Privacy Policy

Data Collection

We collect minimal data necessary to provide authentication and access control services:

• Discord Profile Information: When you log in via Discord OAuth, we collect your Discord user ID, username, and avatar. This data is used solely for authentication purposes.
• Session Cookies: We use HTTP-only session cookies to maintain your login state. These cookies expire after 24 hours.
• Download Activity: We log download activity including username, IP address, file downloaded, and timestamp to maintain system integrity and enforce our terms of service.
• Usage Statistics: We collect aggregate download statistics to provide mod authors with download counts for their content and to monitor system usage.

How We Use Your Data

Your data is used exclusively for the following purposes:

• Authentication: To verify your identity and maintain your login session
• Access Control: To determine which files you have permission to download based on your Discord roles
• Security Monitoring: To enforce access control policies and maintain system integrity

We do not sell, share, or use your data for advertising purposes.

Discord Bot Permissions

Our Discord bot requires the following permissions:

• Read Guild Members: To verify which Discord servers you are a member of and which roles you have been assigned.
• Read Guild Roles: To display role names and enforce role-based access restrictions.
• Send Messages (in development): The bot may post update notifications about new mod releases in the future.

Guild membership and role data is used only for access control decisions and is not accessible to other users or administrators. The bot does not read your messages or perform moderation actions.

Third-Party Services

This service relies on the following third-party platforms:

• Discord: Used for authentication via OAuth. Please review Discord's Privacy Policy.
• Cloudflare: Provides hosting infrastructure (Pages, Workers, D1, R2, KV). Please review Cloudflare's Privacy Policy.

Data Retention

We retain data for the following periods:

• Session Data: Automatically expires after 24 hours of inactivity
• Download Logs: Retained indefinitely for security and access control enforcement purposes
• User Profiles: Retained while your account is active; basic information may be retained for administrative purposes after account deletion

Cookies

We use the following cookies:

• Session Cookie: An HTTP-only, secure cookie that stores your session identifier. This cookie is essential for authentication and cannot be disabled without losing access to the service.

Access to Download Data

Download information is accessed as follows:

• Mod Authors: Can view aggregate download counts for their own mods. No user information is shared with mod authors.
• Site Administrator: Has access to download logs containing usernames, IP addresses, timestamps, and files downloaded for security monitoring and terms enforcement.

Contact

For privacy-related questions or concerns, please visit our Contact page.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last Updated" date.