Privacy Policy
How we collect, use and protect your personal data
Data Controller
Data Collected
Account Data
- Email address (required for account creation)
- Username (optional)
- Bio (optional)
- Profile picture (optional)
Location Data
- Latitude and longitude (optional, only if the user enables location sharing)
Browsing Data
- Pages visited and interactions (only with cookie consent)
Alert Data
- Monitored products
- Configured price thresholds
Build Data
- Created and shared configurations
Legal Bases for Processing
Consent
Analytics (PostHog) and email alerts (Resend). You can withdraw your consent at any time.
Contract Performance
Management of your user account, saving your builds and preferences.
Legitimate Interest
Site security, interface preferences (language, currency).
Cookies and Trackers
| Cookie / Storage | Purpose | Duration | Legal Basis |
|---|---|---|---|
| trm_language (cookie) | Language preference | 1 year | Legitimate interest |
| sb-<ref>-auth-token (localStorage) | Supabase authentication session | While logged in (~1 week refresh) | Contract performance |
| cookie_consent (localStorage) | Cookie consent choice | Persistent | Legitimate interest |
| ph_* (localStorage) | Analytics (only with consent) | 1 year | Consent |
| trm_language (localStorage) | Language preference | Persistent | Legitimate interest |
| bmr_currency (localStorage) | Currency preference | Persistent | Legitimate interest |
| buildmyrig_builder_current (localStorage) | Current builder state | Persistent | Legitimate interest |
| comparison_items (localStorage) | Product comparison list | Persistent | Legitimate interest |
| buildsPageFilters (localStorage) | Build page filter preferences | Persistent | Legitimate interest |
Sub-processors
| Sub-processor | Purpose | Location |
|---|---|---|
| Supabase Inc. | Authentication and database | EU (Frankfurt) |
| Hostinger International Ltd | Website hosting | Lithuania |
| Netcup GmbH | VPS (data server) | Germany |
| PostHog | Analytics | EU servers |
| Resend | Alert email delivery | US |
Data Transfers Outside the European Union
Our sub-processor Resend may process data outside the European Union, particularly in the United States. These transfers are governed by Standard Contractual Clauses (SCCs) approved by the European Commission, in accordance with Articles 46 and 47 of the GDPR. Supabase hosts our data within the European Union (Frankfurt, Germany).
Data Retention
Account data: retained as long as the account is active. Deletion on request by email to contact@buildmyrig.gg.
Analytics data: 12 months maximum.
Your Rights
In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the following rights:
- Right of access: obtain a copy of your personal data
- Right to rectification: correct inaccurate or incomplete data
- Right to erasure: request the deletion of your data
- Right to data portability: receive your data in a structured format
- Right to object: object to the processing of your data
- Right to restriction: request the restriction of processing
Authenticated users can export and delete their data directly from their account (self-service via the /api/user/export and /api/user/delete endpoints).
To exercise these rights, contact us at contact@buildmyrig.gg. We commit to responding within one month.
If you believe your rights are not being respected, you can file a complaint with the French Data Protection Authority (CNIL).
Policy Updates
This privacy policy may be updated at any time to adapt to legal or technical changes. The current version is the one available on the website. We encourage you to check it regularly.
Last updated: March 2026