Privacy policy

Initial product policy · effective 30 September 2026 · pending GTC legal review.

What we collect

Builds stores your Google account subject identifier, verified email, display name, chosen username, profile details, Builds, images, votes and reports. Google handles your password; Builds never receives it. Only the profile information you choose and public Builds are displayed publicly. Individual voter lists and email addresses are private.

Why and where

We use this information to sign you in, publish your work, rank Builds, prevent abuse and administer the service. Cloudflare Workers, D1 and R2 provide hosting and storage; Google provides authentication. These providers may process data internationally under their policies. Approved external video embeds contact their provider when loaded.

Cookies and verification

Host-only HTTP-only cookies maintain your session for up to 14 days and OAuth transactions for 10 minutes. Your theme is saved in local storage. Cloudflare Turnstile processes verification signals to detect automated abuse. Builds does not require advertising cookies or paid analytics.

Retention and your choices

Expired sessions and login transactions are removed by scheduled cleanup. Images marked for deletion are removed by scheduled cleanup. Username aliases remain reserved to prevent impersonation and broken links. Moderation audit records and minimal historical ranking records may be retained for integrity and legal obligations. Account deletion removes personal profile fields, revokes sessions, removes Builds from discovery and queues images for deletion. Public copies shared by others and provider backups may remain temporarily.

You may edit your profile, reverse votes, change Build visibility or delete your account. Request access, correction, deletion or raise a concern through GTC’s contact information at gtctech.online. Include your Builds username; we may verify identity before responding.

Security and updates

We use access controls, encrypted transport, protected sessions and input validation. No service can guarantee absolute security. Material changes to this policy will be published with their effective date.