allofus.dev/privacy-policy.html at master · All-Of-Us-Mods/allofus.dev · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
<!DOCTYPE html>
<html lang="en">

<head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1">
  <title>Privacy Policy - All Of Us Mods</title>
  <style>
    body {
      font-family: Arial, sans-serif;
      margin: 0;
      padding: 2rem;
      background-color: #f9f9f9;
    }

    .privacy-container {
      max-width: 720px;
      margin: 0 auto;
      text-align: left;
      line-height: 1.6;
    }

    h1,
    h2,
    h3 {
      margin-top: 1.5em;
      color: #333;
    }

    @media (max-width: 600px) {
      body {
        padding: 1rem;
      }
    }
  </style>
</head>

<body>

  <div class="privacy-container">
    <h1>Privacy Policy</h1>
    <p><strong>Effective Date:</strong> December 23, 2025</p>

    <p>
      All Of Us Mods ("we", "our", or "us") operates the All Of Us Mods Android application
      known as Starlight. This Privacy Policy explains how personal data is processed when
      you use the app, in accordance with the General Data Protection Regulation (GDPR)
      and other applicable privacy laws.
    </p>

    <h2>1. Data Controller</h2>
    <p>
      The data controller responsible for processing your personal data is:
    </p>
    <p>
      <strong>All Of Us Mods</strong><br>
      Individual developer<br>
      Email: <a href="mailto:dev.aou.starlight@gmail.com">dev.aou.starlight@gmail.com</a>
    </p>

    <h2>2. What Data Is Collected</h2>

    <h3>2.1 Data You Provide</h3>
    <p>
      If you choose to sign in using itch.io OAuth, basic account identifiers provided
      by itch.io may be processed for authentication purposes. We do not operate our own
      user account system and do not store passwords.
    </p>

    <h3>2.2 Automatically Collected Data</h3>
    <p>
      When you use the app, the following data may be processed:
    </p>
    <ul>
      <li>An anonymous, app-generated tracking identifier used solely to count content downloads</li>
      <li>Technical data such as app version, device type, and operating system version</li>
      <li>Crash and diagnostic data collected via Firebase Crashlytics</li>
    </ul>

    <p>
      The anonymous tracking identifier is generated on installation and can be reset
      by clearing the app's data. It is not linked to your real-world identity.
    </p>

    <h2>3. How Data Is Collected</h2>
    <p>
      Data is collected when you:
    </p>
    <ul>
      <li>Use the app to download content from our backend server</li>
      <li>Use the app to connect to multiplayer servers</li>
      <li>Sign in using itch.io OAuth</li>
      <li>Use the app while crash reporting or diagnostics are enabled</li>
      <li>View or interact with advertisements</li>
    </ul>

    <h2>4. Purpose and Legal Basis for Processing</h2>

    <table border="1" cellpadding="6" cellspacing="0">
      <tr>
        <th>Purpose</th>
        <th>Legal Basis (GDPR Art. 6)</th>
      </tr>
      <tr>
        <td>Content delivery and download counting</td>
        <td>Legitimate interest (Art. 6(1)(f))</td>
      </tr>
      <tr>
        <td>Crash reporting and diagnostics</td>
        <td>Legitimate interest (Art. 6(1)(f))</td>
      </tr>
      <tr>
        <td>Non-personalized advertising</td>
        <td>Legitimate interest (Art. 6(1)(f))</td>
      </tr>
      <tr>
        <td>Personalized advertising</td>
        <td>Consent (Art. 6(1)(a))</td>
      </tr>
      <tr>
        <td>OAuth authentication</td>
        <td>Contractual necessity (Art. 6(1)(b))</td>
      </tr>
    </table>

    <p>
      Advertising is always displayed in the app. Users in applicable regions are
      asked to provide consent for the use of personal data for personalized
      advertising via Google's User Messaging Platform (UMP).
    </p>

    <p>
      If consent for personalized advertising is not granted or is withdrawn,
      non-personalized ads will continue to be shown. Consent choices can be
      changed at any time through the in-app consent settings or applicable
      device settings.
    </p>

    <h2>5. Third-Party Service Providers</h2>

    <h3>Google AdMob</h3>
    <p>
      The app uses Google AdMob to display advertisements. Advertising is always
      shown in the app.
    </p>

