Modrinth
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared only with the providers who run the service.
- The documents do not say who can read your content.
They keep data until you email them, can close you anytime; they say they do not sell data.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account info, IP, country, downloads, playtime, and app usage via PostHog.
Read the exact line
Privacy policy
“When you create an account, we collect:Your emailYour usernameYour display nameYour profile pictureYour OAuth application data (ex: GitHub or Discord ID)”
Training
They use it for your profile, stats, anti-bot checks, ads via Adrinth, and paying creators.
Read the exact line
Privacy policy
“We use statistics to conduct marketing and advertising through Adrinth.”
Sharing
They say they do not sell data; vendors like Cloudflare, PostHog, PayPal, and Stripe still process it.
Read the exact line
Privacy policy
“Data that we specifically collect isn't shared with any other third party. We do not sell any data.”
Kept
They keep data forever unless you email them; view logs are after 24 months.
Read the exact line
Privacy policy
“Data is retained indefinitely. We do not delete any data unless you request it.”
Controls
To see, fix, or delete your data you must email @modrinth.com; they may charge a fee to access it.
Read the exact line
Privacy policy
“If you would like to exercise those rights, contact us at @modrinth.com.”
Fine print
They can change rules or close you anytime, cap what they owe.
Read the exact line
Terms of service
“We have the right to disable any user name, password or other identifier, whether chosen by you or provided by us, at any time in our sole discretion for any or no reason”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Request access, correction, or deletion
Email @modrinth.com (they may verify you and respond within 30 days)
Ask California Shine the Light questions
Email support@modrinth.com
Block cookies in your browser
Browser cookie settings; some site features may stop working
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They keep your information forever unless you write and ask them to erase it.
Read the exact line
Privacy policy
“Data is retained indefinitely. We do not delete any data unless you request it.”
For example, old download IPs can sit in their systems until you email @modrinth.com.
They can shut your account without saying why and without warning.
Read the exact line
Terms of service
“Terminate or suspend your access to all or part of the Service for any or no reason, including without limitation, any violation of these Terms of Use.”
For example, your mods page could vanish overnight with no email first.
If someone sues over what you posted or how you used the site, you may have to pay their legal bills.
Read the exact line
Terms of service
“You agree to and the Company, its affiliates, licensors and service providers, and its and their respective officers, directors, employees, contractors, agents, licensors, suppliers, successors and assigns from and against any claims”
For example, a copyright fight over a mod you uploaded could leave you covering their lawyers.
If they mess up, they usually will not pay more than what you paid them in the last three months.
Read the exact line
Terms of service
“IN NO EVENT WILL THE COMPANY, ITS AFFILIATES OR THEIR LICENSORS, SERVICE PROVIDERS, EMPLOYEES, AGENTS, OFFICERS OR DIRECTORS BE FOR DAMAGES OF ANY KIND, UNDER ANY LEGAL THEORY WHATSOEVER, FOR DAMAGES TO YOU AND/OR ANY OTHER PARTY WHATSOEVER (TAKEN IN THE AGGREGATE) IN EXCESS OF THE AMOUNTS RECEIVED FROM YOU DURING THE THREE (3) MONTH PERIOD PRIOR TO THE EVENT GIVING RISE TO THE CLAIM.”
For example, if you paid nothing, their written cap could be zero.
If they change the privacy rules and you keep using the site, they treat that as you agreeing.
Read the exact line
Privacy policy
“Your continued use of this Website after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.”
For example, a new analytics vendor could be added and you would only notice if you re-read the page.
Comments and other posts (not your game files) can be copied and shown by them and partners.
Read the exact line
Terms of service
“By providing any User Contribution through the Service, you grant us and our affiliates and service providers, and each of their and our respective licensees, successors and assigns the right to use, reproduce, modify, perform, display, distribute and otherwise disclose to third parties any such material for any purpose consistent with your account settings.”
For example, a forum post you write could be reused in their materials if your settings allow it.
You still own the mods and game files you upload; they only get a license to show and share them on the site.
Read the exact line
Terms of service
“Unlike User Contributions, which are owned by the Company, when you use the Service and upload and share your Gaming Content, the Company does not claim any right, title or interest in or to your Gaming Content.”
For example, deleting a mod from Modrinth does not yank copies people already downloaded.
They say they do not sell your information, though listed service companies still process it.
Read the exact line
Privacy policy
“Data that we specifically collect isn't shared with any other third party. We do not sell any data.”
For example, they will not list you as sold to a data broker, but PostHog still sees usage events.
They say data sits in Europe and is encrypted when stored and sent.
Read the exact line
Privacy policy
“Data is stored in a that is part of the European Economic Area (EEA), encrypted both in storage and in transit.”
For example, your account record is supposed to be encrypted on disk and over HTTPS.
Words to know
Legal words from the lines above, in plain English.
- de-identified
- Data with your name and obvious identifiers removed, though it can sometimes still be traced back to you. For example, your chats with names stripped out may still be kept and studied after you delete your account.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- sell or share
- Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
- GDPR
- Europe's privacy law, which requires a legal reason for using your data and gives you strong rights over it. For example, an EU user can demand to know why the app keeps their location history.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- affiliates
- Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
- limitation of liability
- A cap on what the company will ever pay you if something goes wrong, often only what you paid in the last year. For example, if a leak of your data costs you thousands, the most you may get back is a month's subscription fee.
- governing law
- Which country's or state's laws are used to settle any dispute, no matter where you live. For example, a user in Ohio may find the terms are judged under California law.
How we got here · grade C · score 46/100 · 15 of 15 policy answers backed by a verified quote · 3 not stated
What does the app collect beyond what it needs to work?
Besides account details, they collect IP, country, HTTP headers, download and playtime logs, and PostHog device and interaction data.
Does it record your voice, face or body, and what happens to that?
This is a mod-hosting site. The documents do not describe collecting voice, face, or body data.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They run ads through Adrinth and collect usage with PostHog, plus other third-party tools.
Do they sell or share your data, and can you opt out?
They say they do not sell data and list processors such as Cloudflare, Sentry, PostHog, PayPal, and Stripe.
What rights do they take over what you type and what the AI makes?
You own uploaded game files; they take a limited display license. Other posts can be used more broadly under your settings.
How long do they keep your data after you delete it, and can you delete it in the app?
They keep data indefinitely unless you request deletion by email. View logs are anonymized after 24 months.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They say access is limited, data is in the EEA, and it is encrypted in storage and in transit. No audit or leak history is described.
Is there a real age gate, and are teens protected?
You must be 13 or older by using the service. They do not describe ID checks.
Will they tell you when the rules change, and is the policy specific?
Policies are dated, but changes go live when posted and keeping using the site counts as agreeing. They may not email you.
Can they close your account without warning, and can you get your data out first?
They can disable your login or suspend access at any time for any or no reason, without promising notice or export.
If something goes wrong, who pays?
The service is as-is, damages are capped at three months of what you paid, and you must indemnify them for claims tied to your use.
Do subscriptions renew on their own, and can you get a refund?
Creator payouts and PayPal or Stripe are mentioned, but no user subscription auto-renew or refund rules are described.
The privacy policy is 1,406 words at a college graduate level (Flesch reading ease 36.9); the terms are 4,439 words at a college graduate level.
