Privacy Policy

This Privacy Policy explains how HD Melmods ("we", "us" or "our") collects, uses and discloses information from you and your device when you use the HD Melmods Sandbox Mod mobile application and our website (together, the "Service").

For information about how we treat data belonging to children under the age of 13 in accordance with the Children's Online Privacy Protection Act ("COPPA"), see Section 10.

1. Definitions

"Personal Information"

information that identifies, or can reasonably be linked to, an individual — for example an email address, an account identifier, or a persistent device identifier.

"Non-Personal Information"

information that by itself does not identify an individual — for example aggregated usage statistics, app version, or the number of downloads of a mod.

"Device Identifier"

a persistent identifier assigned to your device, including the Identifier for Advertisers (IDFA) on iOS and the Advertising ID on Android.

We do not receive or store your payment card details. All purchases are processed by Apple (App Store) and our subscription provider; we receive only a confirmation that a purchase or subscription is active, together with an anonymous purchase identifier.

2. What information is collected

Information you provide.

• Account information. If you create an account or sign in, we receive the email address and basic profile information supplied by the sign-in provider you choose.
• Support requests. If you email us, we receive your email address and whatever you include in your message. We keep it only as long as needed to answer you.

Information collected automatically.

• Device information. Device model, operating system and version, app version, language and region, and the Device Identifier.
• Usage data. Which screens you open, which mods you view or download, and similar in-app events, used to understand what is popular and to improve the app.
• Crash and diagnostic data. When the app crashes we collect a crash report containing the state of the app, the device model and the operating system version.
• Log data. When your device contacts our servers we record the IP address, the request made, and the date and time.

We do not request, access or track your location, and the app does not ask for location permission. We do not access your contacts, photos, microphone or camera.

3. How information is used and shared

We use the information described above to operate and improve the Service, to deliver and measure advertising, to diagnose crashes, to provide customer support, and to detect and prevent fraud and abuse.

We do not sell your Personal Information. We share information only in the following circumstances:

• Service providers. With the third parties listed in Section 4, who process data on our behalf and are bound to use it only for the purposes we specify.
• Legal. To comply with applicable law, a subpoena, a court order or a lawful request from a public authority; and to establish, exercise or defend legal claims, investigate fraud, or protect the safety of any person.
• Business transfers. If we are involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction. We will give notice before your Personal Information becomes subject to a different privacy policy.

4. Third-party services we use

The Service relies on the following third parties. Each handles data under its own privacy policy, which we encourage you to read.

• Google AdMob — serves the advertising in the app and receives your Device Identifier, IP address and coarse ad-interaction data. See How Google uses information from sites or apps that use our services.
• Google Firebase Crashlytics — collects crash reports and diagnostic data. See the Firebase privacy information.
• RevenueCat — manages subscriptions and purchase state. It receives an anonymous app user identifier and your purchase receipt, never your payment card details. See the RevenueCat privacy policy.
• Auth0 (Okta) — authenticates sign-in and stores your account identifier and email address. See the Okta privacy policy.
• Amazon Web Services (S3) — hosts the mod files and images that the app downloads. See the AWS privacy notice.
• Apple — distributes the app and processes all payments. See the Apple privacy policy.

5. Advertising, tracking and your choices

The Service is supported by advertising delivered through Google AdMob. Ads may be personalised using your Device Identifier and inferred interests, or non-personalised (contextual) depending on your choices and your location.

App Tracking Transparency (iOS)

On iOS we ask for your permission before accessing the Identifier for Advertisers (IDFA), using Apple's App Tracking Transparency prompt. If you decline, we do not access the IDFA and you will continue to see ads, but they will be non-personalised. You can change this decision at any time in Settings → Privacy & Security → Tracking, or reset your identifier in Settings → Privacy & Security → Apple Advertising.

Android

On Android you can opt out of personalised advertising or reset your Advertising ID in Settings → Google → Ads.

Europe, the United Kingdom and Switzerland

If you are located in the European Economic Area, the United Kingdom or Switzerland, personalised advertising requires your consent. Where that consent has not been given, you will be shown non-personalised advertising instead. You can also limit ad personalisation at any time using the device settings described above.

Removing ads

A paid subscription removes advertising from the app. Subscription terms are described in our Terms & Conditions.

6. Security

We follow generally accepted industry standards to protect the information we hold, both in transit and at rest. All traffic between the app and our servers is encrypted using TLS, and access to stored information is limited to those who need it to operate the Service.

No method of transmission or storage is completely secure, so while we take appropriate measures we cannot guarantee absolute security.

7. Sign-in and account

You may use most of the app without an account. If you choose to sign in, authentication is handled by Auth0, which may offer sign-in through a third-party identity provider. In that case the provider confirms your identity to us and shares a limited set of details, typically your name and email address. We do not receive your password.

Your interactions with any third-party identity provider are governed by that provider's own privacy policy.

8. Links to other sites

The Service contains links to websites and applications that we neither own nor control, including the sources of the mods listed in the app. We are not responsible for the privacy practices of those destinations, and this Privacy Policy does not apply to them. We encourage you to read the privacy statement of every site you visit.

9. Access, retention and deletion

We retain information for as long as your account is active or as long as needed to provide the Service, and afterwards only as necessary to comply with our legal obligations, resolve disputes and enforce our agreements. Crash and usage data is retained in aggregated or pseudonymised form.

Deleting your account. You may request deletion of your account and the Personal Information associated with it at any time by emailing [email protected] from the address associated with your account. We will complete the deletion within 30 days, except where we are required by law to retain certain records.

You may also correct or update your information by contacting us at the same address.

10. Children

The Service is not directed to children under the age of 13, and we do not knowingly collect Personal Information from children under 13. Our Terms & Conditions require users to be at least 13 years old.

If we learn that we have collected Personal Information from a child under 13, we will delete it as quickly as possible. If you believe that a child under 13 has provided us with Personal Information, please contact us at [email protected] and we will take prompt action.

If you are a parent or legal guardian and wish to review, correct or delete information relating to your child, contact us at the same address.

11. Your privacy rights

European Economic Area, United Kingdom and Switzerland. If you are located in these regions you have the right to access, correct, delete, restrict or object to our processing of your Personal Information, and the right to data portability. Where we rely on consent — for example for personalised advertising — you may withdraw it at any time. You also have the right to lodge a complaint with your local supervisory authority.

California. If you are a California resident you have the right to know what Personal Information we collect and how we use and disclose it, the right to request deletion, and the right not to be discriminated against for exercising these rights. We do not sell Personal Information as that term is defined by California law.

To exercise any of these rights, email [email protected]. We may need to verify your identity before acting on a request.

12. Changes to this policy and contact

We may update this Privacy Policy to reflect changes in our practices or in the law. When we do, we will revise the "Last updated" date at the top of this page. If the changes are material we will provide a more prominent notice within the app before they take effect. We encourage you to review this page periodically.

If you have questions or complaints about this Privacy Policy, contact us at [email protected].