Privacy

Last updated: 11 November 2026

The UserFeedback relay passes feedback reports from players of Vintage Story mods on to the authors of those mods. It's run by Lazzeking, as a free service for the modding community. There are no ads, no analytics and no tracking.

If you have a question, want a report deleted, or want to use any of your rights below, write to [email protected] or message lazzeking on Discord.

For players: what happens when you send a report

What the relay receives. When you send a report from the game, the relay receives what the UserFeedback panel showed you before sending: your rating and text, the mod's name and version, other mods involved, and, if you left them in, the screenshot, game details (game version, position, in-game date, season and weather, game mode, language, mod list, system details), the log lines about the reported mod, your full logs and the files the mod asked for. Before anything leaves your computer, UserFeedback replaces your player name, home folder, server address, IP addresses, emails and anything that looks like a password with placeholders. Only what you write yourself can still contain personal details, so don't put any in.

Checks. Every upload is checked before it's kept: the screenshot is re-drawn so only the picture is left, the logs are checked to be plain text, and the zip files are inspected without being unpacked. Anything that doesn't pass is refused and nothing of it is kept.

Where it goes. The relay sends your report to the destinations the mod's author set up: a channel on their Discord server, or their own server. On Discord, everyone who can see that channel can read the report, and Discord stores it under Discord's privacy policy. Authors never receive your IP address from the relay.

How long the relay keeps it. The relay deletes the report's text and files as soon as every destination has received it, at the latest after 3 days. If a destination can't be reached, the relay tries again for about 15 hours before giving up. After that, the relay only keeps the mod, its version, the game version, your rating and the time, for statistics. That's no longer about you.

What happens to your report after it's delivered is up to the mod's author, and the relay can't delete it from their Discord channel or server. Write to the author for that, or to [email protected] and we'll pass your request on.

Your IP address

Your IP address is only used to stop one person from flooding the relay with reports. For that, the relay counts reports per address using a one-way code made from your address, a secret key and the current date. The address itself is never stored, the code can't be turned back into it and changes every day, and the counters are deleted within 2 days. IPv6 addresses are counted by their network (the first half), since one connection usually gets a whole network.

When an upload is refused, the relay keeps the reason, the file sizes and that same one-way code for 30 days, to notice when someone keeps sending broken or harmful files. Never the content.

Cloudflare. The relay is delivered through Cloudflare, which protects it and handles your IP address and the details of each request to do that.

Server logs. The web server logs the time, the page and the answer of each request, without IP addresses and without anything after a "?" in the address. Logs are deleted after 14 days.

For mod authors

Logging in. You log in with Discord. The relay only asks Discord for your account ID, your name and your avatar, and refreshes them each time you log in. It doesn't keep the access Discord gives it. While you're logged in, one cookie (__Host-uf) holds a random session code, and it's deleted when you close your browser or log out.

Adding a Discord channel. When you add a channel, Discord asks you to allow two things: creating a webhook in the channel you pick, and seeing the servers you're in. The relay only uses the second to read the name of the server you picked, so your destination has a readable name. It doesn't keep the list.

What's kept about you. Your mods and their settings, your destinations (webhook addresses and signing secrets are encrypted), and a log of important actions like verifying a mod or adding a destination. To check that a mod is yours, the relay reads the mod's public page on the Vintage Story ModDB, and if needed its public GitHub repository. All of this is kept as long as you use the relay. Write to [email protected] to have your account and everything in it deleted.

Your responsibility. Reports you receive come from players who trusted you with them. You're responsible for what you do with them once they've arrived in your channel or on your server.

Things that stay in your browser

If you use the light/dark switch, your choice is saved in your browser (local storage). It never leaves your browser. The relay's pages load everything from the relay itself, except the page styles, which come from lazzeking.fyi (same owner, also through Cloudflare), and avatars of logged-in authors, which come from Discord's image server.

Backups

The relay's database is backed up and backups are kept for 14 days. Report files are never backed up.

Legal basis

Passing on reports, counting reports per address and keeping the relay safe are based on legitimate interest (Article 6(1)(f) GDPR): you chose to send your report to the mod's author through the relay, after confirming once that it goes to this site, and the relay needs to protect itself and the authors from abuse. Logging in and adding destinations are things authors ask for by using the relay.

Your rights

You can ask for access to, correction of, or deletion of data about you, ask for its processing to be restricted, or object to it. You can also complain to the data protection authority in your country.

No guarantee

The relay is a free service and can stop at any time. Reports that were already delivered stay with the mod's author.

Changes

If this page changes, the date at the top changes with it.