Privacy Policy

CORRUPTD ("we", "us", "the Platform") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data when you use our game mod marketplace.

Account information: When you sign in via Google or GitHub, we receive your name, email address, and profile picture from the OAuth provider. We do not collect or store passwords.

Profile information: Any additional information you choose to provide, such as a bio or custom avatar.

Transaction data: When you purchase or sell mods, we record transaction details including the amount, platform fee, and Stripe payment reference. Payment card details are handled entirely by Stripe and never touch our servers.

Messages: Content of messages sent through our in-platform messaging system between buyers and sellers.

Usage data: Basic server logs including IP addresses, browser type, and pages visited, collected automatically when you use the Platform.

We use the information we collect to:

• Provide, maintain, and improve the Platform
• Process purchases and facilitate payouts to sellers
• Enable communication between buyers and sellers
• Enforce our Terms of Service and messaging rules
• Detect and prevent fraud, abuse, and security threats
• Send important account notifications (e.g., purchase confirmations)

We do not sell your personal information to third parties. We do not use your data for advertising purposes.

We use the following third-party services that may process your data:

• Google & GitHub (Authentication): Used for sign-in. Subject to their respective privacy policies.
• Stripe (Payments): Processes all payment transactions. Card details are handled directly by Stripe and never stored on our servers. Subject to Stripe's Privacy Policy.
• Cloudflare R2 (File Storage): Mod files are stored securely using encrypted storage.
• Neon (Database): Account data, transactions, and messages are stored in our database.

We retain your account information for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required for legal obligations (e.g., transaction records for tax purposes).

Messages are retained for the duration of your account. Purchase history and transaction records may be retained for up to 7 years for legal and financial compliance.

We take reasonable measures to protect your information, including:

• Encrypted file downloads with time-limited access tokens
• OAuth-based authentication (no password storage)
• HTTPS encryption for all data in transit
• Content moderation on messages to prevent sharing of personal information

No system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your account and associated personal data
• Data portability: Request your data in a portable format

To exercise any of these rights, please contact us through the Platform's support channels.

CORRUPTD uses essential cookies required for authentication and session management. We do not use tracking cookies, analytics cookies, or advertising cookies.

CORRUPTD is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal data, we will take steps to delete that information.

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Last updated" date at the top of this page. Your continued use of CORRUPTD after changes are posted constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or how we handle your data, please reach out through the Platform's support channels.