Privacy

An email address, if you made an account. That is what signing in is. If you signed in with Google we receive the address and nothing else — no contacts, no profile, no history.

Your saved builds: a sixteen character code and whatever you named it. The code is the build, so we do not store a copy of the parts — the machine is worked out again from today’s catalogue every time you open it.

Showcase posts, if you made one: the photograph you uploaded, the title, the story you wrote and the builder name you chose. These are public, which is the point of them.

Support messages: what you wrote, when, the topic you picked, the build code if you pressed support from a build, and a reply address only if you gave one. Leaving it empty is allowed and means nothing comes back.

What you have bought and spent: which plan, how many credits, and one row per answer recording which tool and what it cost that day. We keep no card number, no expiry and no part of one.

A count of page views: one row per page you open, holding the path, the time, the two-letter country your connection is in, whether you were on a phone, and your account if you were signed in. Alongside it is a number worked out from your address and browser together with today’s date, so that two views can be told apart for one day. Your address itself is never written down, the number cannot be turned back into it, and because the date is part of it you are a different number tomorrow — which means this can say how many people were here and cannot follow anybody from one day to the next. Rows older than ninety days are deleted.

There is no third-party analytics on this site, no advertising or tracking pixel, no chat widget, and no font, script or image loaded from anybody else. The page count described above is our own, stays in our own database, and is read by one person to know whether anybody is here. Nothing about you is sold, shared with advertisers, or used to build a profile, and there is no advertising here to target with one.

The only cookies are the ones that keep you signed in. They are necessary for the site to work at all and there is nothing to consent to because there is nothing else in them. Counting a page view uses no cookie at all — that is the reason it is done the roundabout way it is.

Supabase hosts the database, the sign-in and the showcase photographs. Everything in the list above lives there.

Stripetakes the payments. Card details are entered on Stripe’s own pages and never pass through this site — we could not keep a card number if we wanted to. Stripe tells us that a payment succeeded, for how much, and which account it belongs to. Stripe has its own privacy policy and is worth reading if you want the detail.

Vercel serves the site and keeps ordinary server logs.

That is the whole list. Nobody else receives anything, and none of the three is permitted to use what they hold for their own purposes.

For as long as your account exists. Delete a build and it is gone; take down a showcase post and the photograph goes with it. Delete your account and everything above goes except support messages, which we keep for a reasonable period because they are a conversation and one side deleting it is not the same as it not having happened.

Records of payments we keep for as long as tax law requires us to, whatever else is deleted.

The account page deletes your builds and your posts directly. To remove the sign-in itself, write to pcliststeam@gmail.com and it goes the same day.

You can also ask for a copy of what we hold, ask us to correct it, or ask what it has been used for, at the same address. If you are in California the CCPA gives you those rights by name, along with the right not to be treated differently for using them — we would not know how to treat you differently, since none of this is used for anything but running your account. We do not sell or share personal information as those laws mean it.

This site is not for children. We do not knowingly hold anything about anyone under thirteen, and if we find that we do we delete it. The terms set a higher bar than that for a paid account.