Privacy Policy

Last updated: 3 October 2026

This policy explains what personal data BuildMyPC collects, why, and what you can do about it. It is written to be read, not to be survived. If anything here is unclear, ask and we will explain it in plain terms.

What we collect

Account data

When you sign up we collect your email address, and your name if you provide one. Accounts and passwords are handled by Clerk, our authentication provider — we never see or store your password. Clerk acts as a processor on our behalf.

Build data

When you generate a build we store what you asked for (budget, use case, preferences) and what we recommended, linked to your account. This is what makes saved builds work, and it is what we look at when a recommendation comes out wrong.

Technical logs

Our server records requests: a request identifier, timestamp, IP address, browser user-agent string, and the account making the request. These exist for security, abuse prevention and debugging.

Feedback

If you submit feedback, we keep it along with the build it refers to. Please do not put anything sensitive in a feedback box.

Requests to talk to us

If you use the “Talk to us” form, we keep what you type: your name, the email or phone number you give, your budget, what the PC is for and your message. We use it only to reply to you about that build. We send you nothing else, and we don't add you to any mailing list.

Analytics — only if you agree

We use Google Analytics and Google Tag Manager to understand how the site is used. These are switched off until you accept them. Decline and no analytics cookies are set. You can change your mind at any time using the button at the bottom of this page.

Statistics we count ourselves

Separately from analytics, our own server keeps anonymous usage counts: which pages are viewed, which step of the build flow a visit reaches, and how many people have registered. This uses no cookies and needs no consent because it identifies nobody: your IP address is one-way hashed before it is stored, and a random visit ID exists only until you close the tab. None of it is shared with anyone.

Why we are allowed to hold it

• To provide the service you asked for (contract) — account data and build data. Without these there is no product.
• To keep the service working and unabused (legitimate interests) — technical logs. We have weighed this against your privacy and keep the logs minimal and short-lived.
• To answer you before an order (steps at your request) — Talk to us requests.
• Because you said yes (consent) — analytics. You can withdraw this as easily as you gave it.

Who else sees it

We do not sell your data. We do not share it for advertising. It reaches:

• Clerk — authentication.
• Cloudflare — sits in front of the site, sees traffic in transit.
• Google Analytics — only after you accept.

Some of these providers operate outside the EEA. Where that happens, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

The site recommends parts sold by third-party retailers. We pass no personal data to them by showing you their prices.

How long we keep it

• Account and build data — until you delete your account.
• Technical logs — a rolling window, currently under 90 days.
• Talk to us requests — 1 month after we last hear from you, then deleted. Ask us and we delete one sooner.
• Analytics — per Google Analytics retention settings.

Your rights

Under the GDPR you can ask us to: give you a copy of your data; correct it; delete it; hand it over in a portable format; restrict what we do with it; or object to processing based on legitimate interests. You can also withdraw analytics consent at any time.

Email [email protected] and we will respond within one month. There is no charge.

If you think we have handled your data badly, you can complain to the Cyprus Office of the Commissioner for Personal Data Protection (dataprotection.gov.cy). We would rather you told us first, but it is your right either way.

Security, honestly stated

Traffic is encrypted in transit. Access to the database is restricted and the administration area is separately protected. Passwords are held by Clerk, not by us.

Being straight with you: BuildMyPC currently runs on a single server maintained by one person. We take backups and we have hardened what we can, but this is a beta, not a bank. Do not store anything here you could not stand to lose or to have exposed.

Children

The site is not intended for children under 16. We do not knowingly collect their data; tell us if you believe we have and we will delete it.

Changes

If this policy changes materially we will update the date at the top and, for anything significant, tell account holders by email.

Your cookie choice

You have not chosen yet.