Legal

Privacy Policy

Last updated: April 2026

Plain English summary:We collect only what we need to run the service. We don't sell it. We don't share it for ads. You're a subscriber, not a data source.

01What we collect

We collect information you provide directly: your email address, username, and any content you post (build descriptions, photos, modification logs). We also collect basic usage data such as pages visited and features used, to help us improve the platform.

02How we use it

We use your information to provide and improve the service, process your subscription, send you important account and service communications, and respond to your support requests. We do not use your data to serve you targeted advertising.

03What we don't do

We do not sell your personal data — to anyone, ever. Not to advertisers, not to data brokers, not to third parties.

We do not share your data for advertising purposes — your account information is never used to target you with ads on other platforms.

We do not use tracking pixels or third-party ad networks— we don't embed tools designed to follow you around the web.

04Third-party services

We use Supabase for database and authentication, Stripe for payment processing, and a small number of infrastructure services to run the platform. These providers process data only as necessary to deliver their services and are contractually bound to protect it. We do not use advertising networks, social media trackers, or analytics platforms that monetize your data.

05Data storage and security

Your data is stored securely using industry-standard encryption at rest and in transit. We use row-level security to ensure your private data is accessible only to you and authorized platform functions. We follow security best practices and review our infrastructure regularly.

06Cookies

We use cookies only for authentication and session management — to keep you logged in. We do not use cookies for tracking or advertising. You can clear cookies in your browser settings, but doing so will log you out of the platform.

07Your rights

You have the right to access, correct, and delete your personal data. You can delete your account at any time from your account settings — this removes your profile and personal information. Content you've posted may remain visible until explicitly removed. To request a data export or complete deletion, contact us at [email protected].

08Children's privacy

The Buildsheet is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, please contact us and we will promptly delete it.

09Data retention

We retain your data for as long as your account is active and for a reasonable period after to handle support issues or legal obligations. After account deletion, your personal data is removed within 30 days, except where retention is required by law.

10Changes to this policy

We may update this privacy policy from time to time. When we do, we'll update the date at the top of this page. For material changes, we'll notify you by email. Continued use of The Buildsheet after changes constitutes acceptance of the revised policy.

11Contact

Questions about this privacy policy? Email us at [email protected]. Privacy matters to us — we'll respond promptly.