Last Updated: August 17, 2026

This Privacy Policy explains how SantosMods ("SantosMods", "we", "us", or "our") collects, uses, stores, and protects information when you visit or use store.santosmods.dev (the "Store").

By accessing or using the Store, creating an account, signing in with a third-party provider, making a purchase, contacting support, or otherwise interacting with our services, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

Depending on how you use the Store, we may collect information such as:

• Your name or display name.
• Your email address.
• Your account username or profile information.
• Discord account information when you choose to sign in with Discord.
• GitHub account information when you choose to sign in with GitHub.
• Account identifiers provided by Discord or GitHub.
• Profile images or avatars provided by connected login providers.
• Billing and transaction information.
• Products, licenses, downloads, or services associated with your account.
• IP address.
• Browser type and version.
• Device and operating system information.
• Approximate location derived from your IP address.
• Login, authentication, session, and security information.
• Support requests and communications you send to us.
• Technical logs, error information, and activity necessary to operate and secure the Store.

2. Account Creation and Third-Party Login

The Store allows users to authenticate using supported third-party login providers, including Discord and GitHub.

When you choose to sign in using Discord or GitHub, you authorize that provider to share certain account information with us in accordance with the permissions shown during the authorization process.

This information may include:

• Your unique account identifier.
• Your username or display name.
• Your email address, where permitted and requested.
• Your profile picture or avatar.
• Other basic profile information made available through the authorized login connection.

We use this information to create or identify your Store account, authenticate your login, maintain account security, associate purchases with your account, and provide account-related functionality.

We do not receive your Discord or GitHub password. Authentication credentials remain with the applicable login provider.

3. Discord Login

If you choose to sign in with Discord, Discord may provide information associated with your Discord account based on the permissions requested by the Store.

This may include your Discord user ID, username, display name, avatar, and email address where authorized.

We may use your Discord account identifier to maintain your Store account, provide authentication, associate purchases or entitlements with your account, prevent abuse, and provide customer support.

Your use of Discord is also subject to Discord's own terms and privacy practices. SantosMods does not control how Discord independently processes information associated with your Discord account.

4. GitHub Login

If you choose to sign in with GitHub, GitHub may provide information associated with your GitHub account based on the permissions requested by the Store.

This may include your GitHub user ID, username, display name, profile image, email address where available, and other basic account information authorized by you.

We may use your GitHub account identifier to maintain your Store account, provide authentication, associate purchases or entitlements with your account, prevent abuse, and provide customer support.

Your use of GitHub is also subject to GitHub's own terms and privacy practices. SantosMods does not control how GitHub independently processes information associated with your GitHub account.

5. Information We Do Not Directly Store

Payment card information is processed through our payment provider, Stripe.

We do not intentionally store full credit or debit card numbers, card verification codes, or other complete payment card credentials on our own application servers.

We also do not receive or store your Discord or GitHub account password when you use those services to authenticate.

6. How We Use Your Information

We may use information collected through the Store to:

• Create, authenticate, and manage customer accounts.
• Enable Discord and GitHub login functionality.
• Process and verify purchases.
• Associate purchases, products, downloads, or licenses with your account.
• Provide purchased files, products, or services.
• Maintain purchase and transaction history.
• Provide customer support.
• Send transactional or service-related communications.
• Prevent fraud, abuse, unauthorized access, and malicious activity.
• Detect suspicious authentication activity.
• Protect the Store, our infrastructure, our products, and our customers.
• Investigate technical problems and security incidents.
• Maintain backups and service availability.
• Comply with applicable legal, regulatory, tax, accounting, or enforcement requirements.
• Improve the performance, reliability, security, and functionality of the Store.

7. Payments and Stripe

We use Stripe to process payments made through the Store.

When you make a payment, information necessary to complete the transaction may be transmitted directly to Stripe. This may include payment information, billing details, transaction information, contact information, device information, and fraud-prevention information.

Stripe processes information in accordance with its own terms, privacy policy, and applicable legal obligations.

We may receive limited information from Stripe concerning your transaction, including:

• Transaction identifiers.
• Payment status.
• Payment method type.
• Billing name or contact details.
• Purchase amount.
• Refund information.
• Dispute or chargeback information.
• Fraud or risk-related information.

