Konan Modslittle things, lovely places

Privacy Policy

Last updated: 19 October 2026

This Privacy Policy explains how Konan Mods handles personal information when you visit our website, contact the studio or subscribe to studio updates. Our public website address is konanmods.com. For privacy questions or requests, contact [email protected].

1. Who this policy covers

Konan Mods is the independent creative studio responsible for the information collected through this website and its own newsletter. We make fan-made mod packs for Tiny Glade. We are not affiliated with or endorsed by the game’s creators. This policy covers our website and direct communications. External platforms, including Patreon and social networks, control information collected through their own services under their own privacy notices.

2. Information we collect

We do not operate an onsite checkout or collect card details through the public catalog. If you support us or obtain content through Patreon, that platform processes its own account and transaction information. Information you send us about an external transaction becomes part of the relevant support correspondence.

3. Why we use information

Where applicable data-protection law requires a lawful basis, we rely on consent for newsletter marketing. We rely on our legitimate interests in operating a secure website and responding to ordinary enquiries, subject to your rights. A legal obligation or steps you request in connection with a contract may apply to particular records. We do not use the newsletter list for automated decisions with legal or similarly significant effects.

4. Newsletter choice and confirmation

Joining is optional. The form asks for explicit consent, and an email confirmation is required before your subscription is confirmed. Confirmation links expire after 48 hours. If you did not request an email, do not confirm it; you may contact us to remove the pending record.

You can withdraw consent using an unsubscribe link in an email and completing the displayed request, or by contacting [email protected]. Unsubscribing stops future studio marketing; it does not prevent a direct response to a support or privacy request. Withdrawing consent does not affect processing that was lawful before withdrawal. A later subscription requires a fresh signup and confirmation.

5. Cookies, local storage and embedded content

The current custom public site does not include advertising cookies or a third-party audience analytics integration. Fonts and interface artwork are served locally. WordPress may use essential cookies for administrator login and security; hosting services may also process technical information needed to deliver the site.

A pack page can include a third-party video when one is configured. Loading such embedded content may disclose your IP address and browser information to that provider, which may use its own cookies or storage. A normal link to a social platform or Patreon takes you to that service when selected. You can control cookies through your browser and review the relevant platform’s privacy settings. Blocking essential storage may affect login or other protected functionality.

6. Service providers and disclosures

Information is handled by the infrastructure needed to run the website and email service, including website/database hosting, authorized administrators, the configured email delivery provider and relevant technical support. Newsletter confirmations use WordPress mail through the existing FluentSMTP connection. Email infrastructure may retain delivery logs and message metadata under its own configuration and retention arrangements.

We do not sell the newsletter list or share it with social platforms for advertising audiences. We may disclose information where required by applicable law, necessary to protect rights or investigate misuse, or to professional advisers bound by appropriate confidentiality obligations. Only information relevant to the purpose should be disclosed.

7. International processing

Website, email and external platform infrastructure may process information in countries other than your own. The providers and processing locations depend on the services used. Where a restricted international transfer is subject to applicable data-protection law, an appropriate lawful transfer arrangement is required. Contact us for information about the arrangements relevant to your data. We do not claim that every service or backup is located in a particular country.

8. Retention and deletion

Confirmed subscription records are kept while your subscription remains active and as needed to administer it. An expired 48-hour confirmation link does not automatically delete the pending record. Pending records remain until they are removed through subscriber management or an erasure request.

Unsubscribed records may be retained to respect your opt-out and maintain evidence of consent and withdrawal. You can request erasure; deleting a subscription removes its record from the active subscriber table. This site does not currently impose an automatic fixed deletion schedule on subscription records, so expiry must not be understood as automatic erasure.

Support messages are kept for as long as reasonably needed to handle the enquiry, related follow-up and applicable recordkeeping or disputes. Abuse-prevention counters have a one-hour expiry; expired WordPress transient records may be cleared later by routine maintenance. Server/email logs and backups follow the relevant infrastructure’s settings and may persist after removal from the active site. We assess deletion requests against the purpose of retention and applicable legal requirements rather than promising immediate removal from every backup.

9. Keeping information secure

Access to subscriber management is restricted to authorized administrators. The subscription flow uses validation, consent checks, expiring confirmation links, hashed tokens and rate limits. These measures reduce risk but cannot guarantee absolute security. Do not share private confirmation or unsubscribe links, as possession of a valid link may allow a subscription action.

10. Your rights and requests

Depending on the law that applies to you, you may be entitled to access or receive a copy of your information, correct inaccurate information, request erasure or restriction, object to certain processing, receive portable information, and withdraw consent. Some rights have conditions or exceptions. You may also raise a concern with the data-protection authority for your location.

Send requests to [email protected], preferably from the address involved. Explain the information or subscription concerned. We may ask for proportionate verification before disclosing or changing personal data. We will handle requests within the period required by applicable law and explain any lawful refusal or extension. WordPress personal-data export and erasure tools include the site’s newsletter records.

11. Children

The website is intended for a general audience, and the newsletter is not directed at children who cannot lawfully consent to email marketing in their location. If you believe a child provided personal information without the necessary authorization, contact us so that we can investigate and remove it where appropriate.

12. Changes and contact

We may update this policy when the site’s features, services or data handling change. The date above identifies the latest revision. A policy update does not replace any consent required for a new purpose. For questions, privacy requests or concerns, email [email protected].