Privacy, without the fog.

This Privacy Policy applies to PalMods and related websites, APIs, community features, and applications that link to it (the “Service”). In this policy, “PalMods,” “we,” and “our” mean the operator of PalMods.

It does not cover an independent mod author's website, donation page, source repository, or another third-party service you choose to visit. Those services set their own privacy rules.

Account and authentication data

When you create an account, we process your email address, account identifier, authentication method, session information, and security events. If you choose Discord, GitHub, or Google sign-in, the provider sends us the identity details needed to authenticate you, such as a provider account ID, email address, display name, or avatar.

Profile and community data

We store profile fields you choose to provide, including your handle, display name, bio, avatar, banner, timezone, links, mature-content preference, follows, blocks, badges, and notification state. We also store the content and interactions you create: mods, files, images, descriptions, comments, reviews, votes, reactions, collections, bug reports, endorsements, saved searches, and related metadata.

Uploads and safety results

Uploaded archives and images are stored with technical details such as file name, size, checksum, type, version, and compatibility information. We also store malware-scan, archive-inspection, static-analysis, and image-safety results. Safety reports may include archive paths, detected script behavior, scan verdicts, and moderation categories.

Usage and device data

Our servers and infrastructure receive standard request information such as IP address, browser or device details, requested URL, timestamps, and referrer. For mod view and download deduplication, PalMods stores a pseudonymous hash derived from the IP address rather than the raw address in the event record. If you are signed in, an event may also be associated with your account. Download records can include the mod, file, referrer, platform, and game version.

Messages, reports, legal requests, and Discord community data

Contact messages, reports, and rights claims can include your account ID, name, email address, subject, message, target content, description, attestations, and our response. If you use the official Discord community or account-linking command, we may process your Discord user ID, linked PalMods profile ID, moderation warnings, reasons, moderator ID, and action timestamps.

We receive information in three main ways:

• From you when you register, edit a profile, upload a file, publish content, change settings, submit a report, or contact moderators.
• Automatically when your browser, app, or API client requests a page, uses a feature, views a mod, downloads a file, or triggers a security control.
• From services you choose, such as an OAuth provider or Discord account link, and from safety providers that return scan or moderation results.

You do not have to provide optional profile details. Some information is required to create an account, publish content, complete a security check, or respond to a legal claim.

We use information to provide, protect, and improve the Service:

Where consent is the basis, you may withdraw it at any time. Withdrawal does not make earlier processing unlawful. Where legitimate interests are the basis, we consider the benefit to the community against the privacy impact and use proportionate safeguards.

PalMods is a publishing and community service. Your handle, display name, avatar, bio, public links, badges, public mods, uploaded media, public collections, comments, reviews, bug reports, reactions, and visible activity can be seen by other users and may be indexed by search engines.

Do not post an email address, legal name, precise location, account credential, private key, or other sensitive information in a public field. Public content may be copied or cached by others outside our control even after you edit or delete it.

Private account details, raw security data, private moderation records, and rights-claim contact details are not intentionally shown on public profiles. Staff may access them when needed for support, moderation, security, or legal compliance.

We use service providers to run specific parts of PalMods. They process information for the purpose shown below and under their own contractual and legal obligations.

We may also disclose information:

• when you direct us to, such as publishing content or linking an external account;
• to investigate abuse, protect users, enforce the Terms, or defend legal rights;
• to comply with valid law, court orders, or government requests;
• during a merger, reorganization, financing, or transfer of the Service, subject to appropriate safeguards; or
• in aggregated or de-identified form that does not reasonably identify you.

PalMods uses essential browser storage and cookies for authentication, account sessions, security, and preferences. These are needed for signed-in features and are not used for advertising.

Google Analytics is optional. The Google tag stays off unless you select Allow analytics. If allowed, Google may receive the page URL, browser and device information, approximate location, interaction data, and first-party _ga identifiers. PalMods does not send your PalMods account ID to Google, and Google Signals and advertising personalization are disabled in our configuration.

Your choice is stored in your browser under palmods.analytics-consent.v1. Use Analytics choices in the footer to change it. Turning analytics off disables future collection through our tag and removes accessible Google Analytics cookies for PalMods; it cannot recall data already sent to Google.

We keep personal information only as long as reasonably needed for the purposes in this policy. Retention depends on the type of record and why it exists:

• account, profile, and owned community content generally remain until you delete them or your account;
• view, download, rate-limit, and security records are kept as needed for statistics, deduplication, abuse prevention, and troubleshooting;
• aggregate statistics may remain after underlying events or accounts are removed;
• reports, moderation actions, rights claims, audit records, and Discord warnings may be kept as needed for safety, dispute handling, repeat-abuse prevention, and legal compliance; and
• backup or cached copies can persist for a limited period after deletion before they cycle out.

When you use account deletion, PalMods removes the authentication account and associated owned database content and attempts to remove uploaded files and profile media from object storage. We may retain limited information when necessary to comply with law, resolve disputes, prevent fraud, enforce the Terms, or protect users.

PalMods uses technical and organizational safeguards designed for the nature of the Service, including access controls, server-side authorization, row-level database policies, short-lived signed download links, upload validation, malware and image-safety checks, rate limits, and audit records for sensitive staff actions.

No online service can guarantee perfect security. Keep your sign-in method secure, use a unique password where password sign-in is available, and contact moderators promptly if you suspect unauthorized account use. Do not send secrets or sensitive personal information through public profiles, comments, uploads, or Discord channels.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal information. PalMods provides these practical controls:

• edit profile details, links, timezone, mature-content visibility, and blocks in Settings;
• download a JSON export of profile and core community data from Settings;
• permanently delete your account and owned content from Settings;
• change optional Google Analytics consent using Analytics choices in the footer; and
• delete or manage eligible mods and community content through their author controls.

To exercise another right, follow the contact steps below. We may need to verify your identity and clarify the request. Authorized agents may be required to show permission to act. We will not discriminate against you for exercising a privacy right, and you may appeal a denied request by replying through the same contact channel.

PalMods does not sell personal information or share it for cross-context behavioral advertising, so there is no sale or targeted-advertising opt-out to process.

PalMods is not directed to children under 13, and we do not knowingly collect personal information from a child below the minimum digital-consent age that applies where they live. If you believe a child has provided personal information without valid permission, contact us so we can investigate and remove it where required.

Content labeled mature or adult is intended only for users who are at least 18. A mature-content preference is stored on the profile so the Service can hide or show eligible material. Sexual content involving minors is prohibited regardless of any label or setting.

PalMods and its service providers may process information in the United States and other countries where they operate. Those countries may have privacy laws different from the laws where you live. Where required, transfers are made using recognized legal safeguards or another lawful transfer basis.

If European data-protection law applies, you may also have the right to complain to the supervisory authority where you live, work, or believe a violation occurred. We encourage you to contact us first so we can try to address the concern.

We may update this policy as PalMods adds features, changes providers, or responds to legal and security developments. The date at the top identifies the latest version. For a material change, we will provide a prominent notice in the Service or another form of notice when required by law.

A change applies from its stated effective date. We will request new consent when the law requires it rather than treating continued use as consent for a new optional use of personal information.

The fastest way to manage account data is through Settings. If you cannot access your account or need to make another privacy request, use the private contact form. Do not include a password, authentication code, or identity document in the initial message; staff will provide a private verification path if one is required.

Use the DMCA / IP takedown form for copyright or other rights claims. For a privacy request, describe the right you want to exercise and the PalMods account involved; staff will provide a private verification path if needed.