8. Cloudflare

We use Cloudflare services to help operate, secure, and protect the Store and related domains.

Cloudflare may process technical information associated with requests to the Store, including IP addresses, browser information, device information, HTTP request information, network information, and security signals.

Cloudflare may be used for services including:

• DNS.
• Domain and network infrastructure.
• TLS and HTTPS-related services.
• Traffic protection.
• Bot and abuse mitigation.
• DDoS protection.
• Security monitoring.

9. Cloudflare Turnstile

The Store uses Cloudflare Turnstile to help protect forms, authentication systems, account actions, and other sensitive functionality from automated abuse.

Turnstile may evaluate browser, device, request, and security-related signals to determine whether activity appears to originate from a legitimate user rather than an automated system.

Turnstile may be used during activities such as:

• Signing in.
• Account creation.
• Submitting forms.
• Checkout.
• Other actions that may require automated abuse protection.

Information processed through Turnstile is handled by Cloudflare according to Cloudflare's own privacy practices.

10. Hosting and Server Infrastructure

The Store is hosted using server infrastructure provided by ServerCheap and other infrastructure necessary to operate the service.

Information stored or processed through the Store may therefore be transmitted through or stored on systems operated by our hosting and infrastructure providers.

This may include:

• Application data.
• Customer account information.
• Database records.
• Uploaded files.
• Transaction records.
• Logs.
• Backups.

11. NGINX and Server Logs

We use NGINX as part of our web server and reverse proxy infrastructure.

Our systems may create technical logs containing information such as:

• IP addresses.
• Request timestamps.
• Requested URLs and paths.
• HTTP methods.
• HTTP status codes.
• Browser and user-agent information.
• Referring URLs.
• Authentication activity.
• Error and diagnostic information.
• Security-related events.

These logs may be used for security, troubleshooting, abuse prevention, performance analysis, and service reliability.

12. Cookies, Sessions, and Local Storage

The Store may use cookies, session identifiers, local storage, and similar technologies necessary to provide secure and functional services.

These technologies may be used for:

• Authentication.
• Maintaining login sessions.
• Discord and GitHub authentication flows.
• Shopping cart and checkout functionality.
• Security and fraud prevention.
• CSRF protection.
• Remembering necessary preferences.

Third-party services such as Stripe, Cloudflare, Discord, or GitHub may also use cookies or similar technologies in connection with their services.

13. Transaction Records

We may retain records associated with purchases made through the Store.

These records may include:

• Your Store account identifier.
• Your email address.
• Your Discord or GitHub account identifier where associated with your Store account.
• Products purchased.
• Amounts paid.
• Transaction identifiers.
• Payment status.
• Refund information.
• Dispute or chargeback information.
• Dates and times associated with transactions.

Transaction information may be retained where reasonably necessary for customer support, fraud prevention, accounting, tax compliance, dispute resolution, and legal obligations.

14. Product Downloads, Entitlements, and Licenses

When you purchase or download a digital product, we may maintain information connecting your Store account and transaction to the applicable product.

Where applicable, we may process information necessary to:

• Provide downloads.
• Issue licenses.
• Validate product ownership.
• Manage account entitlements.
• Restore purchased products.
• Prevent unauthorized redistribution.
• Investigate abuse of download or licensing systems.

15. Uploaded Files and User Content

The Store may allow users to upload files, attachments, images, or other content in connection with supported functionality.

Uploaded files may be stored on our server infrastructure and processed as necessary to provide the requested functionality.

Uploaded content may also be processed for security, storage, delivery, moderation, troubleshooting, or abuse prevention.

You should not upload unnecessary sensitive personal information.

16. Fraud and Abuse Prevention

We may process account, login, transaction, network, device, and activity information where reasonably necessary to detect or investigate:

• Payment fraud.
• Chargeback abuse.
• Account compromise.
• Unauthorized redistribution.
• Suspicious login attempts.
• Automated attacks.
• Attempts to bypass Store security.
• Other fraudulent, abusive, or malicious activity.

17. Information We Share

We do not sell your personal information for monetary compensation.

We may share information with service providers where reasonably necessary to operate the Store and provide its functionality.

