Legal
What we collect, why, and what we'll never do with it.
Account info: Your email address (for login and password resets), a username you choose (displayed publicly on your builds), and a hashed password (we never see or store it in plain text).
Builds: Photos, parts lists, and descriptions you submit. These are public by design — anyone can see them, including people without accounts and search engines.
Preferences: Whether you've opted into marketing emails, and whether you've accepted the Builder Agreement (including which version and when).
Automated data: Our hosting provider (Netlify) collects standard server logs — IP addresses, browser type, timestamps — for security and uptime. Cloudflare Turnstile processes a bot-detection challenge on sign-in and sign-up forms. Neither stores personal data on our behalf.
That's the complete list. We do not collect phone numbers, physical addresses, payment information, location data, or device fingerprints.
We don't sell your data. We don't run targeted ads. We don't use tracking pixels in emails. We don't share your information with anyone except to comply with the law or protect our rights. We have not and will not sell your personal information — you are automatically opted out, now and in the future.
We use cookies only to keep you signed in. No tracking cookies, no advertising cookies, no analytics cookies. Cloudflare Turnstile may set a cookie as part of its bot detection — that's managed by Cloudflare under their own privacy policy.
Some product links on Gunforma are affiliate links. When you click one, you leave our site and interact with a third-party retailer. That retailer may track your visit under their own privacy policy. We receive only a commission notification — we never see your name, payment info, or what you bought.
Gunforma uses three external services: Supabase (authentication and database), Netlify (hosting), and Cloudflare Turnstile (bot detection). Each operates under its own privacy policy.
You can access your data by emailing us. You can update your username or email through your account. You can delete your account by contacting us — we'll remove your personal data, subject to the content retention terms in the Builder Agreement. You can unsubscribe from marketing emails using the link in any email.
California residents have additional rights under the CCPA, including the right to know what we've collected and the right to request deletion. We do not sell personal information as defined by the CCPA.
Gunforma is not for anyone under 18. We don't knowingly collect data from minors. If we learn a minor has created an account, we'll delete it.
Passwords are hashed, connections are encrypted (HTTPS), and database access is restricted by row-level security policies. No platform can guarantee absolute security, but we take reasonable measures and will notify users promptly if a breach occurs.
If we update this policy, we'll change the date below and notify registered users by email for anything material.
Privacy questions or data requests: [email protected].