Privacy Policy
Last updated:
CanYouMod (“we”, “us”) respects your privacy. This policy explains what personal information we collect when you use canyoumod.com and buy the Recipe Pack (the “Service”), how we use and share it, and the rights you have. Short version: the game checker and guides need no account and set no tracking cookies; we only handle personal data when you buy the Recipe Pack, email us or use our contact form.
1. Who is responsible for your data
- Data controller: CanYouMod (canyoumod.com), run by an independent developer.
- Privacy contact: [email protected]
- Data Protection Officer: not appointed (not required for our scale of processing).
2. What we collect
2.1 Information you give us
- Purchase information: when you buy the Recipe Pack, our payment processor Waffo Pancake collects your email address, payment details and billing country. We receive only your email address, the order reference, amount and payment status. We never see or store your full card number (see section 5).
- Communications: emails you send to [email protected], including your email address and anything you choose to include.
2.2 Information collected automatically
- Device and network data: IP address, browser type, operating system and the page requested, recorded in server and security logs by our host, Cloudflare.
- Error logs: technical errors from our checkout and download functions, which may include an order reference.
We do not run accounts, logins, analytics or advertising trackers, and the game checker runs without uploading any of your files. Game names you search for are handled in your browser and are not sent to us.
3. How we use your information
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Serve the website and keep it running | Legitimate interests |
| Process your Recipe Pack purchase and let you download it | Contract |
| Email you the download link for your purchase | Contract |
| Answer your support or privacy requests | Contract / Legitimate interests |
| Protect the site against abuse, fraud and attacks | Legitimate interests |
| Keep transaction records required by tax and accounting law | Legal obligation |
We do not send marketing emails. We may use aggregated, anonymous statistics (for example, the number of downloads) that cannot identify you.
4. Cookies and tracking
| Type | What we use | Can be turned off |
|---|---|---|
| Strictly necessary | Security and bot protection set by our host, Cloudflare (for example __cf_bm) | No |
| Functional | None used | — |
| Analytics | None used | — |
| Marketing / advertising | None used | — |
The Waffo Pancake checkout page may set its own cookies, covered by the Waffo privacy policy. If we ever add analytics or ads, we will name each tool here, link to its privacy policy and ask for consent where the law requires it.
5. Sharing and disclosure
We do not sell your personal information, including “selling” or “sharing” as defined by the CCPA/CPRA. We share it only in these cases:
- Service providers, bound by confidentiality and data-processing terms: Waffo Pancake (payments and checkout; payment card data is processed exclusively by Waffo Pancake, our PCI-DSS compliant payment processor, and is never stored on our servers), Cloudflare (hosting, security and email forwarding), Resend (sending your download email) and Google (Gmail, where our support inbox is kept).
- Legal requirements: when required by law, court order or a lawful request from a competent authority.
- Business transfers: if CanYouMod is sold or merged, we will tell you in advance and make sure this policy keeps protecting your data.
- With your consent: for any other purpose you explicitly agree to.
6. Security
- Encryption in transit: the whole site is served over HTTPS/TLS.
- Minimal data: we run no user database, and payment and email API keys are kept in our host’s protected settings, never in the site code.
- Access control: only the site operator can access order and support data.
- Signed payment notifications: payment events from Waffo are verified by signature before we act on them.
If a security incident affects your rights, we will notify you and the relevant authority within 72 hours of becoming aware of it, as required by law. Your download link works like a password: please do not share it publicly.
7. How long we keep data
| Data | How long | Then |
|---|---|---|
| Order records (email, amount, status, order reference) | Kept by Waffo Pancake as long as tax and accounting law requires, typically up to 7 years | Deleted or archived by Waffo |
| Download link for your order | For as long as the order record exists, so you can re-download | Stops working when the order record is deleted |
| Delivery email logs | The limited period set by Resend’s retention policy; we keep no separate copy | Deleted by Resend |
| Support and privacy emails (including /contact form messages) | Up to 2 years after our last exchange | Securely deleted |
| Server and security logs (IP address, request details) | Up to 30 days | Deleted automatically |
8. Your rights
To exercise any of these rights, email [email protected] from the address you used at checkout. We will respond within 30 calendar days.
| Right | What it means |
|---|---|
| Information | Know what we collect and how we use it (this page). |
| Access | Get a copy of the personal data we hold about you. |
| Correction | Fix inaccurate or incomplete data, such as a mistyped email. |
| Deletion | Ask us to delete your data, unless the law requires us to keep it. |
| Restriction | Ask us to pause processing in certain situations. |
| Portability | Receive your data in a machine-readable format. |
| Objection | Object to processing based on our legitimate interests. |
| Withdraw consent | Withdraw any consent you gave, at any time. |
If you believe we have not handled your request properly, you have the right to complain to your local data protection authority.
9. Marketing
We do not send marketing messages. The only email you get from us is the download email for your purchase, plus replies to messages you send us. If we ever offer a newsletter, it will be opt-in with an unsubscribe link in every email.
10. International transfers
Our providers may process data in the United States, Singapore and other countries where they operate. When data leaves the EEA, UK or Switzerland, we rely on our providers’ data processing agreements, which include the EU Standard Contractual Clauses, or on adequacy decisions where they apply.
11. Children
The Service is intended for users aged 16 and over. We do not knowingly collect personal data from anyone younger. If you believe your child has given us personal data, contact [email protected] and we will delete it promptly.
12. Third-party links
Our pages link to third-party sites such as GitHub, game publishers and mod loaders. This policy covers only data we collect directly; we are not responsible for how those sites handle data, so please check their policies.
13. Changes to this policy
For material changes, we will post a notice on this site at least 15 days before they take effect, and email past buyers where the change affects their data. The “Last updated” date at the top always shows the current version. Continuing to use the Service after a change takes effect means you accept it.
14. Contact us
- Privacy and support: [email protected]
- Website: canyoumod.com
See also About & methodology. CanYouMod is an unofficial guide to universal-modder by rehan-remade (MIT) and is not affiliated with Anthropic or any game developer.