These providers may include:

• Stripe for payments and payment fraud prevention.
• Cloudflare for network infrastructure, security, DNS, and Turnstile.
• Discord when you choose to authenticate through Discord.
• GitHub when you choose to authenticate through GitHub.
• ServerCheap for hosting and server infrastructure.
• Other service providers necessary for databases, email, backups, monitoring, or application infrastructure.

We may also disclose information when reasonably necessary to:

• Comply with applicable law.
• Respond to valid legal requests or legal process.
• Enforce our agreements or policies.
• Investigate fraud, abuse, or security incidents.
• Protect SantosMods, our customers, or other individuals.
• Establish, exercise, or defend legal claims.

18. Third-Party Accounts and Disconnecting Access

If you use Discord or GitHub to sign in, you may be able to revoke SantosMods' authorization through the applicable third-party account settings.

Revoking authorization may prevent future login using that provider, but it may not automatically delete the Store account or information already received and lawfully retained by SantosMods.

Certain Store information may need to remain associated with your account for purchase, licensing, security, accounting, or legal purposes.

19. Data Retention

We retain information for only as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods may depend on factors such as:

• Whether your account remains active.
• Whether your account has purchases or ongoing product entitlements.
• Customer support requirements.
• Security and fraud-prevention requirements.
• Transaction and accounting requirements.
• Tax requirements.
• Refunds or payment disputes.
• Applicable legal obligations.

Some information may remain temporarily in backups after deletion from active systems.

20. Data Security

We use reasonable administrative, technical, and operational measures intended to protect the Store and information processed through it.

These measures may include:

• HTTPS encryption.
• Access controls.
• Secure authentication systems.
• Third-party OAuth authentication.
• Cloudflare security services.
• Cloudflare Turnstile.
• Firewall and network protections.
• Server logging and monitoring.
• Database access controls.
• Application security controls.
• Software and dependency updates.

No internet-connected service can guarantee absolute security.

You are responsible for maintaining the security of your Discord, GitHub, email, and any other account credentials used to access the Store.

21. Your Privacy Rights

Depending on your location and applicable law, you may have rights regarding your personal information, including the right to:

• Request access to information we maintain about you.
• Request correction of inaccurate information.
• Request deletion of certain information.
• Request a copy of certain information.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.

These rights may be subject to legal exceptions.

For example, we may need to retain transaction, payment, fraud-prevention, accounting, tax, or licensing information even after an account deletion request.

22. California Privacy Rights

California residents may have additional privacy rights under applicable California law, including rights regarding access, correction, deletion, and disclosure of personal information.

SantosMods does not sell personal information in exchange for monetary compensation.

23. European Economic Area, United Kingdom, and Switzerland

Where applicable data protection laws apply, we may process personal information based on one or more lawful grounds, including:

• Performance of a contract with you.
• Compliance with legal obligations.
• Our legitimate interests in operating and protecting the Store.
• Fraud and security prevention.
• Your consent where consent is legally required.

Our third-party service providers may process information in countries outside your country of residence.

24. Children's Privacy

The Store is not intended to knowingly collect personal information from children in violation of applicable law.

If you believe a child has provided personal information through the Store inappropriately, please contact us so that we can review the situation.

25. Third-Party Services and External Links

The Store may link to or integrate with third-party websites and services, including Discord, GitHub, Stripe, and other platforms.

SantosMods is not responsible for the privacy practices, security, content, or policies of third-party services.

You should review the privacy policies and terms of any third-party service you choose to use.

26. Business Transfers

If SantosMods, the Store, or substantially all relevant assets are acquired, merged, reorganized, or transferred, information associated with the Store may be transferred as part of that transaction where permitted by law.

27. Changes to This Privacy Policy

We may update this Privacy Policy when our Store, functionality, authentication providers, payment providers, infrastructure, or legal obligations change.

Updated versions will be posted through the Store with a revised "Last Updated" date.

28. Contact Us

If you have questions, concerns, or privacy-related requests concerning SantosMods or the Store, please contact us through our official support channels.

Website: store.santosmods.dev
Operator: SantosMods

We may need to verify your identity or ownership of the applicable Store account before fulfilling requests involving access, correction, export, or deletion of account data.