Privacy Policy

Effective date: 2026-01-11

This Privacy Policy explains how Hymods ("Hymods", "we", "us", or "our") collects, uses, and shares information when you use our website, apps, and services (collectively, the "Service").

Information we collect

Information you provide

• Account information: such as name, email address, profile image, and authentication-related data.
• Creator and listing information: such as mod details (title, description, pricing, files you upload, and other metadata).
• Team and collaboration information: if you are invited to collaborate on a mod or modpack, we store membership and role/permission data.
• Communications: messages you send to us (for example, support requests).

Information collected automatically

• Usage data: such as pages viewed, actions taken, and timestamps.
• Device and network data: such as browser type, user agent, and IP address. For example, we may store an IP address and user agent in authentication session records for security, fraud prevention, and abuse prevention. We also use hashed IP information in certain analytics-like records (such as deduplicating views/downloads and rate limiting) to reduce how often we need to store raw IP addresses for those purposes.
• Cookies and similar technologies: used to keep you signed in, remember preferences (like theme), and help operate the Service.

Anti-abuse and anti-piracy measures (download fingerprinting)

For certain paid downloads, we may embed a digital fingerprint into the downloadable file (for example, by injecting a signed token into a mod JAR) to help identify the purchaser and deter unauthorized redistribution. This fingerprint may include information such as a user identifier, the content/version identifier, and a timestamp.

Payment information (Stripe)

Purchases on Hymods are processed by third-party payment processors such as Stripe. We do not store your full payment card number. We may receive and store limited payment-related information such as:

• Transaction metadata: order ID, items purchased, amounts, currency, and timestamps.
• Payment status: for example, whether a payment succeeded or failed.
• Receipts and references: such as a receipt URL or Stripe payment identifiers.
• Customer contact: such as the email address used at checkout.

If you are a creator receiving payouts, you may be required to set up a Stripe account (for example, Stripe Connect). Stripe’s privacy practices are governed by Stripe’s own policies.

CAPTCHA, email delivery, and third-party logins

We use Cloudflare Turnstile (CAPTCHA) to help prevent automated abuse. We also send account-related emails (such as verification and password reset emails) via Resend. If you sign in using a third-party provider (for example, GitHub), that provider will process your information according to its own policies.

How we use information

• Provide and operate the Service, including account creation, hosting listings, and enabling downloads.
• Process transactions, including purchases, payment confirmation, fraud prevention, and payout operations.
• Improve and secure the Service, including debugging, analytics, abuse detection, and enforcing policies.
• Prevent unauthorized redistribution of paid digital goods, including by embedding download fingerprints and investigating suspected abuse.
• Communicate with you, including responding to support requests and important notices.
• Comply with legal obligations, including tax, accounting, and regulatory requirements.

How we share information

We may share information in limited circumstances, including:

• Service providers: with vendors that help us operate the Service (for example, Cloudflare for hosting/storage and CAPTCHA, Stripe for payment processing and payouts, Resend for email delivery, and Discord for notification delivery when configured).
• Marketplace participants: if you purchase from a creator, we may share relevant order details with that creator (for example, what was purchased, the amount, and information necessary to provide access and support).
• Legal and safety: to comply with law, respond to legal process, or protect the rights, safety, and security of Hymods, users, or the public.
• Business transfers: in connection with a merger, acquisition, reorganization, or sale of assets.

Where information is processed

We operate using cloud infrastructure and service providers that may process data in different countries. Where required, we take steps designed to provide appropriate safeguards for cross-border data transfers.

Data retention

We retain information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods can vary based on the type of data and how it’s used.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. However, no method of transmission or storage is 100% secure.

Your choices and rights

Depending on where you live, you may have rights to access, correct, export, or delete certain information, and to object to or restrict certain processing. To request help with these rights, contact us using the information below.

Note: if a paid mod file has been downloaded with an embedded fingerprint, that fingerprint may persist in copies of the file outside of Hymods’ systems (for example, if the file is backed up or redistributed). Deleting your account does not automatically remove fingerprints from files that have already been downloaded.

Children’s privacy

The Service is not intended for children under 13 (or the minimum age required in your jurisdiction). If you believe a child has provided us personal information, please contact us.

Changes to this policy

We may update this Privacy Policy from time to time. We will update the effective date and, if changes are material, we may provide additional notice.

Contact us

If you have questions about this Privacy Policy, email us at hello@hymods.io.