Privacy Policy
Draft. This is a plain-language draft while Wrench Guild is invite-only. It's being reviewed by an attorney and will be updated before Wrench Guild opens to the public. Questions: [email protected].
The short version
We collect what we need to run Wrench Guild: your email, your handle, your cars and the work you log. We never sell your personal information. We don't show ads based on your activity, and we don't use tracking or advertising cookies. You can ask to see or delete your data at any time.
What we collect
If you join the waitlist
- Your email address.
- The car you drive, if you tell us.
- Where you heard about us, taken from the link you followed (for example a club's link) or the site you came from.
If you create an account
- Sign-in details: your email address and password. Your password is stored scrambled (hashed) by our sign-in provider, and nobody at Wrench Guild can see it.
- Your profile: your handle and whether you joined as a DIYer or a fan. Your handle is public.
- Your garage: the cars you add (make, model, year, nickname, odometer). Cars show on your public profile.
- Your service log: the jobs, dates, miles and notes you log. Your service log is private to you.
- Your activity: XP, ranks, badges and reports you file.
- Optional details: if we ask for things like favorite car movies or stores, they'll always be optional, and we'll say what each is for when we ask. Details like gender are kept private and never used for advertising.
- Two-factor sign-in: staff accounts use an authenticator app; we store only what's needed to check the code.
When you use the site
- Basic technical information our hosting providers log to keep the site running and secure, such as IP address, browser type and times of requests.
- To keep you signed in, the app saves a sign-in token in your browser's storage. We don't use advertising or tracking cookies.
Why we use it
- To run your account, garage, service log and reminders.
- To show your public posts and profile to other members.
- To invite you from the waitlist, and to email you about your account and Wrench Guild (you can unsubscribe from anything that isn't about your account).
- To keep the community safe: handling reports, stopping spam and abuse, and enforcing our Terms.
- To understand how Wrench Guild is used, in totals (for example, how many people own Civics), never by selling individual information.
Who we share it with
We never sell or rent your personal information. We share it only with:
- Service providers who host Wrench Guild for us: Supabase (our database and sign-in, hosted in the United States) and Cloudflare (website hosting, security and email forwarding). Emails you send to our @wrenchguild.com addresses are delivered to a Google (Gmail) inbox, and our pages load their fonts from Google Fonts, which sees your IP address. They process data only to provide their services to us.
- Other members: only what you choose to make public, like your handle, cars and posts.
- The law: if we receive a valid legal order, or to protect someone's safety. We record every such request.
- If Wrench Guild is ever sold or merged, your information would move to the new owner under the same promises, and we'd tell you first.
When we work with sponsors, they only ever see totals, such as "12,000 members follow Honda Civics". They never see individual people.
How long we keep it
- Waitlist: until you join or ask to be removed.
- Your account and its data: until you delete your account. Then we delete it, except for a record of staff actions (our audit log) and anything we must keep for legal reasons.
- Hosting logs: kept for short periods by our providers.
Who at Wrench Guild can see your data
- Staff use a separate, locked-down admin tool with two-factor sign-in.
- Staff can't see private details like gender or offer settings.
- Viewing your email address is limited to support staff and the owner, and every look is recorded.
- Private messages, when they arrive, will be readable by staff only if they're reported.
Your choices and rights
- See, correct or download your data: email [email protected].
- Delete your account or come off the waitlist: email [email protected]. A delete button in your account settings is coming.
- Opt out of non-account emails using the unsubscribe link.
- Depending on where you live (for example California or the EU), you may have more rights, such as limiting how your data is used. We'll honor those requests. Just ask.
Children
Wrench Guild isn't for children under 13, and we don't knowingly collect their information. If you think a child under 13 has joined, email [email protected] and we'll delete the account.
Security
Your data is protected by access rules in our database, encrypted connections, and staff two-factor sign-in. No system is perfect; if something ever goes wrong that affects you, we'll tell you.
Changes and contact
If we change this policy in an important way, we'll tell you on the site or by email first. Questions or requests: [email protected].