Privacy Policy

1. Who is responsible for your data

RateBricks operates this service and is responsible for the personal data described here. For privacy questions or requests, contact privacy@ratebricks.com.

2. Data we collect

• Account data such as your email address, username, display name, and authentication provider.
• Profile data you choose to publish, including your biography, avatar, country, website, collection visibility, and wishlist visibility.
• Content and activity you submit, including ratings, reviews, reactions, reports, collection entries, wishlist entries, build logs, follows, and similar-set votes.
• Technical request data needed to protect and operate the service, such as short-lived rate-limit keys and security logs handled by our infrastructure providers.

3. How we use data

• To provide accounts, authentication, profiles, ratings, reviews, collections, and community features.
• To show regional purchase links when you choose a country or allow approximate country detection.
• To prevent abuse, investigate reports, moderate content, and keep the service secure.
• To respond to support, privacy, and legal requests.

We use privacy-friendly Vercel Web Analytics to understand aggregate page views and traffic patterns. We do not sell personal data and we do not use advertising or analytics cookies.

4. Legal bases and retention

We process account and community data to provide the service you request, to fulfil our legitimate interest in operating a safe community, and where necessary to comply with legal obligations. We retain account data while your account is active. Published community content may remain visible until you delete it or it is removed under the moderation rules. Reports and moderation decisions may be retained for a limited period to detect repeat abuse and document decisions.

5. Cookies and local storage

Essential Supabase session cookies are used when you sign in. The cookie named ratebricks_cookie_consent stores your consent choice and ratebricks_cookie_consent_version records which consent text was shown. After you accept preference cookies, locale stores your language, country stores an approximate country detected from the hosting request, and country_pref stores a country you select manually. You can change this choice at any time with the Cookie settings link in the footer.

Country detection uses a country header supplied by Vercel's infrastructure. RateBricks does not store your full IP address and does not send it to advertisers.

6. Service providers

• Supabase provides authentication, database, and storage infrastructure.
• Vercel provides hosting, edge infrastructure, and privacy-friendly Web Analytics, including the country signal used for regional links.
• Resend may deliver account emails such as verification and password-reset messages when configured.
• Retailers receive information you choose to provide when you follow a purchase link; their own privacy policies apply.

7. Your rights and account deletion

Depending on where you live, you may have rights to access, correct, export, restrict, object to, or delete your personal data. You can edit your profile in Settings and permanently delete your account there. Account deletion removes your authentication account and associated profile, ratings, reviews, reports, reactions, collection, wishlist, follows, activities, and build logs. User-created catalogue links and tags are deleted as well. Contact privacy@ratebricks.com if you cannot access Settings or want to make a privacy request.

8. Updates

We may update this policy when the service, providers, or legal requirements change. The latest version and its effective date are published on this page.