Legal

Privacy Policy

Last updated: May 2026

1. Information We Collect

1.1 Account Information. When you register an account we collect your email address, username, and a hashed password. If you sign in via a third-party provider (e.g. Google), we receive only the profile data that provider shares with us — typically your email address and display name. We never receive or store your third-party account password.

1.2 Usage Data. We may collect standard server-side usage information such as your IP address, browser type, device type, and pages visited. This data is used solely to maintain and improve the Site.

1.3 User-Generated Content. Any content you submit — including model entries, collection data, build photos, ratings, and reviews — is stored in our database and may be visible to other users of the Site.

1.4 Cookies. We use session cookies required for authentication. We do not use advertising or third-party tracking cookies.

2. How We Use Your Information

We use the information we collect to:

Create and manage your account and authenticate your sessions.
Display your collection and profile to you and, where public, to other users.
Operate and improve the Site, including moderation of submitted content.
Respond to support requests or reports you send to us.

We do not sell your personal data to third parties, and we do not use your data for advertising purposes.

3. Sharing of Information

3.1 Public Content. Usernames, collection entries, reviews, and build photos you choose to make public are visible to all visitors of the Site, including unauthenticated users.

3.2 Service Providers. We use Supabase to provide database, authentication, and file storage services. Your data is processed on their infrastructure in accordance with their own privacy and security commitments. We do not share your data with any other third parties except as required by law.

3.3 Legal Requirements. We may disclose your information if required to do so by law or in response to a valid legal request from a public authority.

4. Data Security

We implement reasonable security measures to protect your personal information from unauthorised access, including encrypted connections (HTTPS), hashed passwords, and access-controlled infrastructure provided by Supabase.

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and encourage you to use a strong, unique password for your account.

5. Your Rights

5.1 Access and Update. You can view and update your username and profile picture at any time from your profile settings page.

5.2 Account Deletion. You may request deletion of your account and associated personal data by contacting us via the community channels linked in the Site header. We will process your request within a reasonable timeframe.

5.3 Data Portability. Upon request, we can provide an export of your collection data in a common format.

6. Children's Privacy

Gunpla Corps is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us so we can remove the account and any associated data.

7. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Continued use of the Site after any changes constitutes your acceptance of the updated policy.

8. Contact

If you have any questions or concerns about this Privacy Policy or how your data is handled, please reach out via the community channels linked in the Site header.