1. Who we are
Runner Cut (runnercut.com) is a free cutting checklist for model kits, run by the project owner as an individual. This policy explains what personal data we collect and how we handle it.
2. Without an account
You can use every checklist without signing in. Your ticks are stored only in this browser (localStorage) and are never sent to us.
3. Data we collect when you create an account
- Your email address and the nickname you choose (others only ever see the nickname).
- Your password, stored by our sign-in provider as a one-way hash. Nobody at Runner Cut can read it.
- Your progress: the parts you ticked, the status of each kit (want to buy, owned, building, finished) and when it changed.
- Technical data our providers record for security, such as IP address, browser type and sign-in times, kept for a short period.
4. Why we use it
- To create and run your account and send verification and password-reset codes.
- To save your progress and sync it between your devices.
- To prevent spam, abuse and unauthorised access.
We do not sell or rent your data, we do not use it for advertising and we do not send marketing emails.
5. Where it is stored
We use these service providers: Supabase (accounts and database, servers in Singapore), Resend (sending emails) and Cloudflare (hosting the site, bot protection and the Turnstile check). Your data is therefore stored and processed outside Vietnam. By creating an account you agree to this transfer.
6. How long we keep it
Until you delete your account. Encrypted backups are kept for about two months and then removed automatically.
7. Your rights
- See and download your data: Account page → Download my data.
- Change your nickname on the Account page.
- Delete your account at any time on the Account page. Deletion is immediate and cannot be undone; this also withdraws your consent.
- For any other request, email [email protected].
8. Security
All connections use HTTPS. Database access rules only let each person read and change their own data, and the administrator account uses two-factor authentication. If a data breach affects you, we will notify you and the competent authorities as required by law.
9. Browser storage and cookies
We use localStorage to remember your ticks, your sign-in session and your nickname. Cloudflare Turnstile may set a technical cookie to tell people from robots. We do not use advertising or tracking cookies.
10. Children
If you are under 16, please ask a parent or guardian to agree before you create an account.
11. Changes
We will post any change on this page with a new date. Significant changes will also be announced on the site.