Privacy

What support submissions are used for

Everything you send through the support form is used for one purpose: investigating the problem you reported with a BitFlip Mods project. It is not sold, not shared with third parties, and not used for advertising, profiling or any kind of marketing.

Uploads are private

Attachments and diagnostic bundles are stored outside the part of the server that serves public files. There is no URL that reaches them, guessable or otherwise. The only way to open one is through a page that requires an administrator login, and files are always sent as downloads rather than displayed in a browser.

What a diagnostic bundle contains

Bundles are produced by the mods themselves, on your machine, and you choose whether to attach one. They contain information about the game and the mods rather than about you: mod and game versions, the Unity version, your operating system, which mods were loaded, and what the mod recorded while it ran.

The mods anonymise this material before writing it - user and computer names, file paths and save identifiers are replaced with placeholders. If a bundle includes a game log, that log is included only because you switched that option on, and it is sanitised the same way. A bundle can still describe your system and your game, so treat it as system information, and do not attach one if you would rather not.

Your email address

The email field is optional and the form works without it. If you do supply one, it is used only to reply about that ticket. There is no mailing list to end up on.

You do not need an account. Your ticket is reached through a private link containing a long random secret; the ticket number alone will not open it. Keep the link - only its fingerprint is stored here, so it cannot be looked up and re-sent to you automatically.

IP addresses

Your IP address is not stored in the database. To limit abuse of the submission form the server keeps a short-lived, salted one-way fingerprint of the address, which expires on its own inside the rate-limit window and cannot be turned back into an address. Ordinary web-server request logs may briefly contain addresses, as they do on any site; they are not linked to tickets.

How long files are kept

While a ticket is open its attachments are kept, because that is what the investigation needs. Once a ticket is resolved or closed:

• attachments are deleted automatically 30 days later;
• 90 days after closure is a hard ceiling that cannot be extended;
• the exception is a ticket explicitly marked to retain - for example one tracking a bug that is still unsolved - and its files stay until that mark is removed.

Deletion removes the files themselves from the running site. The written record of the ticket - your description, the replies, and the name and size of what was attached - is kept so the history still makes sense.

What "deleted" honestly means

Support uploads are deliberately excluded from our own routine long-term backups, so a deleted attachment is not carried forward in them. They are not, however, excluded from the hosting provider's own infrastructure snapshots, which are taken daily at the server level and are outside our control.

So a file that has been deleted here can still exist for a time in the provider's snapshots until those rotate out under the provider's own retention schedule. It is not accessible through this site, it is not used for anything, and it is not searched or restored for any purpose other than recovering the server itself after a failure. We would rather say that plainly than claim an instant, universal erasure that no ordinary hosted service can actually deliver.

Analytics

This site counts page views using GoatCounter, which runs on the same server as the site itself. Nothing is sent to Google, to an advertising network, or to any other company. The counting script is GoatCounter's own, published under a permissive licence for exactly this purpose and served from this domain rather than from anyone else's, and the counts go to stats.bitflipmods.com, which is ours.

What is recorded for a page view:

• the page you looked at, and its title;
• the page you arrived from, if you followed a link;
• your browser and operating system, and your screen size;
• a coarse location, at country level, worked out from your IP address;
• the fact that a small number of specific links were clicked - a Steam Workshop link, a support button, an entry into the developer documentation.

It is used for one thing: seeing which mods and pages people actually look at, so time goes into the parts that get used. It is not sold, not shared, and not used for advertising or to build a profile of you.

What it does and does not do

GoatCounter sets no cookie and stores no identifier that follows you between sites. To tell a repeat view apart from a new visitor within a day, it derives a temporary hash from your IP address, browser and a rotating salt, and stores that hash rather than the address itself. That is not nothing, and we would rather describe it than call the site "completely anonymous": it is designed so the stored data cannot reasonably be tied back to you, not so that no signal about you is ever processed.

Your IP address is used to derive that hash and the country, and is not stored in the analytics database alongside the page view.

If you would rather not be counted at all, add #toggle-goatcounter to the end of any address on this site and load it - for example https://bitflipmods.com/#toggle-goatcounter. Counting then stops in that browser until you do the same again. This is the one thing analytics stores on your device: a single on/off flag in local storage, written only if you ask for it.

Where it is not used

Nothing is counted on the private part of the support flow - the page showing your private link, and your ticket page itself - nor in the admin, nor for a signed-in administrator. The ticket link is a credential, so it is never sent to the analytics instance: not as a page view, and not as the referrer when you click away from it.

Cookies

This site sets no advertising cookies, no analytics cookie and loads no third-party scripts or fonts - everything it runs is served from this domain. It uses a session cookie and a CSRF token cookie, which exist to make the support form work safely, and the analytics opt-out flag described above if you turn it on.

Removing a ticket

If you want a ticket and its attachments deleted before the retention period is up, say so in the ticket itself and it will be removed.