VipMod

Privacy Policy

This page lists what VipMod (the website and the app) stores about you and your phone, why, for how long, and who can see it. Two things up front: neither the website nor the app contains third-party analytics, tracking or advertising code, and we don't sell or rent your data or share it with advertisers.

Cookies on the website — three of our own

  • vipmod_session — the session cookie, for pages that have to remember something from one click to the next, such as a form or a sign-in. It ends when you close your browser, and it's only created when a page actually needs it: browsing the store, opening a game's page or downloading a file doesn't create it.
  • theme — only set if you press the light/dark switch. It contains the word "light" or "dark" and lasts one year.
  • vipmod_aff — only set if you arrive through a referral link. It holds that referral code and expires after 30 days.

There are no advertising cookies and nothing that follows you to other sites. The website loads its scripts, fonts and images only from itself. The one outside service is YouTube, for game trailers: nothing from YouTube loads until you press play, and then the video plays in YouTube's privacy-enhanced player (youtube-nocookie.com), under Google's own privacy policy.

The bridge between the website and the app

When you tap install on a game, the website needs to tell the VipMod app which game you came for — otherwise you'd have to find it again once the app is installed. It briefly stores three things: a one-way hash of your IP address, the game you tapped, and a referral code if you came through a referral link. That record lasts one hour at most and is deleted as soon as the app picks it up.

The website treats your IP address the same way everywhere else it needs to recognize "the same network": when counting downloads, counting visits to a referral link or slowing down repeated attempts. It keeps only a hash, never the address itself, and clears old ones out as new visits come in. Because this matching works by network, people sharing one network can be mixed up, so when it comes to the referrer, the app shows you that person's name and lets you decline rather than assigning it on its own. The app itself does keep IP addresses; see below.

Counts, plus a short activity trail

We count how many times each game is downloaded from the website and which words people search for in the store. The app adds daily and monthly totals (how often it's opened, how many games are installed and which ones) and reports, per game version, whether each mod is working. These are totals: they don't say who did what.

One thing does: the activity trail. For each phone, our server keeps the latest 100 actions in the app, each with its time: opening the app or switching tabs; opening, installing or removing a game; turning a mod on or off; searching the store, including the words you typed; starting an order; sending a support message (the fact that you sent one, not what it said). Support staff see it next to your messages, so when you write "it stopped working", they can see what happened just before instead of asking you to piece it together. Older entries drop off as new ones come in. There's no switch to turn the trail off.

In the VipMod app

The device ID. The app identifies your phone by a one-way hash of the Android ID that Android gives VipMod on your phone (or by a random ID if that isn't available), and our server hashes it again before using it. It isn't your IMEI, phone number or advertising ID. It normally stays the same if you uninstall and reinstall VipMod, which is deliberate: a reinstall shouldn't reset the free plan's install limit. It changes after a factory reset.

The device record. When you open VipMod, and then about every 40 seconds while it's on screen (more often during a support chat), the app checks in with our server. The server keeps one record per phone with:

  • the phone's make and model, Android version, processor type and VipMod version;
  • the games installed inside VipMod, with each game's version and its mod version;
  • a copy of VipMod's Settings screen: your switches, the Google account email address (or addresses) signed in inside VipMod, and the Facebook account ID signed in inside VipMod, if any;
  • technical details support keeps needing: memory, screen size, ROM build and fingerprint, security patch level, where VipMod was installed from, the Google Play services version, free storage, the phone's Android ID and, on older Android versions that still allow it, its serial number;
  • your IP address and the country our network provider reports for it, when it was first seen, and the last five different addresses the phone used, with their countries and dates;
  • when the app was last open, how often it has been opened, what has been installed through it, which account is signed in, and the free plan's install history.

This is what lets support answer "it broke right after I changed networks" or "Google sign-in does nothing" without a long back-and-forth, and the install history is what stops the free plan's limits from being reset with a new account.

Crash reports. When VipMod or a game inside it crashes, the app sends a report: the game and its version, the error and where in the code it happened, your phone's model and Android version, what the app was doing at that moment (including your last few actions), and the hashed device ID, so support can find your crash when you write in. Identical crashes are merged into one entry, which remembers the last 20 phones (by hashed ID) that hit it. You can turn this off in VipMod → Settings → Send crash reports.

What stays on your phone. Signing in to Google or Facebook inside VipMod happens directly with Google or Facebook: your passwords and sign-in tokens stay on the phone, and our server only gets the email address and the Facebook ID mentioned above. Game backups stay on the phone, in a folder you choose or inside the app, and are never uploaded. The games you play inside VipMod are other companies' apps, with their own data practices that we don't control.

Your account and payments

Accounts are created in the app. Your password is stored only as a one-way hash, so nobody, us included, can read it back; if you lose it, you reset it. Besides your username, an account holds:

  • your email address: either one you gave support, or the Google address signed in inside VipMod, copied once onto an account that doesn't have one yet;
  • a phone number, only if you gave one to support, and the Facebook ID seen in the app, which helps support find your account;
  • when it was created and last signed in, when you were last online, and which phones are signed in to it (model and app version);
  • who referred you, if anyone, and your answer to the one-time "how did you hear about us?" question after your first purchase;
  • your plan and when it ends, the community display name and picture you chose, and notes our support staff add.

