Privacy Policy

Operator: WreckD LLC. Contact: Contact form. Effective October 12, 2026. Version 2026-10-12.

Information we collect

We store your username, password hash, optional email address, profile information, uploads, comments, ratings, follows, private messages, blocks, and moderation records. Your email address is private. Your profile and approved content are public. Private messages are available to their participants; messages reported for abuse are also available to authorized staff for review. Server logs may record your IP address and browser information for security.

Purchases and payments

Paid-mod purchases store the release, price, license terms, order status and payment-provider reference linked to your account. Payment details are entered on PayPal or Stripe checkout and are not stored by WreckD. Your chosen provider processes payment and billing information under its own privacy policy. We retain the listing, license and digital policy accepted at checkout, plus authenticated download timestamps, file hashes, transfer byte counts, IP addresses and browser information for delivery investigations and disputes. These records are private and accessible only to authorized purchase-review administrators; relevant evidence may be shared with the payment provider. Purchase-support statements explicitly submitted for an order may also be included. IP/browser identifiers are cleared after 400 days unless an open dispute review requires retention. Purchase records may be retained for accounting, refund, fraud-prevention and legal obligations after account deletion.

Cookies and storage

A session cookie keeps you signed in and protects forms. Browser storage remembers your display theme. Your Opciones de privacidad control optional audience analytics. With analytics allowed, we count public-page visits and keep daily session hashes for up to 90 days to estimate daily visitors. Aggregate counts remain; this analytics database does not store IP addresses, full URLs, search terms, or account identifiers. When configured, our self-hosted Matomo receives sanitized public-page visits with cookies disabled; its server may process IP addresses under our configured anonymization and retention settings. Advertising, when enabled, is provided by Google AdSense and governed by its consent controls and advertising privacy information. Private, staff, and adult mod pages do not load these trackers. Third party video providers receive information when their video thumbnails load, when you select an embedded video to play, or when you visit their links.

Use, sharing and retention

We use information to operate accounts, deliver requested services, review reports, and protect the community. We do not sell personal information. We may disclose information when required by law or necessary to protect legal rights. We retain account and moderation records as needed to operate the service and meet legal obligations.

Your requests

Use account settings to update your profile or password. Contact us to request access, correction, or deletion of personal information. We may need to verify your identity and retain records required for legal or security purposes. The service is not intended for children under 13.

Private Creator records

When you choose to join the Creator program, we retain your consent decision, terms version and acceptance date. Paid publishing requires a private legal recipient name, country, PayPal email, adult declaration and recipient-ownership confirmation. These details and payout requests are visible to you and authorized administrators, not on your public profile. Approved payouts send the recipient email, amount and a payment note to PayPal. Required payment or tax evidence is handled through private review. Request, allocation and provider-confirmed delivery records are retained with the financial history; account exports include your Creator decisions and requests.

External link counters

External links display unique member and guest-session click counts. Repeat clicks to the same destination are deduplicated with keyed, destination-specific identifiers; these records do not store IP addresses, emails, or clicked-link query strings. No additional guest tracking cookie is created. Guest sessions cannot establish a lifetime count of individual people.

Creator download lists

Signed-in package downloads and external-link opens are associated with your public username and version history. The release creator and staff can view those download records for that release. This list does not expose payment details or IP addresses. Guest downloads are not identified by account.

Discussion typing indicators

With live updates enabled, typing a discussion comment briefly shares your public username as typing with signed-in viewers of that discussion. No draft text is sent. Presence expires after 12 seconds without an update and is cleaned up after one minute. Turn off live updates in account settings to opt out.

Custom mod requests

We store custom-work requests and proposals. Approved requests are public; proposals are visible only to the submitter and requester. Custom-work payment arrangements are made directly between participants; WreckD does not collect or hold those payments. Account exports include your requests and proposals.

Login and session security

We record sign-in events, failed attempts, sign-outs and session revocations with account references, IP addresses, browser and device names, and timestamps for 90 days. Members can view and export their own history; site-wide logs are accessible only to Admin. Passwords, authentication codes and session tokens are not stored in these logs. An Admin-requested IP information lookup sends only a recorded public IP address to ipapi.co for approximate location and network information; no username or account details are sent. Lookup results expire after seven days. Local IP abuse signals aggregate bot-trap and spam-limit blocks by address and hour for 30 days; Admin can review behavioral risk flags. Shared IP addresses alone do not result in a risk flag or automatic ban.

Optional Google sign-in

When you choose Google sign-in, Google sends us an account identifier, your email address, its verification status and basic profile claims. We store the Google account identifier, its link to your WreckD account and the linking date; your email is handled as private account information. We do not receive your Google password or request access to your Gmail messages, Drive files or contacts. Temporary sign-in information is used to complete authentication. Google-verified Gmail and Google Workspace addresses can satisfy our email-verification requirement. Existing accounts must be linked while signed in; a matching email alone does not merge accounts. Your WreckD two-factor protection still applies. Account closure removes the Google account link along with ordinary account data, subject to the retention limits below.

Ownership claims and notifications

We store original-source links, permission records, private claim evidence, review decisions, and ownership-transfer history. Claim evidence is accessible to the claimant and authorized administrators and may be disclosed for legal obligations or disputes. Resolved claim evidence is removed after two years unless a dispute or legal hold requires retention. Notification records store the event, recipient, target and read state; optional comment and release alerts can be disabled in Notifications. Read notifications are removed after one year. Account exports include your claims and notification records.

Retention and deletion

Ordinary analytics identifiers expire after 90 days, read notification records after one year, and resolved claim evidence after two years unless held. Purchase evidence follows the separate retention described above. Backups expire under the configured backup schedule; restoring a backup requires reapplying subsequent deletion requests. Security, financial, reported-message, copyright and moderation history may be retained for necessary legal or safety purposes. You can export or close your account from account settings. Contact support to request correction or review of retained information.