Last updated: August 12, 2026
IRONBUILT ("the app") is an army list builder with optional social features. This policy explains what data we collect, what other people can see, and how long we keep it.
The short version: your army lists are yours and stay private unless you publish them. We do not sell or share your data, we run no advertising, and we use no cross-site tracking.
If you choose to create a public profile, that profile and anything you choose to publish to it are visible to other people — that is the point of it. Everything social in IRONBUILT is opt-in: the app is fully usable, forever, without an account.
IRONBUILT does not require an account. You can build, save and export army lists entirely on your own device, with no sign-up of any kind. In that mode we collect no personal information, and your lists are stored in your browser's local storage and are not sent anywhere.
Optionally, you may create a free account with an email address and password. This enables cross-device sync for your lists and settings. We store your email address, an encrypted password, your army lists and your app settings. Authentication and storage are provided by Supabase.
An account on its own is still private. Nothing about you becomes visible to other people until you claim a handle and create a profile.
Creating a profile means choosing a handle. From that point on, the following are visible to other signed-in users, subject to your privacy setting below:
A new profile is public. You can switch it to private at any time in Settings.
Changing to private will change your profile to private and hide the information stated above, and hide your feed from anyone who is not your ally.
Adding an ally is one-way. Adding someone means you see their posts; it does not mean they see yours. They only see your posts if they add you back. Your list of allies, your pending requests, and who has added you are visible only to you and to the individual people involved. Nobody can browse the wider social graph.
Mentioning someone with an @ handle creates a notification for them containing your handle and an extract of what you wrote. If a person has a private profile, only allies they have approved can mention them. You can block another account, which severs any ally relationship in both directions and prevents them finding or contacting you.
Some things you enter are stored but are never returned to anyone but you. Your home store or club, if you enter one, is treated as location data and never leaves our database for another user. Your email address is never shown on your profile.
Public content needs moderation, and moderation needs records. This is the part of this policy most likely to matter to you if something goes wrong, so it is stated plainly.
Sharing a list by link or QR code uploads that list so the recipient can open it. Shared links that go untouched are deleted automatically after 90 days.
Reporting a bug or suggesting a data correction sends your message, the app context you were looking at (such as the faction, detachment or unit on screen), your browser and app version, and — only if you tick the box — a copy of the list you were working on. You may include an email address so we can reply; it is used for that reply and nothing else, and it is never published. You may optionally supply a public credit name for the community dataset's contribution log; that name, and only that name, is published if your suggestion is used.
Exporting a list to Tabletop Simulator sends that list to our export service to be converted.
IRONBUILT's core list builder is free, and stays free. Optional paid tiers are handled by Stripe, which processes your payment details directly. We never see or store your card number. We store only what is needed to know what your account is entitled to: a Stripe customer reference, your subscription status, and the date it runs until.
Subscriptions are purchased on ironbuilt.app. The iOS and Android apps do not sell anything; they reflect the entitlement your account already has.
IRONBUILT can import public tournament information — event names, player names, army lists and standings — from Best Coast Pairings, where that event's organiser has already made it public. This information is about the players in those events, is republished as it was published there, and is not linked to IRONBUILT accounts. If you appear in imported event data and want it removed, contact us.
IRONBUILT can contribute anonymous, aggregate information about army composition and games played, so the community can see how the game is being played. This is reported only in aggregate.
This information is anonymous by design, not merely de-identified:
Product analytics, when enabled, use Plausible, which is cookieless, stores no personal data and does not track people across sites. You can turn all of this off at any time in Settings; opting out means the analytics script is never loaded at all, rather than merely muted. The app works identically either way.
IRONBUILT contains no advertising, no advertising networks, and no cross-site tracking technologies. We do not follow you around the internet, and we do not sell or share your data with data brokers.
You may delete your account at any time from within the app, or by contacting us. Deleting your account removes your profile, your synced lists, your published lists and posts, your comments, your allies and requests, and your notifications.
Two things are not removed, and we would rather say so than imply otherwise:
Data stored locally on your device can be cleared through your browser's storage settings.
The app is hosted on Netlify, which may keep standard server access logs (IP address, request path, timestamp) as part of normal hosting operations, subject to Netlify's Privacy Policy. We do not copy those logs into our own records or join them to anything described above.
Accounts, profiles, lists, social content, moderation records and bug reports are stored via Supabase. Payments are processed by Stripe. Product analytics, when enabled, are provided by Plausible.
The community game dataset the app loads on first run is fetched from a public repository over a content delivery network. Requesting it is an ordinary web request; we do not receive an identity with it.
IRONBUILT does not knowingly collect information from children under 13, and the social features are not intended for them. The app contains fantasy violence themes appropriate for ages 12 and older. If you believe a child under 13 has created a profile, contact us and we will remove it.
If this policy changes, the updated version will be posted at this URL with a revised date. If a change materially affects what other people can see about you, we will say so in the app rather than only here.
Questions about this policy, or requests to remove data, can be sent to iron.built.app@gmail.com.