PRIVACY POLICY

Who this policy covers

FB Mods operates fbmod.com, its licensing API, and the private administration dashboard at stats.fbmod.com. This policy describes those services and FB Frame Counter's licensing requests. It does not describe every data practice of Geometry Dash, Geode, other mods, or external websites.

Information collected

• Free installations: a randomly generated installation ID, a protected authentication token, mod version, registration time, and last contact time. You do not need to create an FB Mods account. The installation ID is pseudonymous; it is not a verified count of individual people.
• Recording access: request IDs, installation ID, date and time, plan, whether the request was allowed, and a denial or administrative reset reason. These records show whether the free daily allowance has been used. So that reinstalling does not reset the free allowance, we also keep a hashed network address with that day's free recording for a few days; it is not shown to staff.
• Paid licenses: the email and name supplied at checkout, the billing country and amount paid, Stripe customer and payment references, plan, license creation and expiry, activation, transfers, revocation, and email delivery status. License keys are stored as hashes and encrypted copies for fulfillment.
• Support: messages, your TikTok username, and any purchase reference, error information, or files you choose to send.
• Website and network requests: hosting and payment providers may process IP addresses, browser/device information, request metadata, and security or error logs to deliver and protect their services.

The licensing requests do not send gameplay recordings, level contents, Geometry Dash usernames, or hardware serial numbers to the FB Mods licensing database. From FB Frame Counter v6, when a scan of a whole level finishes, the mod sends fbmod.com the list of that recording's inputs (when each click and release happens, and on which key), the outcomes of the scan's test replays and your counting settings, so the same numbers can be worked out on our server and compared with the mod's own. Nothing of the level itself is sent. The server does not keep the inputs or the results: it keeps only sizes, counts, a fingerprint (hash) of the request and a short tag of your network that changes every day. Recordings remain on your device unless you choose to share them for support.

FB Lists

FB Lists is a separate mod with its own service at fbmod.com/list. It collects:

• Your Geometry Dash account: account ID, username, and the cube and colours of your icon, sent when you sign in. Sign-in is confirmed through Argon, a third-party service that checks the account with the Geometry Dash servers; your Geometry Dash password is never sent to FB Mods.
• Your lists: the lists, categories, levels, notes and banner pictures you add, who is on each list and in what role, and each member's best percentage and attempts on each level. Members of a list see each other's username, icon and progress on that list.
• List pages: if a list's owner switches its web page on, anyone with the link and the page's password (or anyone with the link, if the owner removes the password) can see that list, its members' usernames and their progress. Wrong password tries are counted per network address for a short time to stop guessing.
• Install identity: a random identifier the mod makes for its install (it is not read from your device's hardware) and keeps if the mod is removed and installed again. We store only a hash of it, with when it was first and last seen, to count the free trial once per install.
• FB Lists purchases: the email supplied at checkout, Stripe references, plan, the key issued, and the list the plan is for; a key is tied to the list it is used on.

Level previews in FB Lists are loaded from a public community thumbnail service or from banners uploaded by list editors. To delete your FB Lists account, your lists or a banner, contact us; a list's owner can delete the list in the game at any time.

Why we use it

We use this information to issue and email licenses, verify payment and activation, enforce one active installation and daily recording limits, handle transfers and refunds, prevent misuse, diagnose problems, and understand aggregate installation and access statistics. Where privacy law requires a legal basis, processing is based on providing the service you request, legitimate operational and security interests where permitted, legal obligations, or consent where required.

Without installation and authorization requests, online recording access cannot be verified. Without checkout contact information, we cannot email or support a paid license. We do not sell personal information or use this licensing database for targeted advertising.

Providers and overseas processing

We use Cloudflare for hosting, security, and the licensing database; Stripe for payments; and Resend for license emails. Resend receives the recipient email address and license email content, including the code. Stripe handles full card details; we do not store full card numbers in the FB Mods database.

These providers may process information outside Australia, including in the United States and other countries in their international infrastructure. Their linked policies explain their processing and safeguards. If you contact us on TikTok, that platform also processes your profile and messages under its own privacy policy. We may disclose information when legally required or to address fraud, security incidents, or legal claims.

Cookies, security, and retention

If you arrive through our TikTok ad link, the TikTok pixel loads so TikTok can measure whether its ad led to a page view, download, checkout or purchase; TikTok may set cookies and receives your IP address, browser details and those events. Visitors who arrive any other way do not load it. While a page is open it sends an anonymous visit signal with a random per-tab ID, the page being viewed, the country the visit came from, the name of the site or app that linked you here (for example tiktok.com), and whether a download, checkout or purchase happened. Your network address itself is not stored with it. If you arrive through one of our own campaign links, such as our TikTok ad link, a short label for that link is saved in your browser for up to 30 days and recorded with the visit and any order, so we can see whether our ads work. For those campaign-link visits we also keep your network address in hashed form for up to 30 days, so that a later visit, download or purchase from the same network, for example on another device at home, can be counted as coming from that link; it is not shown to staff. Providers such as Stripe and Cloudflare may use cookies or similar tools for checkout, fraud prevention, or security. The private dashboard uses a sign-in session. The mod saves its installation credentials locally.

We restrict access to the private dashboard, use encrypted network connections, and protect license credentials. No service can promise perfect security.

We retain license and purchase records to provide access and handle support, refunds, accounting, and legal obligations. Installation and access audit records currently have no automatic fixed deletion period. Contact us for a retention or deletion request; we assess what can be removed and what remains necessary for active licenses, fraud prevention, unresolved claims, or legal requirements. Provider logs and backups follow their own retention arrangements.

Support uploads

When you use the support upload page, we store your file, filename, size, submission time, reference number and your selected paid or free status. That selection is self-reported and does not verify a purchase. Support files are stored with Supabase, whose infrastructure may process them outside Australia. Staff can access files privately to investigate your issue and test fixes. Files and their submission records are deleted after 30 days. We temporarily store a hashed network address and upload count for abuse prevention; we do not show your network address to staff. Share only files you have permission to share, and remove sensitive information before uploading.

Your choices and complaints

Contact FB Mods by private message on TikTok @fbmod.com ↗. Tell us whether your request concerns support, a refund, or privacy. Do not post payment details or license codes publicly, and never send your full card number or password.

You can request access, correction, or deletion of information associated with your installation or purchase, and raise a privacy complaint. Share your installation ID or purchase reference privately so we can identify the record. We may need reasonable verification before disclosing or changing personal information.

We aim to acknowledge requests within five business days and explain the response or any lawful reason a request cannot be fully met. Deleting active licensing information may prevent verification of access; we will explain that before taking action. Depending on the laws that apply, you may have additional rights, including objection or restriction, and can complain to your relevant privacy authority. In Australia, see the OAIC privacy complaints guidance ↗.

Changes

We update this notice when our information handling changes and show the update date above. Material changes will be brought to users' attention through the website or another appropriate channel. Where consent is required for a new use, a policy update alone is not consent.