Plain English summary:We collect only what we need to run the service. We don't sell it. We don't share it for ads. You're a subscriber, not a data source.
We collect information you provide directly: your email address, username, and any content you post (build descriptions, photos, modification logs). We also collect basic usage data such as pages visited and features used, to help us improve the platform.
We use your information to provide and improve the service, process your subscription, send you important account and service communications, and respond to your support requests. We do not use your data to serve you targeted advertising.
We do not sell your personal data — to anyone, ever. Not to advertisers, not to data brokers, not to third parties.
We do not share your data for advertising purposes — your account information is never used to target you with ads on other platforms.
We do not use tracking pixels or third-party ad networks— we don't embed tools designed to follow you around the web.
We use Supabase for database and authentication, Stripe for payment processing, and a small number of infrastructure services to run the platform. These providers process data only as necessary to deliver their services and are contractually bound to protect it. We do not use advertising networks, social media trackers, or analytics platforms that monetize your data.
Your data is stored securely using industry-standard encryption at rest and in transit. We use row-level security to ensure your private data is accessible only to you and authorized platform functions. We follow security best practices and review our infrastructure regularly.
We use cookies only for authentication and session management — to keep you logged in. We do not use cookies for tracking or advertising. You can clear cookies in your browser settings, but doing so will log you out of the platform.
You have the right to access, correct, and delete your personal data. You can delete your account at any time from your account settings — this removes your profile and personal information. Content you've posted may remain visible until explicitly removed. To request a data export or complete deletion, contact us at [email protected].
The Buildsheet is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, please contact us and we will promptly delete it.
We retain your data for as long as your account is active and for a reasonable period after to handle support issues or legal obligations. After account deletion, your personal data is removed within 30 days, except where retention is required by law.
We may update this privacy policy from time to time. When we do, we'll update the date at the top of this page. For material changes, we'll notify you by email. Continued use of The Buildsheet after changes constitutes acceptance of the revised policy.
Questions about this privacy policy? Email us at [email protected]. Privacy matters to us — we'll respond promptly.