Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Account information: name, email address, username, password hash (if using email/password sign-in), and profile picture.
• OAuth information: if you sign in with Google, we receive your name, email address, and profile image from Google.
• User content: builds, parts, gear, comments, favorites, tags, images, and any other information you choose to submit.
• Usage data: IP address, browser type, pages visited, referring URL, and similar technical information captured automatically.
• Cookies and session data: we use cookies to keep you signed in and to remember preferences such as dark mode.

2. How We Use Information

We use information to:

• Operate, maintain, and improve the Service.
• Authenticate users and secure accounts.
• Send transactional emails (verification, password reset, billing).
• Display user-submitted content publicly where the user has chosen to share it.
• Detect, prevent, and respond to fraud, abuse, and security incidents.
• Comply with legal obligations.

3. Public Content

Builds marked as public, public profiles, and any content posted in comments or discovery feeds are visible to anyone on the internet, including search engines. Do not post information in public areas that you want to keep private.

4. Third-Party Service Providers

We use the following service providers to operate the Service. These providers process data on our behalf and are bound by their own privacy practices:

• Supabase — database and file storage hosting.
• Vercel — application hosting and request routing.
• Google — OAuth sign-in (if you choose to use it).
• PurelyMail — transactional email delivery (verification, password reset, notifications).
• Stripe — payment processing for subscriptions (if you subscribe). We do not store full payment card details.

5. Affiliate and Retailer Links

The Service may include links to third-party retailers, some of which are affiliate links that allow us to earn a commission on qualifying purchases. Clicking an affiliate link may cause the retailer to set cookies or collect information about your visit. We do not control and are not responsible for those third-party practices.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. You may request deletion of your account at any time by contacting us. After deletion, we may retain limited information for legal, accounting, or security purposes.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export the personal information we hold about you, and to object to or restrict certain processing. To exercise these rights, contact us at the email below. We will respond within the timeframe required by applicable law.

8. Security

We implement technical and organizational measures to protect your information, including encryption in transit, hashed passwords, and access controls. No system is completely secure, and we cannot guarantee absolute security.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

10. International Users

The Service is operated from the United States. If you access the Service from outside the United States, you consent to the transfer and processing of your information in the United States, which may have different data protection laws than your home jurisdiction.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Last updated” date at the top of this page and, where appropriate, by other means. Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

12. Contact

Questions about this Privacy Policy? Contact us at support@myarmsbuilder.com.