Privacy Policy
How this mod community handles accounts and uploaded files.
Last updated: 2026-10-05
Accounts and public contributions
We store the name, email address, password hash, and session information needed to operate your account. Your display name appears next to mods you publish. Your email address is not included in the public mod listing.
Mod titles, game names, descriptions, installation instructions, version information, archive filenames, and download counts are public. ZIP archives that you publish can be downloaded by anyone. Do not include passwords, API keys, personal documents, or other private information in an upload.
Storage and cookies
Account and mod metadata are stored in Cloudflare D1. Uploaded ZIP archives are stored in a private Cloudflare R2 bucket and delivered through the site's download endpoint. Session cookies keep you signed in; locale and appearance preferences may also be stored in your browser.
Website analytics
We use Google Analytics 4 to understand website traffic and interactions such as page views, scrolling, and outbound link clicks. Analytics uses browser identifiers and cookies to measure visits and sessions. Our integration does not send account email addresses, passwords, or uploaded ZIP contents to Google Analytics. Learn more about Google Analytics cookies and Google's privacy policy.
Removing a publication
Use My mods to unpublish a mod. This removes the listing from public results and disables future downloads through the site. Unpublishing does not immediately erase the stored archive or metadata, and cannot recall files that other people already downloaded.
External services
Links to GitHub and AI asset providers lead to independently operated services with their own privacy policies. Installing the upstream toolkit is a separate action you perform on your computer. This website does not read your game folders.
Requests and support
You can update your profile in account settings. For account-data or archive-erasure requests, use the support ticket page while signed in. Avoid including passwords or other secrets in a support request.