Privacy Policy

Last Updated: October 7, 2025

Who We Are

Spectrum Labs LLC ("we", "our", "us") operates the AR15.BUILD websites and applications (the "Services"). For questions about this policy, please contact us via the form.

Scope

This policy explains how we collect, use, and share information when you use the Services, including our marketplace for buying and selling AR-15 components.

Information We Collect

• Account data: username, email, and any profile details you provide.
• Build content: component selections, build names/descriptions, votes, and comments.
• Marketplace data: listing details, component photos, pricing information, transaction communications, and seller/buyer activity.
• Private messages: communications between users regarding marketplace transactions, including message content and metadata.
• Reputation data: user ratings, reviews, response times, transaction history, and behavioral patterns for reputation scoring.
• Usage data: pages viewed, navigation actions, timestamps, referrers, and basic technical diagnostics.
• Device/browser data: device type, OS, browser, language, screen size.
• Cookies & similar technologies: essential cookies for core functionality and optional analytics cookies (see "Cookies & Analytics").
• Outbound link data: clicks on external product/retailer links (which may include affiliate parameters), including clicks from marketplace listings.
• Image data: uploaded photos of marketplace items, including metadata and hash values for duplicate detection.

Cookies & Analytics

We use Google Analytics (GA4) to understand how the Services are used and to improve performance and content.

• How GA works: GA4 sets first‑party cookies (e.g., _ga variants) to help distinguish users and measure usage trends. We do not send personally identifiable information (PII) to Google.
• Consent: Analytics only runs after you grant consent in our cookie/consent banner. You can withdraw consent at any time via the banner.
• Google’s use of data: See How Google uses information from sites or apps that use their services.
• Opt‑out options:
  • Use our consent banner to disable analytics.
  • Install the Google Analytics Opt‑out Browser Add‑on.
  • Use browser/OS tracking protection and clear cookies.
• Advertising features: We do not enable Google advertising features (e.g., remarketing, demographics). If that changes, we will update this policy and obtain any required consent.

Legal Bases (EEA/UK/Switzerland)

• Consent for analytics cookies/processing.
• Legitimate interests for minimal processing needed to secure and operate the Services.

How We Use Information

• Provide, maintain, and improve the Services.
• Analyze aggregate usage to improve performance, content, and usability.
• Detect, prevent, or investigate security incidents or abuse.
• Operate community features (comments, votes, marketplace listings).
• Facilitate marketplace transactions between users (without processing payments).
• Calculate and display user reputation scores and response rates.
• Monitor private messages for safety, fraud prevention, and legal compliance.
• Display affiliate links and track revenue for platform sustainability.
• Enforce listing expiration and renewal policies.

Marketplace Privacy Considerations

Public Information

Certain marketplace information is publicly viewable by design:

• Marketplace listings and item details
• User reputation scores and rating summaries
• General response rate information
• Listing expiration and renewal status

Private Information

The following marketplace information remains private:

• Private message content (except for safety monitoring)
• Personal contact information until users choose to share
• Detailed transaction histories
• Specific user behavioral analytics

Message Monitoring

Private messages may be monitored using automated systems to:

• Detect fraudulent or illegal activity
• Enforce our Terms of Service
• Respond to user reports of abuse
• Comply with legal obligations

Human review of messages occurs only when necessary for safety or legal compliance.

Sharing & Disclosure

• Service providers: hosting, analytics, CI/CD, and other vendors acting on our behalf.
• Google Analytics: analytics data is processed by Google per their policies.
• Legal: information may be disclosed if required by law or to protect rights/safety, including marketplace transaction data and private messages when necessary.
• Law enforcement: marketplace data may be shared with law enforcement agencies for investigations involving illegal transactions or safety concerns.

International Transfers

We and our processors (including Google) may process data globally. Where required, transfers rely on appropriate safeguards (e.g., Standard Contractual Clauses).

Your Rights

• EEA/UK/Swiss users: You may have rights to access, correct, delete, or restrict processing, and to withdraw consent for analytics at any time via the banner. Please contact us to make a request.
• California (CPRA): We do not sell personal information. If you wish to limit "sharing" for cross‑context behavioral advertising (not currently used), disable analytics in our banner. Request access or deletion via our contact form. Note: marketplace reputation data may be retained even after account deletion for platform safety.

Data Retention

• Analytics: GA4 event data is retained by Google for a limited period (typically up to 14 months). Aggregated reports may persist longer without user‑level identifiers.
• Account & content: retained while your account is active or as needed to provide the Services. Certain records may be kept as required by law or for security.
• Marketplace listings: active listings are retained during the 30-day listing period. Expired listings remain viewable via direct links indefinitely unless deleted by users.
• Private messages: retained for 2 years after last message for safety and dispute resolution. Messages may be retained longer if involved in reported incidents.
• Reputation data: user ratings and reputation scores are retained indefinitely to maintain platform trust and safety.
• Transaction records: basic transaction metadata retained for 7 years for legal compliance and dispute resolution.

Security

We use administrative, technical, and organizational safeguards appropriate to the data we process. No method is 100% secure.

Children’s Privacy

The Services are not directed to children under 13 (or lower age as defined by local law).

Changes

We may update this policy. Material changes will be posted with a new “Last Updated” date. Continued use of the Services after changes constitutes acceptance.

Contact

Questions or requests about this policy: contact us