Privacy Policy
Last updated: October 9, 2026 (what changed)
Who operates this site
FS25ModZone.com is operated by Comwil, based in Zürich, Switzerland. For privacy questions or to exercise the rights described below, contact [email protected].
What we collect
You do not need an account to browse or download. Accounts exist only for the forum, and mod uploads and comments need no account. Everything below is submitted voluntarily through a form, or generated automatically while you browse.
| When | We collect | Notes |
|---|---|---|
| Uploading a mod | Email, mod title/description/credits, screenshots, download link(s), optional YouTube link | Email is never shown publicly. Uploaded images are re-encoded on our server, which strips EXIF/location metadata. |
| Posting a comment | Name, email, comment text | Email is never shown publicly, only used if we need to follow up. |
| Reporting whether a mod works | Whether it worked, your platform, an optional game version and an optional short note, plus a one-way hash of your IP address | No name or email is asked for. The report is shown publicly (without the hash) after a moderator approves it. The hash only stops the same visitor from reporting the same mod again within 30 days; it cannot be reversed back to your IP address. |
| Reporting abuse / suggesting a video / asking for a mod's images to be removed | Reason/URL, email, optional message | Used only to review the report. |
| Creating a forum account | Username, email address, password (stored only as a salted hash), and whether you have confirmed your email | Email is never shown publicly. It is used to confirm the account and to send password resets, nothing else. We email a confirmation link when you register or change your email address. |
| Posting in the forum | Thread titles, replies and likes, together with your username | Shown publicly next to your username. |
| Browsing the site | A one-way cryptographic hash of your IP address, a coarse device category (bot/mobile/desktop), your country (from Cloudflare), and the referring page | Attached to download-click and comment records for spam/abuse prevention. Your raw IP address is never stored - the hash cannot be reversed back to it. |
| Claiming a creator page | Your email address, the address of the page that shows your verification code, and the bio and links you want shown | The email and the proof address are never shown publicly and are used only to check the claim and, if needed, to contact you. We keep the email while the page is verified; if a claim is rejected we remove it. The bio and links are shown publicly on the creator page once we approve them, and we can remove them on request. |
| Saving mods to My mod list | Nothing is stored on our server. The names of the mods you save are kept in your own browser (local storage), on your device only. | When you open My mod list, or a share link, the names of the mods in the list are sent to us in the page address so we can display them. We do not save them as a list, but like any page request they can appear in ordinary server logs. You can empty the list at any time, or clear this site's data in your browser. |
| Searching the site | The search text and how many results it returned | Used to see what mods people look for that we don't have yet. Not linked to you individually. |
Cookies
Two small cookies are set the first time you open any page, and both are strictly necessary: a session
cookie (fs25modzone-session) and a security token (XSRF-TOKEN). They protect our
forms from cross-site request forgery and keep forum members and our moderators signed in. They expire after
two hours and are not used for tracking or advertising.
Cloudflare, our hosting/security provider, may set cookies necessary to distinguish humans from bots (Turnstile, used on our forms) and to protect the site from abuse. Our traffic analytics (Cloudflare Web Analytics) is cookieless by design. We do not use Google Analytics.
Besides cookies, the site uses your browser's local storage in one place: if you press the heart on a mod, the mod's name is saved there so My mod list can show it later. Nothing is written to local storage until you do that, and it is never used for tracking or advertising.
Advertising (Google AdSense)
We have applied to show ads from Google AdSense, and the AdSense code is on the site, but ads are not being shown yet.
When ads are shown, Google and its advertising partners use cookies and similar technologies (such as the DoubleClick/Google Ads cookie) to serve ads, including based on your prior visits to this site or other sites, to measure how ads perform, and to limit how often you see the same ad. Third parties, including Google, may place and read cookies in your browser, or use web beacons or IP addresses, to collect information through ad serving on this site.
- If you are in the EEA, the UK or Switzerland, a consent message from a Google-certified consent management platform (Funding Choices) asks for your choice before ads or related cookies are used, in line with Google's EU User Consent Policy. You can change your choice at any time through that message. Visitors elsewhere may see a simpler notice.
- You can opt out of personalized advertising at Google's Ads Settings, or, for participating third-party vendors generally, at aboutads.info/choices (or youronlinechoices.eu in Europe).
- Google's own collection and use of data is governed by the Google Privacy Policy. How Google uses data when you use sites and apps of its partners, such as this one, is explained in How Google uses data when you use our partners' sites or apps.
Who we share data with
We don't sell your data. It's shared only with the service providers that make the site work:
- Cloudflare - DNS, CDN, DDoS protection, bot verification (Turnstile), and cookieless analytics for the whole site.
- Resend - delivers the email the site sends: notifications to our moderators when a mod is submitted, and account emails to forum members (email confirmation and password resets).
- Our backup storage provider - encrypted database backups (which include the data in the table above) are copied off-server for disaster recovery, and automatically deleted after 30 days.
How long we keep it
Data tied to a mod, comment, or report is kept for as long as that content exists on the site, plus the 30-day backup retention window described above. You can ask us to delete data tied to a submission you made by emailing [email protected] from the same address you submitted with.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or export the personal data we hold about you, and to object to or restrict how it's used. To exercise any of these, email [email protected]. We verify these requests using the email address the data was originally submitted with, or the email address on your forum account.
Comwil is based in Switzerland, so Swiss data protection law (the revised Federal Act on Data Protection) applies, and you may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC). If you're in the EU or UK, GDPR/UK GDPR also applies to how we handle your data, and you may instead (or in addition) contact your own national data protection authority.
Children
This site is not directed at children and we do not knowingly collect personal data from anyone under 16.
Changes to this policy
If this policy changes materially, the "Last updated" date above will change and the change will be listed here. Changes such as switching on advertising or connecting a consent platform will be called out.
- October 9, 2026 (later): added "Did it work for you?" reports on mod pages: what is collected (no name or email) and that reports are shown only after moderation.
- October 9, 2026: added claimable creator pages: what we collect when a creator claims a page (email, proof address, bio, links), what is shown publicly, and how long the email is kept.
- October 8, 2026 (later): added My mod list: the mods you save are kept in your browser's local storage, not on our server, and the mod names are sent to us in the page address when you open the list or a share link.
- October 8, 2026: corrected the cookie statement (two strictly necessary cookies are set on first visit); removed Google Analytics, which had been loading without being described here; clarified that forum accounts exist; rewrote the advertising section to say what actually happens (ads not shown yet; no ad script for visitors in the EEA, UK and Switzerland until a consent platform is live); added the required statement about third-party cookies and the link to Google's partner-sites page; "Last updated" now shows a fixed date instead of the current date.