rcbldr
Legal

Privacy Policy

Last updated: May 20, 2026

This Privacy Policy explains what information rcbldr.com (“rcbldr,” “we,” “us”) collects when you use the website at rcbldr.com (the “Service”), how we use it, who we share it with, and the choices you have. By using the Service you agree to this Policy.

1. Information we collect

Information you give us

  • Account details. When you sign up we collect your email address (or the email returned by the OAuth provider you use — Google, Discord, or Reddit), your chosen username, and an optional avatar.
  • Profile and content. Your builds, parts lists, saved parts, build notes, photos you upload, and any other content you add to the Service.
  • Connected accounts. If you link Reddit so you can post builds, we store the OAuth tokens needed to act on your behalf, along with your Reddit username.
  • Messages you send us. If you email us or fill out a form, we keep that message and your contact details so we can respond.

Information we collect automatically

  • Log and device data. IP address, browser type, operating system, referring URL, pages viewed, and timestamps. This is standard server log data used to operate and secure the Service.
  • Cookies. We use a small number of cookies — see “Cookies” below.
  • Usage events. Aggregated, mostly anonymous data about which pages and features are used, used to understand and improve the Service.

Information from third parties

  • OAuth providers. If you sign in with Google, Discord, or Reddit, we receive the basic profile information that provider shares with us — typically your name, email, profile image, and a stable user ID.
  • Affiliate networks. When you click an affiliate link and complete a purchase, our affiliate partners may share a commission report with us. These reports do not identify you personally to us.

2. How we use information

  • To provide, maintain, and improve the Service;
  • To create and manage your account, authenticate you, and let you sign back in;
  • To display your public builds and profile to other users when you choose to make them public;
  • To act on your behalf on connected platforms (for example, posting a build to Reddit when you ask us to);
  • To send transactional messages — sign-in links, security alerts, account changes;
  • To respond to your requests and provide support;
  • To monitor for abuse, fraud, and security issues, and to enforce our Terms;
  • To comply with legal obligations.

We do not sell your personal information, and we do not show third-party advertising on the Service.

3. Cookies and similar technologies

We use a minimal set of cookies:

  • Authentication cookies set by our auth provider (Supabase) to keep you signed in.
  • Preference cookies to remember small choices like UI state.
  • Analytics cookies, if and when we add an analytics tool, used in aggregate to understand site usage.

You can clear or block cookies in your browser settings. Blocking authentication cookies will sign you out and prevent you from signing back in.

4. Who we share information with

We share information only as described below:

  • Service providers who run our infrastructure on our behalf — for example Supabase (database, authentication, and file storage) and Vercel (hosting and serverless functions). They process data under contract and are not allowed to use it for their own purposes.
  • Other users see the content you choose to make public — for example, a build you mark as public, your username, your avatar, and the parts list and photos on that build.
  • Connected platforms receive the data you direct us to send. If you post a build to Reddit, Reddit receives the post.
  • Legal and safety reasons — we may disclose information if required by law, to respond to valid legal process, to protect the rights, property, or safety of rcbldr, our users, or the public, or to investigate fraud or abuse.
  • Business transfers — if rcbldr is acquired or merged, information may be transferred as part of that transaction. We will give notice if your information becomes subject to a materially different privacy policy.

5. Data retention

We keep your account data while your account is active. If you delete your account we will delete or anonymize your personal information within a reasonable period, except where we need to keep it for legal, accounting, or security reasons. Public content you posted (like a public build) may continue to exist in cached copies, screenshots, or copies other users made before deletion.

6. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit, access controls, and row-level security on our database. No system is perfectly secure — if we become aware of a breach that affects you we will notify you as required by law.

7. Your choices and rights

  • Access and edit. You can view and edit most of your information from your account settings.
  • Delete. You can delete your account from settings. This removes your builds, photos, and saved parts.
  • Disconnect. You can disconnect linked accounts (like Reddit) from settings at any time.
  • Marketing. We do not currently send marketing email. If we add it, every message will include an unsubscribe link.
  • Regional rights. Depending on where you live, you may have additional rights — for example, the right to access, correct, port, or delete your personal data, or to object to or restrict certain processing. To exercise any of these rights, email privacy@rcbldr.com. You also have the right to complain to a data protection authority.

8. International transfers

We operate in the United States and our service providers may process data in the United States and other countries. Where required, we use appropriate safeguards — such as standard contractual clauses — for international transfers.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, email privacy@rcbldr.com and we will delete it.

10. Third-party links

The Service links to third-party sites — for example, affiliate links to parts vendors. Those sites have their own privacy policies and we are not responsible for their practices. Review their policies before submitting personal information.

11. Changes to this Policy

We may update this Policy. If we make material changes we will give reasonable notice — for example, by updating the “Last updated” date or by email. Continuing to use the Service after the changes take effect means you accept the updated Policy.

12. Contact

Questions or requests about your data? Email privacy@rcbldr.com.