Legal
Privacy Policy
Last updated: March 2026. This policy explains how Aribuilds collects, uses, and protects your information.
1. Overview
Aribuilds (“we”, “us”, “our”) is a home improvement planning platform that helps DIYers calculate materials, compare prices, and plan projects. We are committed to handling your data with transparency. This policy applies to aribuilds.com and all subdomains. By using Aribuilds, you agree to the practices described here.
2. Information We Collect
Account information
When you create an account (via email/password or Google Sign-In), we collect your email address, name, and a profile display name that you optionally provide. Google Sign-In may also supply your Google profile name and avatar URL. We do not receive your Google password.
Project & build list data
When you save products to your Build List or interact with project calculators, we store those selections and quantities against your account so you can retrieve them across devices.
Usage data
We use Vercel Analytics to collect anonymised, aggregated page-view and performance data. This does not include personally identifiable information and does not use cookies for cross-site tracking.
Session cookies
Supabase sets a session cookie to keep you signed in between visits. This cookie is httpOnly, scoped to aribuilds.com, and contains only an encrypted session token, not your personal data.
Affiliate tracking
When you click a product link to an external retailer (Home Depot, Lowe's, Amazon, etc.), that retailer may set their own tracking cookies to attribute the visit for commission purposes. These cookies are set by the retailer, not by Aribuilds, and are governed by their own privacy policies.
3. How We Use Your Information
- Provide the service: authenticate your account, store your Build List, and personalise your experience
- Improve the platform: understand which guides, tools, and products are most useful using aggregated analytics
- Transactional emails: send password reset and account confirmation emails via Supabase Auth. We do not send marketing emails without your explicit opt-in
- Legal obligations: comply with applicable laws and respond to lawful requests
We do not sell your personal data to third parties. We do not use your data to build advertising profiles.
4. Third-Party Services
Aribuilds relies on the following third-party infrastructure. Each has its own privacy policy:
- Supabase: authentication, database, and file storage. Your account data and build lists are stored in Supabase-managed PostgreSQL databases hosted on AWS infrastructure.
- Google OAuth:optional sign-in provider. If you use “Sign in with Google”, Google shares your name and email with us. We do not receive any other Google account data.
- Vercel: hosting and edge delivery. Vercel processes request logs (IP addresses, user agents) as part of normal CDN operation. Vercel Analytics provides anonymised aggregated metrics only.
- Affiliate networks(Home Depot / Impact, Lowe's / CJ Affiliate, Amazon Associates): when you click an outbound product link, these networks may track your subsequent purchase for commission attribution. This is covered by their respective privacy policies, not ours.
5. Data Retention
We retain your account data for as long as your account is active. If you delete your account, your profile, email, and build list data are permanently deleted from our database within 30 days. Aggregated, anonymised analytics data (which contains no personal information) may be retained indefinitely.
6. Your Rights
You have the right to:
- Access: view the personal data we hold about you via your Account page
- Correct: update your name and display name at any time from the Account page
- Delete: request deletion of your account and all associated personal data by contacting us (see Section 9)
- Portability: request a copy of your stored data in a machine-readable format
- Withdraw consent: you may sign out and stop using the service at any time
If you are in the European Economic Area (EEA) or California, you may have additional rights under GDPR or CCPA respectively. Contact us to exercise these rights.
7. Cookies
Aribuilds uses a minimal set of cookies:
| Cookie | Purpose | Duration |
|---|---|---|
| sb-*-auth-token | Supabase session: keeps you signed in | 1 week |
| theme | Stores your light/dark mode preference | 1 year |
We do not use advertising cookies or third-party tracking pixels. Retailer affiliate networks may set their own cookies when you visit their sites (see Section 4).
8. Children's Privacy
Aribuilds is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
9. Changes to This Policy
We may update this policy as the platform evolves. Material changes will be reflected in the “Last updated” date at the top of this page. Continued use of Aribuilds after changes constitutes acceptance of the revised policy.
10. Contact
For privacy requests, data deletion, or questions about this policy, email us at hello@aribuilds.com.