Privacy Policy

1. Information we collect

Depending on how you use the site, we may process:

• Account information: your email address, a unique account identifier, and—when you choose Google sign-in—basic profile information such as your name and profile image. We do not receive or store your Google password.
• Collection information: figures and variants you mark as owned or wanted, quantities, item details, notes, and custom figures you create.
• Photos: images you voluntarily upload for figures or variants in your collection.
• Collector Plus activity: upgrade-offer views, upgrade clicks, checkout starts, and confirmed first subscription payments, together with your internal account identifier, the feature that introduced the offer, and a timestamp. These records do not contain your collection contents or card details and are deleted when your account is deleted.
• Technical information: our hosting and authentication providers may process IP addresses, browser information, device information, timestamps, and security logs as part of operating and protecting their services.

2. Guest and signed-in storage

When you use the site without signing in, your collection is stored in your browser using local storage, and uploaded photos are stored in your browser using IndexedDB. That information normally remains on that device unless you clear its browser data.

When you sign in, collection information and photos may be copied to and synchronized with your account so they are available across devices. Account data is stored through Supabase. Uploaded photos are kept in private storage and delivered through time-limited signed links.

3. How we use information

We use information to:

• authenticate your account and keep you signed in;
• save, synchronize, display, and back up your collection;
• store and display photos and custom entries you provide;
• measure and improve how collectors discover and subscribe to Collector Plus;
• maintain security, prevent abuse, diagnose errors, and operate the site; and
• respond to support, privacy, or account-deletion requests.

4. Google user data

If you use Google sign-in, RubberWrestlers.com requests only the basic information needed to authenticate you: your Google account identifier, email address, and basic profile information. This information is used only for sign-in, account identification, and displaying account details.

We do not use Google sign-in to access Gmail, Google Drive, contacts, calendars, or other Google services. We do not sell Google user data, use it for advertising, or share it except with service providers that are necessary to operate authentication and the site.

5. Service providers and sharing

We do not sell or rent personal information. We rely on service providers including:

• Google, when you choose Google authentication;
• Supabase, for authentication, database services, and private photo storage; and
• Vercel, for website hosting and delivery.

These providers may process information under their own terms and privacy policies. We may also disclose information when reasonably necessary to comply with law, protect users, investigate abuse, or defend the rights and security of the site.

6. Browser storage and cookies

The site uses browser storage to preserve guest collections, authenticated sessions, and dismissed Collector Plus reminders. Google, Supabase, or Vercel may use cookies or similar technologies that are necessary to provide their services. RubberWrestlers.com does not currently use third-party advertising cookies or behavioral advertising trackers.

7. Retention and deletion

Guest information remains on your device until you remove it or clear browser data. Signed-in information is generally retained while your account remains active or as needed to provide the service, resolve disputes, maintain security, and meet legal obligations.

You may remove individual collection entries and photos through the site. To request deletion of your account and associated server-stored information, email support@applauz-media.com from the address used for your account.

8. Security

We use reasonable safeguards designed to protect account information, including authenticated access controls, row-level database security, private photo storage, and encrypted HTTPS connections. No method of storage or transmission is completely secure, so absolute security cannot be guaranteed.

9. International processing

Service providers may process information in countries other than the one where you live. Those countries may have different data-protection laws. By using the service, you understand that this processing may occur where our providers operate their infrastructure.

10. Children’s privacy

The account service is not directed to children under 13, or a higher minimum age where required by local law. If you believe a child has provided personal information without appropriate permission, contact us so we can investigate and remove it where required.

11. Your choices and rights

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of personal information associated with your account. You may also object to or restrict certain processing. Contact us to make a request; we may need to verify your identity first.

12. Changes to this policy

We may update this policy when the service or applicable requirements change. The effective date at the top will be updated when changes are published. Material changes may also be communicated through the site where appropriate.

13. Contact

Questions, privacy requests, and account-deletion requests can be sent to support@applauz-media.com.