This site can embed mod preview images directly from ar-gcp-cdn.bistudio.com (Bohemia Interactive CDN) — without downloading to our servers. Load external content?

Privacy Policy

Last Updated: March 5, 2026

1. Introduction

Welcome to MoDiscover ("we," "our," or "the platform"). We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

This policy explains how we collect, use, and safeguard your information when you use our services, including our website, API, and community features.

2. Data We Collect & Visibility

We collect only the minimum amount of data necessary to provide and secure our services.

Account & Profile
  • Email Address: Used for authentication (Magic Links) and critical notifications.
  • Discord Integration: If you log in via Discord, we store your Discord ID and Username to link your account.
  • Display Name: A public name chosen by you for community features. Note: Your display name is searchable by other users when they invite collaborators to their mod lists.
  • Password: If set, stored only as a secure cryptographic hash (argon2/bcrypt).
User Content
  • Mod Lists: Collections of mods you create, including descriptions and metadata.
  • Suggestions: Mods you suggest to other lists, including your reasons and form answers.
  • Votes: Records of your upvotes or downvotes on community suggestions.
Technical Logs
  • IP Address: Logged briefly for rate-limiting, security monitoring, and abuse prevention.
  • Browser Metadata: User-agent strings and language settings used to optimize site rendering.
  • Trace IDs: Unique identifiers for debugging API requests (non-persistent).

3. Legal Basis for Processing

Under the GDPR, we process your data based on the following legal grounds:

  • Contractual Necessity (Art. 6(1)(b) GDPR): To provide the core services you signed up for (e.g., managing your mod lists).
  • Legitimate Interests (Art. 6(1)(f) GDPR): To ensure the security of our infrastructure, prevent spam/abuse, and improve the user experience.
  • Consent (Art. 6(1)(a) GDPR): For optional features such as marketing-related notifications (if implemented in the future).

4. Data Retention & Deletion

We retain your personal data only as long as your account is active or as needed to provide you with services.

  • Account Data: Permanently deleted immediately upon your request via the "Delete Account" feature.
  • Verification Tokens: Automatically expire and are purged after 24 hours.
  • Backups: Encrypted backups are kept for up to 30 days and are overwritten on a rolling schedule.

5. Data Sharing & Third Parties

We do not sell your data. We only share data with third parties when strictly necessary:

  • Authentication Providers: If you use Discord login, Discord receives metadata about the login attempt.
  • Infrastructure: Our servers are hosted within the EU/EEA (Hetzner Online GmbH) to ensure GDPR compliance.
  • Legal Requirements: If required by law to comply with a valid legal process.

6. Your Rights (GDPR)

You have comprehensive rights regarding your data:

Access & Portability

Download a complete copy of your data in JSON format via the settings menu.

Right to Erasure

Delete your entire account and all associated records permanently at any time.

Correction

Update your email, display name, and preferences directly in your profile.

Right to Complain

You have the right to lodge a complaint with a data protection authority.

7. Cookies & Local Storage

We do not use tracking or advertising cookies. The only data we store on your device is strictly necessary for the technical functionality of the service:

  • Authentication Cookie (auth_token): We use a secure, HttpOnly cookie to maintain your login session across page loads and securely authenticate API requests. This is a strictly necessary cookie required for the core functionality of the site.
  • Local Storage: We use local storage to save your website preferences (e.g., image loading consent, active UI tabs, folder views, and list filters). Specifically, the baw_cookieConsent key is used to remember that you have acknowledged our strictly necessary cookie policy so the banner does not show again. This data never leaves your device.

By logging in, you agree to the use of these essential session cookies. No personal information is tracked across other websites.

8. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us at:

sebastian@unterschutz.de