Privacy Policy

Effective Date: June 30, 2026

Applies to

modcore browser extensions, the official modcore websites, and the modcore Patreon membership program.

1. Introduction and Scope

modcore is an open-source project run by individuals based in Germany.

We take a privacy-first approach: our extensions do not include telemetry, analytics, or remote data collection operated by us. We only process personal data when you voluntarily support us through Patreon or contact us directly.

Data Controller: The modcore development team, operating from Germany.

Contact for privacy matters: modcoretech@proton.me

Jurisdiction: Germany

2. Extension Users (No Patreon Connection)

For users of our browser extensions (from GitHub, Chrome Web Store, Edge Add-ons, or Itch.io):

• No telemetry or analytics: We do not use Google Analytics or similar services. We do not track clicks, page views, sessions, or "anonymous usage statistics."

• No modcore-operated servers: We do not operate central servers to collect your extension data, IP addresses, or behavior logs.

• Local storage: Your data (settings, profiles, clipboard history, etc.) is stored exclusively on your device using browser storage APIs. You control this data completely.

For extension users with no Patreon connection, we do not hold any of your personal data. If a government entity requested user data from our extensions, we would be unable to provide it — no such data exists in our possession. You may exercise your privacy rights by uninstalling the extension and clearing your browser storage.

3. Patreon Supporter Data

When you support us through Patreon, we access limited information necessary to deliver membership benefits. This is a separate processing activity with its own legal basis.

3.1 Data We Access from Patreon

We retrieve the following information from Patreon:

• Username / Patreon ID — Used for account identification and Discord role assignment. Retained for the duration of your active membership plus 1 year.

• Email address — Used for direct communication regarding benefits. Retained for the duration of your active membership plus 1 year.

• Discord username (if connected) — Used for granting Discord server roles and benefits. Retained for the duration of your active membership plus 1 year.

• Membership tier and status — Used to determine benefit eligibility. Retained for the duration of your active membership plus 1 year.

• Subscription date and history — Used for support record keeping. Retained for the duration of your active membership plus 6 years.

• Profile image — Used for supporter recognition, if applicable. Retained for the duration of your active membership plus 1 year. This is optional; you may opt out by contacting us.

• Engagement data (posts liked, comments) — Used for aggregated community interaction metrics. Retained for 2 years.

3.2 Data We Do NOT Access

• Payment Information: Credit card details, bank accounts, and billing addresses are processed exclusively by Patreon. We have no access.

• Physical addresses: If provided to Patreon, we do not retrieve or use them.

• Phone numbers: If provided to Patreon, we do not retrieve or use them.

3.3 Legal Basis (GDPR)

• Article 6(1)(b): Processing necessary for the performance of the support contract (delivering benefits you pledged for).

• Article 6(1)(f): Legitimate interest in maintaining supporter records, community management, and aggregated interaction metrics.

• Article 6(1)(a): Consent, where applicable, for public supporter recognition or special categories of data.

You may withdraw support at any time via Patreon. This terminates our ongoing access to your data, subject to the retention periods above for legal and accounting purposes.

4. External Communications & Sync Features

4.1 GitHub API

Some features request public metadata from GitHub's API directly from your browser. We do not intercept these requests. GitHub may process your IP address per their Privacy Statement.

4.2 Browser Sync

"Sync" features use your browser's built-in sync mechanism (e.g., chrome.storage.sync), which transmits data via your personal Google or browser vendor account. This is a browser feature, not a modcore service. We cannot access this data remotely. Encryption and transmission are handled by your browser vendor.

5. Website Privacy

Our websites are informational only. We do not use tracking cookies or analytics services.

We may use essential session cookies or browser storage necessary for website functionality (e.g., theme preferences). We do not use advertising or third-party tracking cookies.

6. Third-Party Services & Processors

We rely on the following services for limited purposes:

• Patreon — Payment processing and membership management.

• GitHub — Source code and website hosting.

• Proton Mail — Secure email communication.

• Discord — Community access and role management (if you connect your account).

We do not sell your data to third parties.

7. Security Measures

• Content Security Policy: Strict CSP in extensions prevents unauthorized code execution.

• No direct payment processing: We never handle financial data directly.

• Patreon OAuth: Secure, scoped API access with minimal permissions.

• Email encryption: Proton Mail provides end-to-end encrypted communication.

8. Your Rights (GDPR)

As a data subject, you have the following rights regarding any personal data we hold:

• Access — Email modcoretech@proton.me with your Patreon username.

• Rectification — Update your information directly on Patreon.

• Erasure — Email us to request deletion. Some data may be retained for legal or contractual obligations.

• Restriction — Email us to restrict processing beyond legal obligations.

• Data Portability — Request export of your supporter data via email.

• Objection — Object to processing based on legitimate interest via email.

We will respond to all requests within 30 days as required by GDPR.

For extension users with no Patreon connection: No personal data is held by us. Exercise your rights by uninstalling the extension and clearing browser storage.

9. Data Retention & Deletion

• Active supporters: Data retained while membership is active, plus the periods noted in Section 3.1.

• Canceled supporters: Personal identifiers deleted after 1 year following cancellation. Aggregated statistics (e.g., tier popularity) may be retained in anonymized form.

• Legal obligations: Accounting and tax records retained for 6 years per German tax and commercial law (AO §147, HGB).

• Security logs: IP addresses from email communications retained for 30 days for spam and abuse prevention.

• Inactive records: If you do not engage with us for 3 years and are not an active supporter, we will delete or anonymize your personal data, subject to legal retention requirements.

10. International Data Transfers

Patreon is a US-based service. When you support us through Patreon, your data is transferred to the United States under Patreon's Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework, where applicable.

We access this data from Germany (EU). We do not transfer your data to other third countries.

11. Data Breaches

In the unlikely event of a personal data breach, we will notify affected users and the relevant supervisory authority in accordance with GDPR requirements.

12. Children's Privacy

Our services are not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, contact us immediately for deletion.

13. Contact & Complaints

For privacy inquiries or to exercise your rights:

Email: modcoretech@proton.me

Location: Germany

If you believe we have violated your privacy rights, you have the right to lodge a complaint with:

The data protection authority for your actual German state 

EU residents may also lodge a complaint with the supervisory authority in their country of residence.

14. Changes to This Policy

We may update this Privacy Policy to reflect legal changes or new features. The "Effective Date" at the top indicates the current version.