Privacy Policy

1. Data Controller

ModReady AB is the data controller for the personal data processed through ModReady.gg. This privacy policy explains how we collect, use, store, and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Swedish law.

2. Information We Collect

We collect information you provide directly:

• Account Information: Email address, username, and password
• Payment Information: Processed securely by Stripe — we do not store card details
• Server Data: Your game server files, configurations, and backups
• Support Communications: Messages sent to our support team via email or Discord

3. Automatically Collected Information

• IP addresses for security, abuse prevention, and fraud detection
• Browser type, device information, and operating system
• Pages visited, referring URLs, and interaction data
• Cookies for session management and analytics (see Section 9)

4. Legal Basis for Processing (GDPR Art. 6)

We process your personal data based on the following legal grounds:

• Performance of a contract (Art. 6(1)(b)): Processing necessary to provide you with our hosting services, process payments, and manage your account
• Legitimate interest (Art. 6(1)(f)): Improving our services, preventing fraud and abuse, ensuring network security, and conducting basic analytics to understand how our service is used
• Legal obligation (Art. 6(1)(c)): Complying with tax, accounting, and other legal requirements
• Consent (Art. 6(1)(a)): Marketing communications and non-essential cookies — you may withdraw consent at any time

5. How We Use Your Information

• Provide, maintain, and improve our hosting services
• Process payments and send receipts
• Send service-related notifications (e.g., billing, maintenance, security alerts)
• Respond to support requests
• Prevent fraud, abuse, and unauthorized access
• Comply with legal obligations

6. Data Sharing & International Transfers

We do NOT sell your personal data. We may share data with the following categories of recipients:

• Stripe (US): Payment processing
• Infrastructure providers (EU/US/CA): Server hosting in our various regions
• Google Analytics (US): Website usage analytics
• Resend (US): Transactional email delivery
• Legal authorities: When required by law

Some of our service providers are based outside the EU/EEA (primarily in the United States). Where personal data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses (SCCs) or the service provider's participation in an approved framework. You may request details about specific safeguards by contacting us at [email protected].

7. Data Security

We implement industry-standard security measures including encryption in transit (TLS/SSL), secure server infrastructure, and access controls. However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data using commercially reasonable measures.

8. Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy:

• Active accounts: Data is retained as long as your account is active
• After cancellation: Server data (world files, configurations, backups) is retained for 30 days, then permanently deleted
• Account data: Basic account information may be retained for up to 12 months after cancellation for legal and accounting purposes
• Payment records: Retained as required by Swedish accounting law (7 years)

9. Cookies

We use the following types of cookies:

• Essential cookies: Required for authentication, session management, and basic site functionality. These cannot be disabled.
• Analytics cookies (Google Analytics): Help us understand how visitors use our site, including pages visited, time on site, and referral sources. These are placed only with your consent.
• Attribution cookies: Track how you found our site (e.g., via search, ad, or referral) to help us understand our marketing effectiveness. These are placed only with your consent.

You can manage cookie preferences through the cookie consent banner on our site, or by adjusting your browser settings. Disabling non-essential cookies will not affect your ability to use our services.

10. Your Rights (GDPR)

As a data subject, you have the following rights under the GDPR:

• Right of access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data ("right to be forgotten")
• Right to restriction: Request restriction of processing in certain circumstances
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interest
• Right to withdraw consent: Withdraw previously given consent at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at www.imy.se.

11. Children & Minors

Our services are not directed at children under 16. We do not knowingly collect personal data from children under 16 without parental consent. If you are under 16, you may only use our services with the involvement of a parent or legal guardian. If you believe we have inadvertently collected data from a child under 16 without appropriate consent, please contact us at [email protected] and we will promptly delete the data.

12. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated via email or a notice on our website. The "Last updated" date at the top of this page indicates when the policy was last revised.

13. Contact

For privacy-related questions or to exercise your data rights, contact us at: