voxxxl

Privacy Policy

Last updated 27 June 2026

This policy explains how Viktors Makreckis ("we", "us"), the data controller for voxxxl, collects and uses your personal data. We are based in the United Kingdom, and this policy is written with the UK GDPR and Data Protection Act 2018 in mind. The Service is available worldwide.

1. Who we are

The data controller is Viktors Makreckis, an individual based in the United Kingdom. You can reach us at support@viktors.dev.

2. What we collect

  • Account data — your display name, email address, and a securely hashed password.
  • Authentication data — session and login cookies needed to keep you signed in.
  • Your content — the builds, schematics, images, avatars, posts and comments you upload.
  • Technical data — your IP address and browser user-agent, used to keep the Service secure and prevent abuse.
  • Anti-bot data — information processed by Cloudflare Turnstile to tell humans from bots.
  • Email verification data — tokens used to confirm your email address.

3. How we use it, and our legal bases

  • To provide the Service (create your account, host your content, sign you in) — performance of our contract with you.
  • To keep the Service secure (abuse and bot prevention, moderation, rate limiting) — our legitimate interests.
  • To contact you about your account (e.g. email verification, password resets) — performance of our contract.

4. Cookies

We use only essential cookies: cookies that keep you signed in and that support Cloudflare Turnstile's bot protection. We do not use advertising or third-party analytics cookies.

5. Who we share data with

We do not sell your personal data. We use a small number of service providers to run the Service:

  • Cloudflare — hosting, content delivery, the D1 database, and Turnstile bot protection.
  • Resend — sending transactional emails such as verification and password-reset messages.

We may also disclose data where required by law or to protect our rights or users' safety.

6. International transfers

Because the Service serves users worldwide and some of our providers operate outside the UK, your data may be transferred internationally. Where it is, we rely on appropriate safeguards such as UK adequacy regulations or standard contractual clauses.

7. How long we keep it

We keep account data and Your Content while your account is active. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must keep it to comply with the law or resolve disputes. Security logs are kept only as long as needed for that purpose.

8. Your rights

Under UK GDPR you have the right to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability. To exercise any of these, email support@viktors.dev.

You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. Children

The Service is not intended for children under 13. We do not knowingly collect data from them.

10. Security

We take reasonable technical and organisational measures to protect your data, including hashing passwords and serving the Service over HTTPS. No system is perfectly secure, so we cannot guarantee absolute security.

11. Changes

We may update this policy. The "Last updated" date above shows when it last changed.

12. Contact

Privacy questions or requests: support@viktors.dev. See also our Terms of Service.