Privacy policy
Mortar has no account system, no analytics, no telemetry and no server that collects anything about you. It talks only to the services below, and only for the reason given.
What Mortar sends, and to whom
| Service | When | What it receives |
|---|---|---|
| Nexus Mods (nexusmods.com) | When you sign in, browse, download or check for mod updates | Your Nexus API key or sign-in token, and the ids of the mods and files involved. Nexus's own privacy policy applies. |
| GitHub (github.com, api.github.com) | When Mortar checks for its own updates, and for mods hosted on GitHub | A request for the latest release of Mortar or of that mod. No account, no mod list. |
| SMAPI (smapi.io) | When Mortar checks the mods in a profile for updates and compatibility | The ids and versions of the installed mods, the same request SMAPI itself makes when the game starts. |
| SMAPI log parser (smapi.io/log) | Only when you choose to share a game log and confirm | That SMAPI log, which lists your mods and may include folder paths with your user name. smapi.io gives back a link you can share. |
| Stardew mod dataset (raw.githubusercontent.com) | When Mortar looks up mod metadata | A request for public data files; nothing about you. |
| Steam CDN (cdn.cloudflare.steamstatic.com) | When Mortar shows a game's cover art | A request for that game's public image. |
| Your own network | Only when you send a profile to another computer | The profile, and its mod files when both computers use the same Nexus account. |
A share link carries your profile in the part after #,
which browsers never send to a server, so opening one on
mortar.rethunk.tech does not reveal the profile to this site.
What stays on your computer
Profiles, settings, logs, crash reports and save backups stay in Mortar's data folder. Your Nexus key is kept in your system keyring. Report a Mortar bug collects diagnostics into a file and opens a GitHub issue form; nothing is sent until you submit that issue yourself.
Browser extension
The extension talks only to Mortar on your own computer. Its policy is on the extension page.
This website
mortar.rethunk.tech is a static site with no cookies and no analytics. The downloads page asks GitHub's public API for the latest release so it can show file sizes. The hosting provider keeps standard access logs.
Contact
Questions about privacy or security: [email protected].