes

These terms are governed by French law.

If a problem arises, first send us a written complaint at contact@rayor.fr: we will look for an amicable solution with you.

If you are a consumer and this first exchange does not succeed, you can turn free of charge to the consumer mediator below (Articles L612-1 and L612-2 of the French Consumer Code), within one year of your written complaint.

Failing agreement, if you are a consumer, you may bring the matter, at your choice, before one of the courts with territorial jurisdiction under the French Code of Civil Procedure, or before the court of the place where you lived when the contract was concluded (Article R631-3 of the French Consumer Code). If you contracted as a trader, the courts within the jurisdiction of the Paris Court of Appeal have sole jurisdiction.

A question about this document? Write to us at contact@rayor.fr.