Privacy Policy
Last updated: October 2026
Effective Date: March 2026
Last Updated: October 2026
1. Introduction
Entropic State (“we,” “us,” “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the Entropic State Mod Manager, in-game mods, and related services (the “Service”).
By using the Service, you consent to the practices described in this Privacy Policy.
2. Information We Collect
2.1 Account Information
When you sign in, we receive profile data from the authentication provider you choose:
Discord OAuth:
| Data | Purpose |
|---|---|
| Discord User ID | Account identification |
| Username | Display name |
| Email (if provided by Discord) | Account recovery |
| Avatar | Shown in the Mod Manager |
Google OAuth:
| Data | Purpose |
|---|---|
| Google User ID | Account identification |
| Account recovery | |
| Display name | Display name |
| Profile picture | Shown in the Mod Manager |
We do not receive your passwords or access to your messages on any platform.
2.2 Device and Network Identifiers
Device code (HWID). The Mod Manager and the in-game plugin read your Windows system drive's volume serial number and your processor's identifier (its family, model and stepping), combine them and hash them (SHA-256) into a short one-way code. We use it to link your license to your PC, to prevent account sharing, and to allow one free trial per PC.
Machine fingerprint. Both also send a short one-way hash of your computer's system UUID, a factory identifier stored in the motherboard firmware. If that UUID is a known placeholder value, the hash is taken from your Windows installation ID (MachineGuid) instead. We use it to tell apart different computers that produce the same device code, for example PCs set up from the same disk image.
Sign-in diagnostics. When you sign in, the Mod Manager also sends a short hash of each of the two device-code inputs. We use these only to diagnose cases where the Mod Manager and the game calculate different device codes.
Installed files. When the Mod Manager installs a mod, it writes your device code into the installed files, so copies shared outside the Service can be traced to the account they were installed for.
IP address. Our server receives your IP address with every request and uses it for rate limiting and abuse prevention. When you sign in, we store a hashed form of it with your account to help diagnose device-linking problems. If the game checks a license from a device we don't recognize, that request's IP address is recorded in our security log, which is kept for 90 days.
We only receive hashes of the hardware values above, never the raw serial numbers or UUIDs. We do not collect your MAC address, GPU details, disk hardware serial numbers, or any hardware identifier not listed here.
2.3 Subscription Data (Patreon)
If you link your Patreon account or subscribe through Patreon, we receive:
| Data | Purpose |
|---|---|
| Patreon User ID | Subscription linking |
| Account matching (for users who subscribe before linking) | |
| Subscription status | Access management |
| Tier and pledge amount | Entitlement determination |
We store only the subscription metadata needed for access management. We do not store full Patreon webhook payloads.
2.4 Usage Data
We collect the following while our mods are active:
| Data | Purpose |
|---|---|
| Mod launches (count) | Analytics |
| Session duration (playtime) | Analytics, displayed to you in the Mod Manager |
| Online status | Admin support tools |
How this works: While a mod is running, it sends a periodic check-in (“heartbeat”) to our server approximately every 3 minutes. This is used to track your session playtime and show your online status. This data is visible to you in the Mod Manager.
2.5 Offline Validation Cache
When your license is successfully validated, a small encrypted cache file is stored locally on your device (in %LOCALAPPDATA%\EntropicState). This allows mods to work during brief internet outages (up to 24 hours). The cache is tied to your device and cannot be transferred.
2.6 Information We Do NOT Collect
- Payment information (handled entirely by Patreon)
- Game saves, personal files, or game settings
- Keyboard, mouse, or controller input
- Screen recordings or screenshots
- Microphone or camera data
- Full system specifications (RAM amount, GPU model, installed software, etc.)
- Browsing history or activity outside the Service
- Crash logs, stack traces, or diagnostic/telemetry reports
3. Internet Connectivity
The Service requires an internet connection to validate your license when a mod launches. While a mod is running, periodic check-ins occur approximately every 3 minutes to maintain your session and track playtime. If your internet connection drops, mods will continue to work for up to 24 hours using a locally cached validation.
