// Legal

Privacy Policy

Last updated: May 2, 2026
Overview

BuildVault is a community-driven fan project. We collect only the data necessary to operate the site. We do not sell your data, run ads, or integrate third-party analytics trackers.

This policy applies to all services hosted under buildvault.top and its subdomains.

Data we collect

When you sign in via Google or Discord (our only authentication providers), we receive and store:

  • Your OAuth user ID from the provider
  • Your email address (used to identify your account)
  • Your display name or username
  • Your profile picture URL

We do not store passwords. Authentication tokens are managed by Supabase Auth and are never exposed to our application code.

Beyond account data, we store content you explicitly submit: builds, comments, collections, and votes. We also store basic usage data such as build view counts (non-personally identifiable).

How we use your data
  • To display your profile and attribute content you create
  • To authenticate your requests and protect your account
  • To send you notifications you opt into (currently none — future feature)
  • To enforce community rules (reports, moderation)

We do not use your data for advertising, profiling, or any automated decision-making.

Third-party processors

We use the following sub-processors to operate the service:

  • Supabase — database, authentication, and file storage. Data is stored in the EU (AWS eu-central-1).
  • Vercel — hosting and edge network. Servers in EU (mad1 — Madrid).
  • Google / Discord — OAuth only. We receive a token and basic profile info; we do not access any other data from your Google or Discord account.
Data retention and deletion

Your account and all associated content (builds, comments, votes) remain on our servers until you delete your account. You can request account deletion at any time from your dashboard settings. Upon deletion, your personal data (email, avatar, username) is permanently removed. Anonymised aggregates (e.g. vote counts on builds) may be retained.

Cookies

We use a single session cookie set by Supabase Auth to keep you logged in. No advertising cookies, no cross-site tracking cookies.

Your rights

Depending on your jurisdiction you may have rights to access, correct, or erase your personal data. To exercise these rights, delete your account from the dashboard or contact us at the address below.

Contact

Questions about this policy can be sent to privacy@buildvault.top.