Privacy
openmods keeps as little data as possible. It stores no real names, no email addresses, no passwords and no IP addresses, and it shows no ads and uses no tracking. The only data it keeps about a person is what the sign-in with GitHub needs.
In short
- You can use openmods without an account and without giving any data.
- openmods stores no real name, no email address, no password and no IP address.
- If you sign in to add a mod, openmods keeps only the public details of your GitHub profile that the sign-in needs: your GitHub user ID, your login name and the address of your avatar picture.
- openmods uses this data only for the GitHub sign-in and its own functions. It never sells it and never gives it to others.
- All data travels over encrypted connections, and the database stores it encrypted.
- No ads, no tracking, no analytics services.
When you visit openmods
openmods stores nothing about your visit. It runs on Cloudflare, and like every web host, Cloudflare's servers receive technical data when you open a page: your IP address, the address of the page, your browser type and the time. Cloudflare needs this data to deliver the pages and to protect the site against attacks. openmods itself keeps no access logs.
Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a site that works and is safe.
When you sign in with GitHub
Only people who add a mod need to sign in. The sign-in connects your GitHub account to openmods, so you can add mods and openmods knows who added them. For this, GitHub tells openmods three public details of your GitHub profile:
- your GitHub user ID (a number),
- your login name,
- the address of your avatar picture.
openmods stores these, together with the time of your first and your last sign-in, and which mods you added. That is all. It asks GitHub for no extra permissions, does not read your email address, and keeps no GitHub access token: the token is used once to read your login name, then it is thrown away. So openmods can never act on your GitHub account.
Legal basis: Art. 6(1)(b) GDPR, because you ask for the sign-in to use these functions. On GitHub's own pages, GitHub's privacy statement applies.
How your data is protected
- Every connection to openmods is encrypted (HTTPS).
- The database encrypts everything it stores (AES-256), and the data between the site and its database travels encrypted too. The database is in Western Europe.
- Your sign-in key is stored only as a hash (SHA-256), not as the key itself. Even someone who saw the database could not sign in as you.
- The sign-in cookie can only travel over encrypted connections, and scripts on the page cannot read it.
- A sign-in ends after 30 days at the latest. When you sign out, the session is deleted at once.
Mods and their data
openmods shows public data from GitHub repositories, for example the repository name, the GitHub name of its owner, the license, stars, releases, download numbers, and the files openmods.json and openmods.md. openmods reads this data from GitHub and refreshes it about every 10 minutes. To take a mod off openmods, its author deletes the two openmods files from the repository.
openmods counts how often each mod page is opened, as one number per mod. It does not store who opened a page. Bots and link previews do not count. The download numbers come from GitHub.
Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in showing public open-source projects.
Cookies
openmods uses only the cookies below. None of them is for advertising or tracking, and none is shared with other sites.
| Cookie | What it does | How long |
|---|---|---|
session | Keeps you signed in. | 30 days, or until you sign out |
oauth_state, oauth_next | Protect the sign-in with GitHub against forged requests, and remember the page you came from. | 10 minutes |
show_adult | Remembers that you confirmed "I am 18 or older" to see adult mods. Set only when you confirm. | 1 year, or until you hide adult mods again |
seen | Counts your view of a mod page only once a day. It lists the numbers of the mods you opened today, nothing about you. | 24 hours |
Pictures from other sites
openmods stores no pictures. Game pictures load from Steam's servers (Valve Corporation). Mod covers, pictures in mod descriptions and the authors' avatar pictures load from GitHub (GitHub, Inc.). To show them, your browser connects to these servers, and they see your IP address and the openmods page that shows the picture.
Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in showing games and mods with their pictures.
Email, Discord and links
- When you write to report@openmods.nexus, Cloudflare forwards your message to an inbox at Proton Mail (Proton AG, Switzerland). openmods uses your email address and your message only to handle your request, and keeps them as long as this needs, or as long as the law requires. Legal basis: Art. 6(1)(f) GDPR, and Art. 6(1)(c) GDPR where the law requires us to act, for example on a takedown notice.
- The openmods Discord server runs on Discord (Discord Inc.). Discord's privacy policy applies there.
- Links to GitHub, Discord and other sites open in a new tab. When you follow them, the privacy rules of those sites apply.
Service providers
- Cloudflare, Inc. (USA): hosting, the database, content delivery, DNS and email forwarding. The database is in Western Europe.
- GitHub, Inc. (USA): the sign-in, and the data of every mod.
- Proton AG (Switzerland): the inbox for emails to openmods.
Cloudflare and GitHub are certified under the EU-U.S. Data Privacy Framework. For Switzerland, the European Commission has decided that its data protection is adequate.
How long we keep data
- Sessions: 30 days at most. Expired sessions are deleted within about 10 minutes.
- Your account data: as long as your account exists, or until you ask us to delete it.
- Mod data: as long as the mod is listed on openmods.
- Emails: as long as we need them to handle your request, or as long as the law requires.
Your rights
Under the GDPR, you have the right to access your data, to have it corrected or deleted, to limit its use, to get it in a common format, and to object to its use. To use these rights, write to report@openmods.nexus and name your GitHub login. You also have the right to complain to a data protection authority, for example in the country where you live.
Changes
We change this page when openmods changes. Last change: 17 October 2026.