4. How We Use Your Information
We use collected information to:
- Provide the Service: Authenticate you, validate licenses, deliver mods
- Manage Subscriptions: Verify payment status via Patreon
- Prevent Abuse: Detect account sharing, multiple accounts, and fraud
- Improve the Service: Analyze aggregate usage patterns, fix bugs, develop features
- Provide Support: Respond to inquiries and troubleshoot issues
5. Information Sharing
5.1 We Do NOT Sell Your Data
We do not sell, rent, or trade your personal information to third parties.
5.2 Third-Party Services
We share limited data with:
| Service | Data Shared | Purpose |
|---|---|---|
| Discord | OAuth tokens | Authentication |
| Discord | Your username and account number, in our internal admin notifications | Operating the Service |
| OAuth tokens | Authentication | |
| Patreon | User ID | Subscription verification |
| BunnyCDN | None (anonymous) | Mod file delivery |
| Heroku | All account data (hosting and database) | Hosting |
The Mod Manager and in-game mods send no data to any third-party analytics service, advertising network, or data broker. Our marketing website uses privacy-friendly, cookieless analytics (aggregate page views and referrers only); it does not track you across sites or build advertising profiles.
5.3 Shown on a Linked PC
If someone signs in to the Mod Manager on a PC that is already linked to your account, they are shown which sign-in provider or providers your account uses and a partly hidden version of your email address: its first letter and, for common email providers, the domain (for any other address, only its ending, such as .edu), so that the owner of the PC can recognize their own account.
5.4 Legal Requirements
We may disclose information if required by law or to protect our rights, prevent fraud, or ensure user safety.
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data | Until account deletion |
| Play sessions | 1 year, then automatically deleted |
| Subscription events | Indefinitely (financial records) |
| Processed pending events | 30 days after processing |
| Offline validation cache | 24 hours (auto-expires) |
| Security and support logs (sign-in and license-check events; can include your username, email, device code and, for unrecognized devices, IP address) | 90 days, then automatically deleted |
| Device trial record (a one-way hash of the device code) | Kept after account deletion, to enforce one free trial per PC |
| Ban records (one-way hashes of a banned account's device code, Discord ID, Google ID and email) | Kept after account deletion, to enforce the ban |
7. Your Rights
7.1 Access Your Data
You may request a copy of the data we hold about you. Your playtime and usage data is also visible to you in the Mod Manager.
7.2 Delete Your Data
You may request deletion of your account. Upon request, we will:
- Delete your account and the data linked to it (profile, device link, licenses, play sessions)
- Revoke all access
- Keep your subscription history with your identifiers removed (financial records)
- Keep the device trial record and, if your account was banned, the ban records (see Section 6)
- Security logs that mention your account are deleted automatically within 90 days
Note: Account deletion does not cancel active Patreon subscriptions. You must cancel your Patreon subscription separately on Patreon.
7.3 How to Exercise Your Rights
Contact us via:
- Email: ruslanpartydev@gmail.com
- Discord: https://discord.gg/Zy5D9D2Kc9
We will respond within 30 days.
8. Data Security
We implement reasonable security measures including:
- Encryption in transit (HTTPS/TLS) for all server communication
- Device-specific encryption for local validation cache
- Access controls for administrative systems
- Rate limiting to prevent abuse
No system is 100% secure. You use the Service at your own risk.
9. Children's Privacy
The Service is not intended for users under 18 years of age. We do not knowingly collect information from children. If we discover we have collected data from a child, we will delete it promptly.
10. International Users
Our servers are hosted on cloud infrastructure that may be located in various countries. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the Mod Manager. Continued use of the Service after changes constitutes acceptance.
12. Additional Information for EU/EEA Users
If you are in the European Union or European Economic Area:
- Legal Basis: We process data based on legitimate interests (license validation, service improvement, fraud prevention) and contract performance (providing the Service you signed up for)
- Data Controller: Entropic State
- Rights: You have additional rights under GDPR including the right to lodge a complaint with your local supervisory authority
13. Contact Us
For privacy-related questions or to exercise your rights:
- Email: ruslanpartydev@gmail.com
- Discord: https://discord.gg/Zy5D9D2Kc9
By using the Entropic State Service, you acknowledge that you have read and understood this Privacy Policy.