🎮 Skip the grind · Free delivery within 30 min
CSR2MODS

Privacy Policy

Last updated: May 29, 2026

1. What we collect

  • Account info: email, name (optional), password (hashed via bcrypt).
  • Game account credentials: Apple ID or Google Play login provided at checkout. Stored encrypted, deleted automatically after delivery.
  • Payment data: we never store credit cards. Crypto payments are processed by OpenNode. PayPal manual submissions store only the transaction ID and an optional screenshot.
  • Usage data: IP address, user agent, browse history within the site (via Umami, privacy-first analytics — no cookies, no cross-site tracking).

2. How we use it

  • Deliver your orders and credit your token wallet.
  • Detect and prevent fraud (e.g. multiple chargebacks from the same IP).
  • Send transactional emails (top-up receipts, order updates, password resets via Resend).
  • Improve the site via aggregate, anonymized analytics (Umami).

We do not sell or share your personal data with marketing partners.

3. Game account credentials

Our service is impossible without temporarily accessing your Apple ID or Google Play account. We store credentials encrypted at rest and delete them automatically once the order is marked completed. We never use your account for any purpose other than delivering the specific mod or top-up you ordered. We will never change your password or claim your account.

4. Cookies & sessions

We use a single first-party session cookie (httpOnly, SameSite=Lax) for authentication. We use a cart cookie (httpOnly) to remember your cart between sessions. No third-party tracking cookies.

5. Data retention

  • Account data: until you delete your account.
  • Game credentials: auto-purged after order completion.
  • Order + payment history: retained 7 years for tax/dispute records, then anonymized.
  • Audit log: retained 7 years.

6. Your rights

You can request a full export of your data, correction, or deletion at any time by emailing support@csr2mods.com. We respond within 30 days.

7. Children

CSR2MODS is not intended for users under 16. We do not knowingly collect data from minors.

8. Changes

We may update this policy. Material changes will be announced via email or a banner on the site at least 14 days before they take effect.

9. Opt-out & "Do Not Sell"

We do not sell personal data. If you want to delete your account entirely, email support and we will erase your data within 30 days (subject to legal retention requirements).

10. Contact

Questions? Email support@csr2mods.com.