Privacy policy

This policy explains what personal data ModBurn collects, why, and what you can do about it. It covers this website only. Mod files are hosted on the creators' own sites (Modsfire, MediaFire, Ko-fi, Patreon and others), which have their own privacy policies.

Who is responsible

The data controller is the operator of ModBurn. We follow the EU General Data Protection Regulation (GDPR) and the Turkish Personal Data Protection Law (KVKK, No. 6698).

What we collect

• Account data: username, email address, password (stored only as a one-way hash), and whatever you add to your profile: display name, bio, location, links, avatar and banner.
• Google or Discord sign-in: if you use it, we receive your account id, email address, name and profile picture from that service, and your Discord username for Discord. We never see your Google or Discord password.
• What you post: mods and their screenshots, comments, ratings, likes, follows, collections and reports. Public items are visible to everyone.
• Technical data: a login cookie, the time you were last active, and your IP address in short-lived server logs and abuse protection (for example, limiting failed login attempts).

We do not run advertising or analytics trackers, and we do not sell personal data.

Why we use it

• To run your account and show the content you publish (performing our agreement with you).
• To keep the site safe: moderation, preventing spam, abuse and stolen re-uploads (legitimate interest).
• To answer you when you contact us.

Cookies

We use one essential cookie that keeps you logged in and protects forms against forgery. It is needed for the site to work, so there is no cookie banner. Embedded YouTube videos load only through YouTube's privacy-enhanced mode (youtube-nocookie.com); videos on mod pages load only after you click play.

Services we rely on

These providers process data on our behalf, or when you choose to use them:

• Hosting: our server is in the European Union.
• Cloudflare: protects the site and speeds it up; it sees your IP address and request details.
• bunny.net: stores and delivers uploaded images and videos; it sees your IP address when you load them.
• Google Fonts: serves the fonts on this site.
• Google and Discord: only if you sign in with them.
• YouTube: only for videos embedded by creators or on the homepage.

Some of these companies are based outside your country, including in the United States. Where that applies, they rely on the legal safeguards required by GDPR and KVKK.

How long we keep it

Account data stays until you ask us to delete your account. We then remove your profile, mods and uploads. Server logs are kept for up to 14 days for security.

Your rights

You can see and edit most of your data in Settings. You can also ask us for a copy of your data, its correction or deletion, or object to how we use it. You may also complain to your data protection authority (in Türkiye: the KVKK Board, in the EU: your national authority).

Age

You must be at least 13 years old to create an account, or older where your local law requires it.

Changes

If we change this policy, we update the date at the top. For bigger changes we will post a notice on the site.