This Privacy Policy explains what data FoundryMods (“we”, “us”) collects, why we collect it, and how it is used. FoundryMods is operated by Baileywiki.
1. Information We Collect
Account information
When you sign in, we receive your identifier and email address from Baileywiki Central (our identity provider). We store a user record so we can associate claimed modules, loadouts, comments, and subscription state with you.
Module ownership & releases
If you claim a module or upload a release, we store the module metadata, manifest contents, your release files, optional GitHub repository URL, and an activity log of releases and API actions.
Patreon
If you connect Patreon as a creator or as a patron, we store tokens needed to verify membership tiers and refresh them. We do not retain Patreon billing information. Patron tier data is used only to gate downloads as configured by the module owner.
API keys
Module owners may generate scoped API keys for the Release API. We store a secure hash of the key, its scopes, and its activity history; the plaintext key is shown once at creation time only.
Usage data
We log basic request information (timestamps, paths, IP-derived region, user-agent) for security, abuse prevention, and capacity planning. We may use privacy-respecting analytics to understand aggregate usage of the directory.
Cookies & local storage
We use cookies and browser storage strictly to keep you signed in, remember UI preferences (such as grid vs. list view), and maintain CSRF protection. We do not use third-party advertising cookies.
2. How We Use Information
- Operate the directory, search, and module landing pages.
- Authenticate you and protect your account.
- Deliver gated downloads to authorized patrons.
- Process the optional creator subscription.
- Communicate service notices, security alerts, and changelog updates.
- Investigate abuse and enforce these Terms.
3. Service Providers
We share data with the minimum set of providers needed to run the Service:
- Baileywiki Central — identity, credit metering, creator subscription.
- Cloudflare R2 — storage of uploaded module ZIP packages.
- Patreon — when you connect, for membership tier verification.
- Hosting & backend infrastructure — to operate the application and database.
- Email delivery — for transactional notifications you opt into.
These providers process data on our behalf under their own terms and security commitments.
4. Public Content
Module listings, descriptions, screenshots, comments, public loadouts, and developer profile pages are intentionally public. Do not put information in these fields that you do not want indexed by search engines.
5. Data Retention
We retain account data while your account is active. Activity logs and request logs are retained for a rolling window sufficient for security and operational needs (typically 90–365 days). Uploaded release files persist until you delete them or your account, subject to short-term backup retention.
6. Your Rights
You can:
- Access and update your profile via the account page.
- Disconnect Patreon at any time from the relevant module.
- Revoke API keys you have created.
- Request export or deletion of your account data by emailing us.
Depending on your location, you may have additional rights under GDPR, UK GDPR, CCPA, or similar laws (access, rectification, erasure, portability, objection). To exercise them, contact Baileywiki.
7. Security
We use TLS in transit, hashed credentials, row-level security on our database, and scoped server-side access for write operations. No system is perfectly secure; report suspected vulnerabilities to Baileywiki.
8. International Transfers
The Service is operated from infrastructure that may process data outside your country of residence. Where required, we rely on appropriate safeguards for cross-border transfers.
9. Children
The Service is not directed at children under 13 (or the minimum digital-consent age in your jurisdiction). We do not knowingly collect data from them; if you believe a child has provided personal data, contact us and we will delete it.
10. Changes
We will post material changes to this Policy on this page and update the “Last updated” date. Significant changes may also be announced in the changelog.
11. Contact
Questions about this Policy can be sent via our contact form.
See also our Terms of Use.