Skip to main content

Privacy Policy

Last updated: 12 November 2026

On this page
  1. 1. Overview
  2. 2. Information we collect
  3. 2.1 Account information
  4. 2.2 Profile pictures
  5. 2.3 Favourites
  6. 2.4 Technical and usage data
  7. 2.5 Download counts
  8. 2.6 Emoji recents
  9. 2.7 Cozy badge preferences
  10. 3. How we use your information
  11. 4. Third-party services
  12. 5. Cookies and local storage
  13. 6. Where data is stored
  14. 7. Data retention
  15. 8. Your rights
  16. 9. Children
  17. 10. Security
  18. 11. Changes to this policy

1. Overview

This policy explains what personal information ModdedMana ("the site", "we") collects, why we collect it, and how it is handled. We keep data collection to the minimum needed to run a hobby community site. There is no advertising on the site. We do use Cloudflare's privacy-friendly Web Analytics to count visits (no cookies, no cross-site tracking — see section 4); if anything like that ever changes, this policy will be updated (see section 11).

2. Information we collect

2.1 Account information

If you register, we collect the information you provide on the registration form: username, email address, first name, last name, and a hashed password. A join date is recorded. Your password is stored only as a secure hash and is never readable.

2.2 Profile pictures

If you upload a profile picture (JPG, PNG, GIF or WebP, up to 5 MB), the image is stored on our server and displayed publicly on your account, just like on other community sites. You can replace or remove it at any time.

2.3 Favourites

Tracked games you "star" are stored in your account if you are logged in. For visitors without an account, favourites are kept in a cookie on your device (see section 5).

2.4 Technical and usage data

Like almost every website, our server (and hosting provider) records basic technical information in log files: IP address, browser type, date/time of requests, and the pages visited. Whenever a page requires login, your IP address is additionally logged as part of the site's standard security and login logging. We use this for security, troubleshooting and abuse prevention.

To deter automated abuse, the YouTube Tool, the Itch Randomizer and the mod downloads page apply short-lived, automatically-expiring rate limits keyed by a one-way hash of the connection's IP address — never the raw IP — which are not linked to your account and are not used for anything else.

2.5 Download counts

The mods page shows download counts ("downloads" and "unique downloads"). When you download a mod, we record that a download occurred so the counter can increase. To estimate "unique" downloads without collecting personal information, we place a small random anonymous identifier in your browser (a cookie) and store only a one-way hash of it against each mod. We do not store your IP address against a download and do not keep logs of who downloaded what. To deter scripted downloads we also apply a brief, non-persistent connection-based limit — about one download slot per mod available, capped at 12 per minute — that expires on its own and is never written to a log or kept permanently.

2.6 Emoji recents

Mana's 'Mojis page remembers your recently copied emoji so they are easy to find again. For guests this is held in a cookie on your device; if you are logged in, a small list of recent emoji is kept in your account so it follows you between browsers. Either can be cleared whenever you like.

2.7 Cozy badge preferences

The Cozy Tracker lets you toggle the Early Access and Demo badges on or off per game. Guests' choices are held in a cookie on your device; logged-in users' choices are stored in their account. They contain no identifying information about you and are used only to show the badges as you prefer.

3. How we use your information

  • To create and manage your account, and to send account-related emails (e.g. email verification or password reset).
  • To provide and improve the site's features, such as favourites and profile pictures.
  • To show public download counts on the mods page.
  • To secure the site, detect abuse, and respond to support requests.

We do not sell, rent or trade your personal information. We do not use it for advertising or marketing.

4. Third-party services

The site relies on a few external services, all used strictly to provide features:

  • Steam (Valve) — player counts and release dates for the trackers (server-side API queries; no personal data is sent).
  • YouTube / Google — the YouTube Tool, video embeds and live-status checks. When you play an embedded video or use the YouTube Tool, Google's own privacy policy applies to data it collects. Video thumbnails shown by the YouTube Tool are loaded from Google's image servers, which receive standard request information.
  • Twitch (Amazon) and Kick — live-status checks (server-side).
  • itch.io — the Itch Randomizer works from itch.io's public catalogue (server-side) and may show game thumbnails loaded from itch.io's image servers.
  • Google Fonts — fonts loaded from fonts.googleapis.com / fonts.gstatic.com, which receives standard request information (such as your IP address) when fonts load.
  • jsDelivr CDN — hosts the Bootstrap framework files; likewise receives standard request information.
  • Cloudflare — the site is served through Cloudflare, which receives standard request information (such as your IP address and user agent) in order to deliver the page, apply caching and rate limiting, and provide basic security protection. Cloudflare also obfuscates email addresses shown in our pages, so the contact addresses in these policies appear as a placeholder until your browser restores them.
  • Cloudflare Web Analytics — pages load a small script (static.cloudflareinsights.com) that reports anonymised, aggregated visit statistics (page views, visits, referrers). It stores no cookies in your browser and does not fingerprint you or follow you across other sites; individual visitors are never identified to us.

These services have their own privacy policies, so we recommend you review them if you are concerned.

5. Cookies and local storage

We use a small number of cookies and a couple of local-storage values:

  • Session cookie (essential) — keeps you logged in while you use the site.
  • Remember-me cookie (optional) — if you choose "remember me", a cookie keeps you logged in for a longer period.
  • Favourites cookie (guest favourites) — stores your starred game ids for a limited time so favourites work without an account.
  • Download identifier (mod downloads) — a random, anonymous token placed in your browser when you download a mod; used only to estimate unique downloads. We keep only a one-way hash of it, never the raw value, and it is not linked to your account.
  • Emoji recents cookie (guests) — your recent 'Mojis copies, kept on your device for a year; logged-in users' recents live in their account instead.
  • Cozy badge preferences cookie (guests) — your Early Access / Demo badge toggles for the Cozy Tracker; logged-in users' choices are stored in their account.
  • Tool settings (ROM Patcher) — settings you choose in the in-browser ROM Patcher are kept in your browser's local storage only; they never leave your device. Playing an embedded YouTube video may also set Google's own cookies in your browser.

The site uses a single, fixed dark theme — no theme preference is stored.

You can block or delete cookies in your browser settings. Essential cookies are required for an account-based experience; the rest of the site remains usable without them.

6. Where data is stored

The site and database are hosted on servers operated by our hosting provider (hosting-data.io), and requests pass through Cloudflare's network before reaching that host. Data may therefore be processed in servers and networks located outside the country where you are based, as is standard for shared web hosting and content delivery.

7. Data retention

Account data is kept while the account exists. If you want your account and its data removed, email us at [email protected] — we generally delete on request unless we are required to keep records for legal, security or anti-abuse reasons. Server log files are kept only as long as needed for operational and security purposes.

8. Your rights

Depending on where you live (for example, under the Australian Privacy Act or the EU/UK GDPR), you may have rights to:

  • access the personal information we hold about you;
  • ask us to correct inaccurate information;
  • ask us to delete your information;
  • object to or restrict certain processing.

To exercise any of these rights, contact us at [email protected]. We will respond within a reasonable time.

9. Children

The site is not directed at children under 13. Registration requires users to be 13 or older and we do not knowingly collect personal information from children under that age.

10. Security

We apply reasonable technical measures: passwords are stored as salted hashes, connections use HTTPS, forms are protected against CSRF, and account changes require re-authentication where relevant. No method of transmission or storage is 100% secure, but we work to protect your data.

11. Changes to this policy

We may update this policy from time to time. The current version will always be available on this page, with the "last updated" date shown above. If we introduce advertising or third-party analytics, or make any other material change to what data is collected, this policy will be updated before that happens.