We only email you about your account's security: password reset codes, and a notice to your old address if your account's email is changed. If you tap Forgot password?, a six-digit code is sent to your account's email; it's stored only as a hash and works for 15 minutes. At the moment these emails go out from a Gmail account of ours, so Google handles them. Each code request and each completed reset is logged with the phone model and IP address it came from, to protect accounts against takeover.

Orders keep the order ID, what you bought (a plan or diamonds), the price, the status, the dates and how you paid, plus the reference we need to match the payment to the order. For a USDT transfer, that's the transaction ID and the sending wallet address, which are public on the blockchain anyway. The payment itself goes through the service you pay with, so we never see card numbers or your PayPal or bank login; with PayPal, we see what PayPal shows any seller, such as the payer's name and email. Your diamond wallet keeps a list of every top-up and every spend.

If you join the referral program, the payout details you enter (a PayPal email address or a USDT wallet address) are stored with each withdrawal so the money can be sent, and the app only shows them back to you masked. Partners see the usernames of the people they referred, each one's current plan, and how much their orders have earned the partner.

Support chat, bug reports and community rooms

  • Support chat is private between you and our team. It keeps your messages, pictures and videos, with your phone model and VipMod version. Next to it, staff see your account, your device record, your activity trail and your crash reports.
  • Bug reports are public within each game's bug list: other users see your report and pictures under your community display name, never your username. Each report also carries a diagnostic snapshot — game and mod versions, your phone's details, the game's settings inside VipMod (including a fake GPS location, if you set one), your recent activity and matching crashes — that only you and our staff can see.
  • Community rooms show your messages, pictures and videos to other members under your display name, profile picture and plan badge — again, never your username. If you're banned from the rooms, the ban is also tied to your phone's ID.
  • Mod requests and DIY Mod orders are private between you and our team.

Older pictures and videos may be moved from our server to a cloud storage provider we rent space from. They stay private there and can only be reached through our server or through links that expire after 15 minutes.

Our team uses an AI assistant, Claude, made by Anthropic, to help read and answer support chats, bug reports, community rooms and mod requests, and to carry out DIY Mod orders. When it works on your case, it reads the messages involved and may see the same account and device details our staff see. It never sees passwords.

Who can see your data

  • Our support staff, in our admin console: everything on this page that's tied to your account or your phone.
  • The AI assistant described above, for the cases it works on.
  • Other users see only what you post in community rooms and bug reports. If someone referred you, they also see your username, your plan and what your orders earned them.
  • Companies that run parts of the service for us: the hosting and network provider our servers sit behind, Google for the emails above, a cloud storage provider for older attachments if we use one, the payment service you choose, and YouTube when you play a trailer.

We don't sell or rent your data, and we don't share it with advertisers.

How long things are kept

  • The website-to-app bridge: one hour at most. Password reset codes: 15 minutes.
  • Support chat: the latest 500 messages of each conversation. Community rooms: the latest 1,000 messages of each room by default. Bug reports: up to 300 per game, with the oldest closed ones removed first. Older messages are deleted together with their pictures, and we can also switch on automatic deletion after a set number of days.
  • The activity trail: the latest 100 entries per phone. Crash reports: the newest 400 entries.
  • Device records, including the IP addresses in them: there's currently no automatic expiry, and they stay when an account is deleted (see below).
  • Your account, orders, wallet and referral records: until the account is deleted. The monthly diamond-wallet ledger is an accounting record and is kept after that, as is our internal log of staff actions and password resets.
  • Backups: we keep backup copies to recover from failures, so something deleted from the live service can still exist in an older backup.

Server technical logs

Like any website, the web server and the network provider in front of it keep standard request logs: IP address, the address requested, the time and the browser's identification string. They're managed by the hosting setup rather than by VipMod's own code, and we use them for security and to fix problems.

Your choices

  • Crash reports can be switched off in VipMod → Settings → Send crash reports.
  • Signing out of Google or Facebook inside VipMod stops those details being sent from then on. What was already copied to your account stays until you ask us to remove it.
  • A copy, a correction or a deletion: message us through Support in the app, or see the Contact page.
  • Uninstalling VipMod stops the app sending anything; what it already sent is kept as described on this page.

Our staff delete an account when you ask, and the deletion takes effect straight away. It removes the account itself, your support conversations, plan, orders, notifications, diamond balance, referral earnings and payout requests, DIY Mod orders, signed-in phones, profile picture and community profile. Some things stay, and we'd rather tell you which:

  • the device records of your phones, detached from the account but not deleted, with everything in them — the Settings copy and IP history included. They carry the install history that stops "delete the account, sign up again" from becoming a way to get unlimited free installs;
  • each phone's activity trail and crash reports;
  • your community messages, which stay in their rooms as messages from a member who has left;
  • your bug reports and mod requests, with the replies other people added. They stay filed under your old username, and the public bug list shows only its first two letters;
  • the diamond-wallet accounting ledger, our internal log of staff actions, and older backups.

Changes

When what we store changes, we update this page to match.