Privacy Policy

If you sign in, we store the following in our PocketBase database:

• An account record with the email address, name, and avatar URL your OAuth provider (Google, Discord, or Spotify) returns to us at sign-in.
• A username — auto-generated at signup, editable by you on the profile page.
• Any profile picture you upload, builds you save, builds you “like”, and favorites you add to lists.

If you use the service signed-out, we still create anonymous build records when you save a build, and we store their IDs in a cookie (fb_anon_builds) on your browser so you can keep editing them. There's no account row attached.

• We don't ask for your real name, address, or phone number.
• We don't take payment information — there's nothing to buy from us.
• We don't see or store the password you use with your OAuth provider — authentication happens on the provider's side.

We set a small number of first-party cookies:

• pb_auth — your PocketBase session token, set when you sign in. Removed when you sign out or delete your account.
• fb_anon_builds — list of IDs of builds you saved while signed out, so the browser can keep editing them and so they can be claimed by your account when you sign in.

We use Microsoft Clarity to understand how people use the site (page views, click heatmaps, session replays). Clarity may set its own cookies and processes usage data on Microsoft's infrastructure under its own privacy statement. Clarity recordings are anonymized and don't capture form inputs.

Product names, prices, images, and stock information shown on the site are scraped from third-party fingerboarding shops. None of those shops receive personal data about you from us. If you click a product link to visit a shop, that shop's own privacy policy applies.

• To run the service: identify your account, render your builds, show your likes and favorites.
• To attribute saved builds to you so we can show your build list, enforce edit permissions, and let other users see who created public builds.
• We don't sell or rent your data, and we don't use it for advertising.

You can change your username, display name, and profile picture yourself on the profile page. You can permanently delete your account from there as well — doing so wipes your account record, every build you've saved, every build you've liked, your favorites, and your uploaded avatar. There is no soft-delete, no recovery, and no retention window.

If you can't access your account but want your data deleted, contact the maintainer via the project's public repository.

We keep your data as long as your account exists. When you delete your account, the data described above is removed from the database immediately. Server logs (request lines, error traces) may persist for up to 30 days for operational reasons; those logs do not contain the body of API requests.

The service is not directed at children under 13. If you believe a child has created an account, contact the maintainer and we'll delete it.

Material changes will be reflected here with an updated date at the top. Continuing to use the service after a change means you accept the new policy.