Privacy policy

• Account: name, email address and password (the password is stored only as a one-way hash; we cannot see it). If you sign in with Google/Discord we take only your name and verified email.
• Profile and content: cover/profile photo, bio, links, posts, comments, ratings, messages, lists and follow relationships. Anything you make public is visible to everyone; messages are visible only to the participants.
• Creator verification: the information and links you give in your verification application.
• itch.io import (optional): when you choose “Connect with itch.io” we get permission, through itch's official consent screen, only to read your project list (title, link, short text, cover image). Access is revoked right after the import; your password and itch keys never reach us and are not stored. The list is kept temporarily for at most 30 minutes so you can make your selection; only the mods you choose to import are kept.
• Steam, GitHub and YouTube connections (optional): Steam sign-in returns only your public Steam ID (a number) to us, from Steam's own page; for GitHub and YouTube only your public username/channel ID is stored. They are used only to read your public mod and video information; you can remove a connection any time.
• Check my mods: your mods folder is read in your browser; the files never reach us, only mod names and versions are sent for comparison and they are not stored.
• Security and abuse prevention: the IP address of requests (briefly, for rate limiting and blocking spam/attacks), your account's registration and last sign-in IP address and time (for account security and preventing ban evasion), warning and restriction records, report records and admin action logs.
• Statistics: page views are counted as cookie-less, anonymous totals and are not counted at all if “Do Not Track / Global Privacy Control” is on. Unique visitors are computed from a daily, irreversible digest of IP and browser details that is deleted the next day. Totals are also kept per country (without storing the IP), device type, operating system, browser, time on page, the referring site's domain only and the link's campaign tag (utm); none of these is linked to an individual. For the “active right now” count a temporary record keyed by the same daily digest is kept while the page is open and deleted after 10 minutes without a signal.

• To run your account and profile, let you sign in and reset your password (by email).
• To provide community features such as comments, messages, follows and notifications.
• To prevent fake accounts, spam, stolen content and attacks, and to review reports.
• To produce aggregate, non-personal statistics that help us improve the site.

We do not sell your data and do not share it with third parties for advertising.

Only as needed with the providers we use to run the service: hosting/servers, image storage (CDN) and an email delivery service. We may disclose data to authorities where legally required. When you follow a link to a third-party mod site, that site's own privacy policy applies.

We keep your data while your account is open. If you have your account deleted, your profile, posts, comments, messages and lists are permanently erased (except where a legal retention duty applies). Security logs are kept for a limited time.

Passwords are hashed, connections use HTTPS, login attempts are rate-limited and two-factor authentication is available. No system is 100% secure; tell us if you notice a problem.

Under the Turkish KVKK (Law No. 6698) and, where applicable, the GDPR you may access, correct, delete, object to the processing of and port your data. You can edit your profile yourself; for account deletion or any other request write to us via the contact page.

ModsPoint is not directed at children under 13. If you notice a child has opened an account, tell us and we will delete it.

Privacy questions: [email protected]. If we update this policy we will announce it on the site. For cookies see the cookie policy.