Privacy Policy

Last updated: September 19, 2025

Effective Date: September 19, 2025

1. Information We Collect

1.1 Personal Information You Provide

When you create an account or use our services, we collect:

• Account Information: Email address, username, password (encrypted)
• Profile Information: Display name, biography, avatar image, location (optional)
• Contact Information: Email address for communications and account recovery
• Payment Information: If applicable, billing details for premium services (processed securely through third-party providers)
• Support Communications: Information you provide when contacting customer support

1.2 Content and Usage Information

• Uploaded Content: Mods, files, descriptions, screenshots, and associated metadata
• User Activity: Downloads, uploads, ratings, reviews, comments, and favorites
• Search History: Search queries and filter preferences to improve recommendations
• Communication Data: Messages sent through our platform, forum posts, and community interactions

1.3 Automatically Collected Information

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Analytics: Pages visited, time spent, click patterns, feature usage
• Performance Data: Load times, error reports, crash logs for service improvement
• Security Logs: Login attempts, security events, and abuse prevention data
• Cookies and Tracking: Session data, preferences, and analytics cookies

1.4 Information from Third Parties

• Social Media Integration: If you connect social media accounts, we may receive profile information
• Anti-Fraud Services: Information from fraud prevention and security services
• Analytics Providers: Aggregated usage statistics and performance metrics

2. How We Use Your Information

2.1 Service Provision and Improvement

• Create and maintain your account
• Process uploads, downloads, and content management
• Provide customer support and respond to inquiries
• Personalize your experience and provide recommendations
• Analyze usage patterns to improve our services
• Develop new features and functionality

2.2 Communication and Marketing

• Send account-related notifications and updates
• Provide customer support communications
• Send promotional emails (with your consent, where required)
• Notify you of policy changes or important service updates
• Conduct surveys and gather feedback

2.3 Security and Compliance

• Detect and prevent fraud, abuse, and security threats
• Enforce our Terms of Service and community guidelines
• Comply with legal obligations and law enforcement requests
• Protect intellectual property rights and prevent piracy
• Monitor for prohibited content and malicious software

3. Information Sharing and Disclosure

3.1 We Do Not Sell Your Personal Information

Mod Works does not sell, rent, or trade your personal information to third parties for their marketing purposes.

3.2 When We May Share Information

• With Your Consent: When you explicitly authorize us to share information
• Service Providers: Trusted third parties who help us operate our platform (hosting, analytics, payment processing)
• Legal Compliance: When required by law, court order, or government request
• Safety and Security: To protect our users, platform, or public safety
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• Copyright Protection: To rights holders for DMCA compliance and anti-piracy efforts

3.3 Public Information

Certain information is publicly visible by design:

• Username and profile information you choose to make public
• Uploaded mods, descriptions, and screenshots
• Ratings, reviews, and comments on public content
• Download counts and popularity metrics

4. Data Security and Protection

4.1 Security Measures

We implement industry-standard security measures including:

• Encryption: Data encrypted in transit (TLS/SSL) and at rest
• Access Controls: Strict employee access controls and authentication
• Regular Audits: Security assessments and vulnerability testing
• Monitoring: 24/7 security monitoring and incident response
• Backup Systems: Regular backups with secure storage

4.2 Data Breach Response

In the event of a data breach, we will:

• Immediately investigate and contain the incident
• Notify affected users within 72 hours when required by law
• Provide clear information about what data was affected
• Take steps to prevent future incidents

5. Cookies and Tracking Technologies

5.1 Types of Cookies We Use

• Essential Cookies: Required for basic site functionality and security
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how users interact with our site
• Marketing Cookies: Used for targeted advertising (with your consent)

5.2 Managing Cookies

You can control cookies through:

• Browser settings to block or delete cookies
• Our cookie preference center (where available)
• Opt-out tools provided by advertising networks

6. Data Retention and Deletion

6.1 Retention Periods

• Account Data: Retained while your account is active
• Content: Retained until you delete it or close your account
• Usage Logs: Typically retained for 12-24 months
• Security Logs: Retained for up to 7 years for legal compliance
• Support Communications: Retained for 3 years after resolution

6.2 Account Deletion

When you delete your account:

• Personal information is permanently deleted within 30 days
• Public content may remain but will be anonymized
• Some data may be retained for legal or security purposes
• Backups are purged according to our retention schedule

7. Your Privacy Rights and Choices

7.1 Access and Control

You have the right to:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Export your data in a machine-readable format
• Restriction: Limit how we process your information
• Objection: Object to certain types of processing

7.2 Communication Preferences

• Unsubscribe from marketing emails using the link provided
• Adjust notification settings in your account preferences
• Contact us to opt out of certain communications

8. International Data Transfers

Mod Works operates globally, and your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place:

• Standard Contractual Clauses for EU data transfers
• Adequacy decisions where applicable
• Other legally recognized transfer mechanisms

9. Children's Privacy

We are committed to protecting children's privacy:

• Our service is not directed to children under 13
• We do not knowingly collect information from children under 13
• If we discover we have collected such information, we will delete it promptly
• Users aged 13-17 must have parental consent where required by law

10. Regional Privacy Laws

10.1 European Union (GDPR)

If you are in the EU, you have additional rights under the General Data Protection Regulation, including the right to lodge a complaint with your local data protection authority.

10.2 California (CCPA)

California residents have specific rights under the California Consumer Privacy Act, including the right to know what personal information is collected and the right to opt out of the sale of personal information.

10.3 Other Jurisdictions

We comply with applicable privacy laws in all jurisdictions where we operate.

11. Third-Party Services and Links

Our platform may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those external services. We encourage you to review their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. When we make material changes:

• We will notify you via email or platform notification
• We will update the "Last updated" date
• We may require you to acknowledge the changes
• Continued use of our service constitutes acceptance of the updated policy

13. Contact Information and Data Protection Officer

For privacy-related questions or to exercise your rights, contact us:

• Email: privacy@reckless-metro.com
• Data Protection Officer: legal@reckless-metro.com
• Privacy Request Portal: Available in your account settings
• Mailing Address: Available upon request

14. Enforcement and Compliance

We take privacy compliance seriously:

• Regular privacy impact assessments
• Staff training on privacy and data protection
• Cooperation with regulatory authorities
• Transparent reporting of our privacy practices