Privacy Policy

What we collect

• Your account: your email, handle, name, password (stored only as a hash, never readable), profile text and picture, and your settings.
• What you do here: mods you post, comments, vouches, scores, follows, downloads (so authors get their counts and you get your history), messages you send.
• Payments: what you paid for, when, and how much. Card and bank details never reach us: you enter them on Stripe's or PayPal's own pages, and they keep them.
• Authors who get paid: the payout email or username you give (PayPal, Venmo) or your Stripe account link. Identity and tax checks happen on Stripe's pages, not ours.
• Technical: a sign-in cookie, a few preference cookies (like your theme), and a scrambled form of your IP address to count views and stop abuse. We don't keep raw IP addresses with your activity.
• Discord: if you link it, your Discord id, name and picture.
• Ads: free accounts see a few ads from Google AdSense. Google may use cookies to show and measure them, and to personalise them where the law allows; visitors in Europe and the UK are asked first and can say no as easily as yes. Pass holders see no ads. See how Google uses data: https://policies.google.com/technologies/partner-sites

Why

To run the site, show your things to others, count downloads for authors, take and send payments, keep the site safe (spam, fraud, malware, ban evasion), and follow the law.

Who sees it

Your profile, mods, comments and public activity are public. Authors can see who downloaded their mods. We share data with the services that run the site, only for that purpose: [hosting provider], Cloudflare (network and security), Stripe and PayPal (payments), Discord (if you link it), [email provider]. We don't sell your data. We may share it if the law requires, or to protect people's safety or rights (for example a copyright notice can include the name the notice was about).

Ads

[If ads are added: the ad network, what it collects, and the choice to turn off personalised ads. The Pass removes ads.]

How long

Account data stays while your account is open. When you delete your account we remove your profile and content within [30] days, except what we must keep for the law (payment records, usually [7] years) or to stop abuse.

Your choices

You can see and change your data in Settings, download a copy by asking us, and delete your account in Settings. If you're in the EU, UK or a US state with privacy laws (like California), you have rights to access, correct, delete and object; email [privacy email] and we answer within 30 days.

Children

The site isn't for children under 13 and we don't knowingly collect their data. If we find an account of someone under 13, we close it.

Contact

[privacy email]. Changes to this policy are posted here with a new date.