Privacy Policy

This privacy policy explains how vcodmods.com collects, processes, and protects personal data in accordance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy standards.

In short: Only the data necessary to operate the platform, ensure security, and provide community features is collected. No personal data is sold, no advertising trackers are used, and no profiling takes place. This is a non-commercial hobby project.

1. Contact

Website: vcodmods.com
Email: admin@vcodmods.com
Discord: gatsby2620

2. What Data Is Collected

• Registration & Activity: Username, email address, and IP address are stored during registration, login, uploads, downloads, and password resets. Basic account status information such as email confirmation and approval status is also stored.
• Security Logging: Failed login and password reset attempts are stored with username, IP address, and timestamp to protect against brute-force attacks. Active login sessions including user agent and IP address may also be recorded.
• Session Tracking: IP address and user agent are processed for logged-in and anonymous users to detect abuse, enforce limits, and protect the platform.
• API Usage: API requests may log IP address, user agent, accessed endpoint, and associated username (if available) to enforce rate limits and prevent abuse.
• Platform Usage: Data related to downloads, uploads, comments, likes, ratings, private messages (including message content and recipient), and optional profile details such as avatars, location, website links, and social media information is stored.
• Email Notifications & System Emails: Optional email notifications for private messages, mentions, comments, replies, and mod updates can be enabled or disabled in the account settings (disabled by default). Mandatory system emails are sent only for email confirmation during registration and for account activation. No marketing or promotional emails are sent.

3. Analytics & CAPTCHA

Umami Analytics and Altcha CAPTCHA are used in self-hosted, cookie-free, GDPR-compliant configurations. No personal data is shared with third parties.

4. Purpose of Data Use

• To provide access to modding features and site content
• To verify email ownership and perform manual account approval
• To prevent abuse and maintain platform security
• To enable community features such as uploads, comments, likes, ratings, and private messages
• To send optional email notifications based on user preferences

5. Data Retention

Personal data is retained as long as an account remains active. When an account is deleted, all associated data (including uploads, comments, private messages, and profile information) is removed.

Encrypted backups are created every 24 hours and stored for seven days. Deleted data may remain temporarily in encrypted backups until overwritten. Backups are accessible only to the administrator.

Accounts without email confirmation may be removed after approximately three days.

6. Your Rights

• Access: A copy of stored personal data may be requested via admin@vcodmods.com.
• Deletion: Account and associated data may be deleted on request.
• Correction: Profile information may be updated at any time. Username and email address cannot be changed manually.

7. Data Sharing

Personal data is not sold, rented, or shared with third parties.

8. Security Measures

Data protection includes HTTPS encryption, IP logging, brute-force protection, CSRF tokens, and restricted access.

9. Use of bunny.net Services

bunny.net is used as a content delivery network (CDN) to deliver static content, improve performance, and enhance security. When the website is accessed, connection data such as requested resources is technically processed by bunny.net.

IP anonymization is enabled at bunny.net, meaning that full IP addresses are not stored in CDN logs. Depending on routing configuration, technical request data may be processed via servers inside or outside the European Union.

Provider: BunnyWay d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia
More information: bunny.net/gdpr

10. Use of UserCheck.com

UserCheck.com is used during registration to detect disposable or temporary email addresses. Only the entered email address is submitted.

• No IP addresses are transmitted
• No permanent personal data is stored
• Processing takes place entirely within the EU
• Anonymized security logs may be stored for up to 30 days

11. Use of Proxycheck.io

Proxycheck.io is used to determine whether an IP address is associated with a VPN or proxy service.

• VPN/proxy IPs may be stored by Proxycheck for up to 1 year
• Clean IPs are processed briefly and not logged
• All processing is GDPR-compliant

More information: Proxycheck.io GDPR

12. Data Location

All personal data processed by vCoDMods.com — including account data, uploads, comments, private messages, logs, and backups — is stored and processed on servers located within the European Union.

CDN-related processing is handled by bunny.net. Due to IP anonymization, no full IP addresses are stored in CDN logs. Depending on routing, technical request data may be processed via infrastructure inside and outside the EU, as described in section 9.

13. Discord Integration (Partner Pages)

Public Discord API endpoints may be used to display partner server statistics. No personal Discord user data is accessed or stored.

14. Server Log Files

Server logs may include IP addresses, timestamps, and requested URLs for security and operational purposes. These logs are not linked to user accounts.

15. California & U.S. State Privacy Rights

Residents of U.S. states with privacy laws may request access to or deletion of personal data. Personal data is not sold.

16. Cookies & Tracking

vCoDMods.com does not use advertising or tracking cookies. Only technically necessary, first-party security cookies are used:

• PHPSESSID – Required for login functionality and maintaining the user session.
• bunny_shield – Confirms successful completion of Bunny.net’s JavaScript Proof-of-Work challenge.
• bunny_shield_chk – Validates the integrity of the bunny_shield cookie and prevents tampering.
• bunnyshield_id – Persistent anonymous browser ID used for bot detection (no personal data stored).
• bunnyshield_bd – Non-invasive browser fingerprint for detecting spoofed or automated clients.

These cookies are strictly required for security and functionality. They are never used for advertising, cross-site tracking, or marketing.

17. Automated Decision-Making

vCoDMods.com does not use automated decision-making or profiling that significantly affects users as defined under GDPR Article 22.

18. EU Opt-Out Notice

EU users may contact admin@vcodmods.com at any time to exercise their rights. vCoDMods.com does not perform personalized tracking or advertising that requires consent.

19. Changes

This policy may be updated periodically. Please review this page for the latest version.

Last updated: December 06, 2025