Privacy Policy

Block Builds ("we", "us") runs bbuilds.app and decides how the personal data described here is used, as its controller. Write to support@bbuilds.app about anything in this policy.

Without an account we store nothing about you on our servers. Your browser keeps a few things on your device (see "Cookies and local storage").

With an account we keep:

• your name, email address, whether you confirmed it, and your password as a one-way hash (never the password itself);
• your sign-in sessions: when each started and expires, and the IP address and browser (user agent) it was started from, so you can be kept signed in and sessions can be ended;
• your progress on builds: where you left the 3D viewer, the blocks you ticked off, the layers and builds you marked done, and the builds you saved;
• your subscription status (free or PRO and whether it is active), once you subscribe.

Payments. Polar collects your payment details, billing address and email at checkout. We never see or store your card number; we receive what we need to give you PRO, such as your subscription's status and period.

Abuse protection. To limit repeated sign-in, sign-up and email requests, we count recent requests per IP address. These counters are used for nothing else.

Emails you send us. If you write to support, we keep the conversation to answer you.

We do not use analytics, advertising or tracking tools, and we do not build profiles of visitors.

• To run your account and the Service — signing you in, syncing your progress, giving PRO access. Legal basis: performing our contract with you.
• To send account emails — confirming your address, password resets, email changes. These are part of the Service; we send no newsletters or marketing.
• To keep the Service secure — rate limits, preventing abuse and fraud. Legal basis: our legitimate interest in a safe service.
• To meet legal obligations — for example tax records for payments, which Polar keeps as the seller.

We do not sell or rent your personal data, and we do not share it for advertising.

• Cloudflare, Inc. hosts the site, its database and files, and sends our emails. Like any web host it handles your IP address and request details to deliver and protect the site. We do not keep our own access logs.
• Polar Software, Inc. sells PRO as our Merchant of Record and processes payments under its own privacy policy.
• Google Fonts (Google LLC) serves the site's fonts, so your browser sends your IP address to Google when it loads them. Google states that it does not use this to profile visitors.

We may disclose data when the law requires it, or to protect our rights or someone's safety. If Block Builds is ever transferred to someone else, your data would go with it under this policy, and we would tell you.

We set one kind of cookie: the sign-in session cookie, which keeps you signed in. It is strictly necessary for the account to work, so we do not ask for consent; there are no advertising or analytics cookies. Polar's checkout may set its own cookies on its own site.

Your browser's local storage keeps your viewer settings, your place in each build, ticked-off blocks, marks and the builds you viewed recently. It stays on your device; when you are signed in, progress, ticks and marks are also saved to your account. Signing out clears the progress kept in this browser, and you can clear the rest in your browser's settings at any time.

• Account data, progress and saved builds: until you delete your account, then removed from our database.
• Sessions: until you sign out or they expire.
• Request counters: a short time; they hold no account information.
• Support emails: as long as needed to help you, then deleted.
• Payment records: kept by Polar for as long as tax and accounting law requires.

Depending on where you live (for example under the GDPR in the EU and UK, or the CCPA in California), you can ask to access, correct, export or delete your personal data, to restrict or object to how we use it, and to withdraw consent where we rely on it. Much of this you can do yourself in Settings: change your name and email, or delete your account and the data that comes with it. For anything else, write to support@bbuilds.app; we answer within 30 days and will not treat you differently for asking.

You also have the right to complain to the data protection authority in your country.

The site is served only over HTTPS, passwords are stored as hashes, sign-in requests are rate limited, and access to our systems is restricted. No service is perfectly secure; if a breach affected your data, we would tell you and the authorities as the law requires.

Free guides need no account and no personal data. Accounts are for people aged 13 and over (or the higher age your country sets). If you believe a child under that age has given us personal data, write to us and we will delete it.

Our providers run servers in many countries, including the United States, so your data may be processed outside your own. Where the law requires it, these transfers rely on safeguards such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

When we change what we collect or how we use it, we update this page and its date. If a change matters to you, we will tell you by email or on the site before it applies.