Privacy Policy
This policy explains which personal data mods.vc collects and why.
What we collect
- Account data: your display name, username, email address and a hashed password. If you enable two-factor authentication or passkeys, we store the data needed for them.
- Profile data: anything you add to your public profile, such as a bio, avatar or donation links.
- Content: the mods, images, reviews, comments and reports you submit.
- Usage data: download records, the time you were last active, and the IP address and browser of your active sessions. Server logs keep IP addresses for security purposes.
Why we use it
- to run your account and the platform
- to show your public profile and contributions
- to count downloads and prevent abuse, spam and fraud
- to moderate content and enforce the Terms of Service
- to send you account emails, such as verification, password reset and moderation notices
We do not sell your data, and we do not show third-party advertising.
What is public
Your username, display name, profile, mods, reviews and comments are public. Your email address is never shown to other users.
Cookies
mods.vc uses only the cookies it needs to work: a session cookie and a CSRF protection cookie. We do not use tracking cookies.
Retention
We keep your data while your account exists. When you delete your account, your name, username, email address, bio, avatar, donation links, passkeys, API tokens and sessions are removed or anonymised straight away. Your public mods are archived, and your reviews and comments stay online under "Deleted user".
Other data is removed automatically on a fixed schedule:
- Sessions expire after 2 hours of inactivity.
- Unfinished uploads are deleted after 7 days.
- Draft versions that were never submitted are deleted after 60 days.
- Mods you delete are permanently removed, together with their files, after 30 days.
- Quarantined uploads (files flagged as malware) are deleted after 30 days.
- Raw download records use hashed IP addresses and are deleted after 90 days. Only daily totals per mod are kept.
- Security logs are kept for 90 days.
- IP addresses and browser details in audit entries are removed after 12 months by a monthly cleanup. The audit entries themselves are retained.
Your rights
You can view and change most of your data in your profile settings, and you can delete your account at any time. To request a copy of your data, or for any other privacy question, contact us on Discord.