Privacy notice

What the site handles

When you create an account, Avakot.Build processes your email address, username, password, Firebase user ID, verification state, and account status. Passwords are handled by Firebase Authentication and are not stored in the site's Firestore database.

Account profiles can also contain roles, warnings, and moderation status. Username reservations prevent two accounts from using the same name.

When you approve signing in to avakot.dev with Build, Build shares your account ID, username, and current verified email. The avakot.dev account service can use that verified email to create your account or match an existing verified account. Your Build password is not shared.

Public community content

Published builds are public. They can include your username, stable user ID, build name, notes, equipment and progression choices, game version, dates, and upvote total. Do not include personal or sensitive information in a build name or notes.

Votes, reports, report details, and moderation records are used to operate and protect the community. A removed build is hidden from public view, but records may remain for moderation, abuse prevention, and service integrity.

Cookies, browser storage, and analytics

A signed-in account uses an essential __session cookie. It is HttpOnly, uses SameSite=Lax, is Secure in production, and expires after no more than five days. The browser also remembers your game-language choice and your optional analytics choice. A Little Genius import is held temporarily in session storage and removed after it is used or rejected.

Google Analytics is optional and does not load until you allow it. If allowed, it measures visits and page usage and may set analytics identifiers or cookies. You can change this choice at any time with “Cookie settings” in the footer.

Services that process data

Google Firebase provides authentication and Firestore data storage. Amazon Web Services provides hosting, content delivery, catalogue storage, and transactional account email through SES. Google Analytics receives usage data only after consent. External wiki, market, Discord, and image links are operated under their own privacy practices.

Build notes can contain embedded YouTube videos. These players load from YouTube's privacy-enhanced domain, youtube-nocookie.com, and do not play automatically. Loading a player sends connection information to YouTube; playing a video also shares playback activity with YouTube under its privacy practices.

Retention and your choices

Account and build records are kept while they are needed to run the service. Security, report, moderation, backup, and provider-log records may be kept longer where needed for integrity and abuse prevention. Provider retention periods can differ from the site's active records.

You can edit your username, email, and password in account settings, remove your builds from public view, withdraw optional analytics consent, or ask about correction and deletion through the contact route below. Some records may need to be retained for security or moderation.

Questions and requests

Visit the contact page to reach the Avakot.Build team through the Avakot.org Discord. Ask to speak privately with a moderator before sharing account or privacy details; do not post sensitive information in a public channel.