Privacy Policy
Effective date: June 16, 2026
This Privacy Policy explains how gunpla.moe ("we", "us", "our") collects, uses, and protects your personal information. We comply with the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
1. Information We Collect
Information you provide
- Email address (account registration, price alerts)
- Username and display name
- Collection and wishlist data you voluntarily add
- Reviews, build logs, and photos you submit
Information collected automatically
- IP address (anonymized before storage)
- Browser type and operating system
- Pages visited and referral URLs (via privacy-respecting analytics)
- Cookies required for authentication sessions
2. How We Use Your Information
- To provide and improve the Site
- To send price alert emails you have opted into
- To authenticate your account
- To display your public collection and build logs (if you set them to public)
- To comply with legal obligations
We do not sell your personal data to third parties.
3. Legal Basis for Processing (GDPR)
- Contract performance: Providing account and alert features you requested
- Legitimate interests: Site security, fraud prevention, analytics
- Consent: Marketing emails (if any) — you may withdraw consent at any time
4. Cookies
We use:
- Essential cookies: Required for login sessions (cannot be disabled)
- Analytics cookies: Anonymous usage statistics (you may opt out)
EU visitors will see a cookie consent banner on first visit. You may withdraw consent at any time via the cookie settings link in the footer.
5. Data Retention
We retain account data for as long as your account is active. You may request deletion at any time. Price snapshot data is retained indefinitely as it contains no personal information.
6. Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data ("right to be forgotten")
- Export your data in a portable format
- Opt out of analytics tracking
To exercise these rights, email privacy@gunpla.moe. We will respond within 30 days.
7. California Residents (CCPA)
California residents have additional rights under the CCPA, including the right to know what personal information we collect and the right to opt out of sale (we do not sell personal data). To exercise CCPA rights, contact us at privacy@gunpla.moe.
8. Third-Party Services
- Authentication: Google / Discord OAuth (governed by their privacy policies)
- Email delivery: Resend (transactional email only)
- Hosting: Vercel (data processed in the US)
- Database: Supabase / Railway (data stored in the US)
9. International Transfers
Your data may be transferred to and processed in the United States. Where required by GDPR, we rely on Standard Contractual Clauses with our processors.
10. Children
The Site is not directed at children under 13. We do not knowingly collect personal information from children under 13.
11. Changes
We may update this policy and will notify registered users by email of material changes.