---
title: Security and your data
url: "https://modpack.egoeimi.org/security"
updated: 2026-09-25
where_packs_run: "Modpack’s sandboxes, one fresh sandbox per run; never on your computer"
creators_see: totals across 5 or more people only; never inputs or results
permissions:
  - Use a pack
  - Access your private run data
  - Contribute learning from your runs
  - Receive updates
export: "free, anytime, one signed bundle; works with a $0 balance and no Claude connection"
deletion: confirmed by email; paid credit refunded to your card
security_contact: security@egoeimi.org
service_providers:
  - Google Cloud (us-east4)
  - Vercel (iad1)
  - WorkOS (US)
  - Stripe (US)
  - OpenRouter (US)
  - Email provider (US)
availability: US residents 18 or older (beta)
---

# Packs run on Modpack, not on your computer.

Every run gets a fresh sandbox of its own. Creators never see your inputs or results, and you can take everything with you, anytime.

## Where packs run: your computer stays out of it

1. **You ask Claude** (your device): On the web, desktop, phone or in Claude Code. Pack code never runs here.
2. **Your connection** (mcp.modpack.egoeimi.org): Checks who you are, which packs you added, and your limits.
3. **A fresh sandbox** (per run): Only this run’s inputs, no secrets. Deleted after the run.
4. **Only declared hosts** (egress proxy): It reaches only the sites the pack declared. Every connection is logged.

- **Results come back as data**: Claude gets the complete result in a fixed format. Hidden text, links to run and remote images are stripped out.
- **Files come back as attachments**: Claude can read them and you can save them. A pack can never make Claude run a command on your computer.

## Who sees what: creators never see anyone’s inputs or results

|  | You | The creator | Modpack staff |
| --- | --- | --- | --- |
| What you asked and your inputs | Yes | Never | Only if you ask for help, or to look into abuse. Logged. |
| Your results and files | Yes | Never | Same as above. Logged. |
| Your name, email and site | Yes | Never | For your account and receipts. |
| What you spent | Yes | Never | For billing and support. |
| Totals across 5+ people: runs, worked %, failure types | On pack pages | Yes (Aggregates only) | Yes |
| Questions asked on a pack page | Yes (Your own) | Yes (Text, without names) | Yes |

Below 5 people, creators see “not enough data yet” instead of totals.

## What Claude sends: only what the run needs

- Sent: **The pack and this run’s inputs**. Which pack, the mode, and what it needs, like a site address.
- Sent: **Files you give it**. Only for this run: short text up to 64 KB through the chat, recordings and bigger files through our upload page.
- Not sent: **Never your other chats or memory**. Modpack never asks Claude for them, and packs can’t either.
- Not sent: **Never your other connectors’ data**. A pack that tries to make Claude read another connector is held by our checks.

A whole request, as Claude sends it:

```
submit_run {
  pack_ref:   "maya/ai-answer-visibility",
  entrypoint: "quick",
  params:     { site: "acme-analytics.com" },
  request_id: "req_7Hq2…"
}
```

## Four separate permissions: you give each one on its own

1. **Use a pack**: Lets Claude run the packs you added, within your limits. Per pack. Remove a pack anytime.
2. **Access your private run data**: Your inputs, results and files: only you, and your own agent through your connection. Always yours. Nobody else gets this.
3. **Contribute learning from your runs**: Packs learn from de-identified patterns, like “this site blocks crawlers”, never your inputs or results. Required for managed use. Withdrawing pauses your packs; export still works.
4. **Receive updates**: Follow updates, pin a version, or try early versions. Per pack. Anything that asks for more waits for you.

We don’t sell your data or use it to train AI models. Change these in [Settings](https://modpack.egoeimi.org/account/settings).

## How long we keep it

| Data | How long | When you delete your account |
| --- | --- | --- |
| Your results and files | While your account is open. 5 GB free; 30 days’ notice and an export link before removing anything. | Deleted within 7 days |
| Detailed run logs | 7 days, for fixing problems | Deleted |
| Learning records | Private ones: while your account is open. Shared ones are de-identified patterns only. | Private ones deleted; shared ones unlinked from you |
| Receipts and payments | As long as US law requires for financial records | Kept, with personal details reduced |
| Security logs | 2 years | Your name replaced with a code |
| Backups | Replaced on a rolling basis | Gone within 30 days |

## Export and deletion

- **Export** (free · anytime): Everything in your account as one signed bundle, even with a $0 balance and no Claude connection. The link lasts 7 days. [Export your data](https://modpack.egoeimi.org/account/export)
- **Delete your account** (confirmed by email): Everything in it, after an email link and signing in again. Paid credit is refunded to your card; receipts are kept only as the law requires. [Delete your account](https://modpack.egoeimi.org/account/delete)

## Checks on every version: nine automated checks before anyone can run it

1. Clean rebuild and replay
2. Secrets
3. Malware and dependencies
4. Size and structure
5. Where it connects
6. Resource use
7. Instruction safety
8. Trial run by a test agent
9. License

- **Pass, hold or block**: Most versions pass in about 2 minutes. A held version works only for its creator until it’s fixed or a person decides.
- **Paused in minutes**: If something goes wrong after publishing, we pause that version, move everyone back to the last good one, and tell you. Past results don’t change.

## Report a problem

- **A pack**: Use Report on the pack’s page. New adds of that version pause while we look; people who added it keep working. [How reports work](https://modpack.egoeimi.org/terms#takedowns)
- **A security issue in Modpack**: Email security@egoeimi.org. We reply within 1 business day.
- **Copyright**: Send a takedown notice. We act on valid notices within 48 hours and tell the creator how to respond. [Takedown policy](https://modpack.egoeimi.org/terms#takedowns)
- **A charge**: Use “Report a problem with this charge” on the receipt. [Receipts](https://modpack.egoeimi.org/account/runs)

## Service providers, all in the US

- **Google Cloud**: hosting and databases (us-east4)
- **Vercel**: sandboxes and the website (iad1)
- **WorkOS**: sign-in (US)
- **Stripe**: payments and sales tax (US)
- **OpenRouter**: AI steps in some packs, learning and our checks, sent on to the model’s host (US)
- **Email provider**: account email (US)

We list a new provider before we use it.

---

HTML page: https://modpack.egoeimi.org/security · Catalog: https://modpack.egoeimi.org/packs.md · About Modpack: https://modpack.egoeimi.org/llms.txt