Privacy Policy
Last updated:
This policy explains what personal data mods4claude.com (the "site") processes, why, and what rights you have. We keep data collection to the minimum needed to run a public directory.
1. Who is responsible
The controller responsible for data processing on this site under the EU General Data Protection Regulation (GDPR) is:
beg1nner studio (Fifi, EI)
22 rue des Petites Écuries
75010 Paris
France
Email: contact@beg1nner4ever.com
For any privacy question or to exercise your rights, contact us at contact@beg1nner4ever.com.
2. The short version
- No tracking, no advertising cookies and no third-party analytics.
- No social media embeds. Posts and avatars from X are shown as plain text cards that link out to X.
- Fonts are self-hosted and we load no third-party scripts or images. The only exception is Cloudflare's network error reporting, described in section 3.
- We do not sell personal data and do not use automated decision-making or profiling.
3. Hosting and delivery (Cloudflare)
The site runs on Cloudflare Workers, and its database is Cloudflare D1, located in Western Europe. When you visit the site, Cloudflare, Inc. processes request data on our behalf as our processor: your IP address, browser user agent, the requested URL and the time of the request. This is necessary to deliver the site to you and to protect it against attacks, including DDoS and bot protection.
Legal basis: our legitimate interest in providing a secure and working website (Art. 6(1)(f) GDPR). Cloudflare keeps these logs only for a short period according to its own retention practices. Cloudflare may process data outside the EU, including in the United States. Such transfers are based on the EU-US Data Privacy Framework and, where applicable, the EU Standard Contractual Clauses.
Cloudflare also sends Network Error Logging headers. If a page fails to load because of a network problem, your browser may send a short technical error report (URL, error type, your IP address as seen by Cloudflare) directly to Cloudflare. These reports are used only to detect outages. Legal basis: our legitimate interest in a reliable service (Art. 6(1)(f) GDPR).
4. Abuse prevention (rate limiting)
To prevent abuse of our forms, we store a salted SHA-256 hash of your IP address together with a request counter for up to 2 hours. We do not store your IP address itself for this purpose, and the hash is not used for anything else. Legal basis: our legitimate interest in protecting the site and its forms from abuse (Art. 6(1)(f) GDPR).
5. Cookies and local storage
We do not use tracking or advertising cookies. The only cookie is a strictly necessary session cookie for the site administrator. Your browser's local storage is used to remember your light/dark theme choice and that you dismissed the privacy notice. These values stay in your browser and are not sent to us. Details are in our Cookie Policy.
6. Mod submissions
If you suggest a mod through the submission form, we process the repository URL, mod name, category, description and, if you provide them, your GitHub username and contact email address. We use this to review the submission and, if it is accepted, to list the mod. When you submit, our server fetches the repository's public plugin files from GitHub to check that it exists. Your GitHub username is optional and, if given, is shown publicly on the mod's page as "submitted by". Your email address is optional, never shown, and used only to reply to you about your submission.
Legal basis: our legitimate interest in maintaining the directory and handling submissions (Art. 6(1)(f) GDPR). Submissions are kept until they have been reviewed and for at most 12 months.
7. Mod directory data from GitHub
The directory is built from public GitHub repositories, primarily from the CC0-licensed scan published at github.com/karanb192/awesome-claude-code-mods. Listings can include the names and usernames of mod authors as they appear publicly on GitHub, together with repository details. For each author we also show public GitHub profile information: display name, bio, location, follower count, avatar and the website and X account linked from the profile. We may label well-known organizations and people (for example official Anthropic mods) based on that public information. Avatars are fetched by our server and served from our domain, so your browser does not contact GitHub.
Legal basis: our legitimate interest in providing a useful public directory of Claude Code mods (Art. 6(1)(f) GDPR). If you are an author and want your information corrected or your listing removed, email us at contact@beg1nner4ever.com.
7a. Votes on mods
You can upvote or downvote mods without an account. To allow one vote per person and to prevent manipulation, we store a salted SHA-256 hash of your IP address (for IPv6, of its /64 network) with each vote. We cannot read your IP address back from it, and it is not combined with any other data. The hash is kept for as long as the vote exists; you can remove your vote at any time by clicking it again. Only vote totals are shown publicly. Legal basis: our legitimate interest in fair, abuse-resistant community ratings (Art. 6(1)(f) GDPR).
8. Community posts from X (Twitter)
The site shows public posts from X about Claude Code mods. These are collected through X's public search by a data provider, Monid, on our behalf. For each post we show the handle, display name, post text, date, engagement counts and a link to the original post on X. We do not load any content from X in your browser.
Legal basis: our legitimate interest in showing community discussion about the mods in the directory (Art. 6(1)(f) GDPR). If you want a post of yours removed, email us at contact@beg1nner4ever.com and we will remove it.
9. Sponsorship bookings and payments
Businesses can book sponsored placements. For a booking we process the company name, ad title, tagline, destination link, contact email address, the chosen slot and dates, and payment references from Stripe (such as checkout and payment IDs). The contact person's email address may be personal data.
Payments are handled by Stripe Checkout, provided by Stripe Payments Europe Ltd. and Stripe, Inc. ("Stripe"). You enter your payment details directly with Stripe. We never see or store card numbers. Stripe processes payment data partly on our behalf and partly as an independent controller, for example for fraud prevention and to meet its own legal obligations. Stripe may transfer data outside the EU, including to the United States. More information is available in Stripe's privacy policy.
Legal basis: performing the booking contract and steps taken before it (Art. 6(1)(b) GDPR), and our legal obligations to keep accounting records (Art. 6(1)(c) GDPR). Booking and sponsor data for paid bookings is kept for the statutory retention periods for accounting records (10 years under Art. L123-22 of the French Commercial Code). Booking requests that were never paid (cancelled or expired checkouts) are deleted after 30 days.
For each ad we count clicks only as an aggregate total. This count contains no personal data about visitors.
10. Contacting us by email
If you email us, we process your email address and the content of your message to answer you. Legal basis: our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR) or, where your message relates to a booking, the contract (Art. 6(1)(b) GDPR). We delete the correspondence when it is no longer needed, unless we must keep it by law.
11. Recipients
Personal data is shared only with the service providers named above, as far as needed for each purpose:
- Cloudflare, Inc. (hosting, database, security)
- Monid (collection of public posts from X)
- Stripe (payment processing for sponsorships)
We may also disclose data where we are legally required to do so, for example to authorities.
12. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15 GDPR);
- have inaccurate data corrected (Art. 16 GDPR);
- have your data erased (Art. 17 GDPR);
- have processing restricted (Art. 18 GDPR);
- receive your data in a portable format (Art. 20 GDPR);
- object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests (Art. 21 GDPR);
- lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work, or where you believe an infringement took place (Art. 77 GDPR).
To exercise your rights, email us at contact@beg1nner4ever.com. We may need to verify your identity before we act on a request.
13. No automated decisions, no sale of data
We do not make decisions based solely on automated processing that have legal or similarly significant effects on you, and we do not sell or rent personal data.
14. Changes to this policy
We update this policy when the site or the law changes. The date at the top shows the latest version.