    <p>
      Depending on your consent choices, AdMob may process personal data such as
      device identifiers, IP address, and interaction data to provide personalized
      advertisements. If consent is not provided, only non-personalized
      advertisements will be shown.
    </p>

    <p>
      Consent for personalized advertising is managed using Google's User Messaging
      Platform (UMP).
    </p>

    <h3>Firebase Crashlytics</h3>
    <p>
      Firebase Crashlytics is used to collect crash reports and diagnostic data to
      improve app stability and performance.
    </p>

    <p>
      For more information on Google's data practices, see:
      <a href="https://policies.google.com/privacy" target="_blank">Google Privacy Policy</a>.
    </p>

    <h3>itch.io OAuth</h3>
    <p>
      If you sign in using itch.io, authentication data is processed by itch.io in
      accordance with their <a href="https://itch.io/docs/legal/privacy-policy" target="_blank">privacy policy.</a>
    </p>

    <h3>InnerSloth</h3>
    <p>
      The app integrates with InnerSloth services for gameplay features related to
      Among Us. For more information, please refer to InnerSloth's
      <a href="https://www.innersloth.com/privacy-policy/" target="_blank">Privacy Policy</a>.
    </p>

    <h3>Third-Party Game Server Hosters</h3>
    <p>
      When you connect to a multiplayer match, the privacy policies of the respective
      server operators apply. The app shares your authentication details with these
      servers. These are the privacy policies of the server operators we include
      by default:
    </p>

    <ul>
      <li>InnerSloth: <a href="https://www.innersloth.com/privacy-policy/" target="_blank">Privacy Policy</a></li>
      <li>Miniduikboot: To Be Announced</li>
      <li>NikoCat233: <a href="https://au.niko233.me/policy" target="_blank">Privacy Policy</a></li>
    </ul>

    <h2>6. Backend Infrastructure</h2>
    <p>
      Content delivery is handled by a backend server hosted with Hetzner in the United States,
      with Cloudflare (US East) acting as a reverse proxy. The backend does not log IP addresses,
      and IP logging is disabled at the proxy level.
    </p>

    <h2>7. International Data Transfers</h2>
    <p>
      Because the app operates internationally, personal data may be processed outside
      the European Economic Area (EEA). Where applicable, such transfers are protected
      by appropriate safeguards, including Standard Contractual Clauses.
    </p>

    <h2>8. Data Retention</h2>
    <p>
      We retain personal data only for as long as necessary to fulfill the purposes
      described in this policy. Retention periods for data processed by third-party
      services are governed by their respective privacy policies.
    </p>

    <h2>9. Your Data Protection Rights</h2>
    <p>
      If you are located in the EEA, you have the right to:
    </p>
    <ul>
      <li>Access your personal data</li>
      <li>Request correction or deletion</li>
      <li>Restrict or object to processing</li>
      <li>Withdraw consent at any time</li>
      <li>Request data portability</li>
    </ul>

    <p>
      You also have the right to lodge a complaint with your local data protection
      authority.
    </p>

    <h2>10. Children's Privacy</h2>
    <p>
      The app is intended for users aged 13 and older and is not directed toward
      children under the age of 13.
    </p>

    <p>
      We recognize that Among Us is played by users of various ages, and it is
      possible that children under 13 may access or use the app despite its intended
      audience.
    </p>

    <p>
      We do not knowingly collect personal data from children under 13. If we become
      aware that personal data from a child under 13 has been collected, we will take
      reasonable steps to delete such data as soon as possible.
    </p>

    <p>
      Parents or guardians who believe that their child has provided personal data
      through the app may contact us using the contact information provided below.
    </p>

    <h2>11. Changes to This Policy</h2>
    <p>
      We may update this Privacy Policy from time to time. Any changes will be posted
      within the app or on our website, and the effective date will be updated.
    </p>

    <h2>12. Contact</h2>
    <p>
      If you have questions about this Privacy Policy or your data protection rights,
      please contact:
    </p>
    <p>
      <a href="mailto:dev.aou.starlight@gmail.com">dev.aou.starlight@gmail.com</a>
    </p>
  </div>
</body>

</html>