Upload

Privacy policy

Last updated: July 2, 2026

GTVault collects the strict minimum of data needed to run a mod-sharing platform. Data controller: the site publisher, a private individual acting in a non-professional capacity — contact: contact@gtvault.org.

Data collected

  • Account: public username, password (hashed with the Argon2 algorithm — never stored in plaintext), optional email (used only for account recovery, never displayed publicly).
  • Public profile (optional): profile photo, bio, location, links to your social networks — only what you enter yourself.
  • Published content: mods, images, descriptions, comments, ratings, reports.
  • Technical data: IP address and timestamps in the server logs (security: rate limiting, anti-abuse, audit log of sensitive actions).

Cookies

The site uses only strictly necessary cookies: a session cookie (httpOnly) to keep you signed in, and a theme preference (light/dark) stored locally. No advertising cookies or third-party trackers are set — which is why no consent banner is shown. If advertising were introduced in the future, a certified consent management platform (CMP) would be put in place beforehand and this policy would be updated.

Purposes and legal bases

  • Provide the service (account, publishing, downloads) — performance of the contract.
  • Security and abuse prevention (rate limiting, audit log, antivirus) — legitimate interest.
  • Account recovery via the optional email — performance of the contract.

Retention periods

  • Account data: for as long as the account exists.
  • Technical and audit logs: 12 months maximum.
  • After account deletion: comments remain displayed anonymized (“deleted account”); mods are deleted or anonymized depending on your choice at the time of deletion.

Data sharing

Data is neither sold nor shared for commercial purposes. Files and images are stored with Cloudflare (R2); the site is hosted with OVH (France). Uploaded files are automatically scanned by antivirus on the server side.

Your rights (GDPR)

  • Access / portability: Settings → “Data & deletion” → “Download my data” (immediate JSON export).
  • Rectification: profile and email can be changed at any time in the settings.
  • Erasure: self-service account deletion (Settings → “Data & deletion”), effective immediately.
  • For any other request: contact@gtvault.org. You may also lodge a complaint with the French data protection authority, the CNIL (cnil.fr).