Privacy Policy

Last updated: October 6, 2026

The short version

There are no user accounts on this site. We don't track you across other sites, sell your data, or build an advertising profile on you. Apart from the technical data described below (hosting logs, and the IP address and country our code checks when you submit the form), the only personal information we keep is what you choose to type into the Shop Ticket form. Payment information for the tip jar never touches our servers at all — Stripe handles that directly.

What we collect

  • Shop Ticket submissions: the message you write, the ticket type you pick, and an email address only if you choose to provide one for a reply.
  • Basic hosting logs: our hosting provider (Vercel) automatically logs standard technical data (IP address, browser type, request timestamps) for security and performance purposes, the same way virtually all web hosts do.
  • Spam protection on the Shop Ticket form: when you submit the form, our own code checks the requesting IP address to limit how many submissions can come from one place in a short window, which is what stops a bot flooding it. The address is held in the server's memory for about ten minutes so the count can work, and is never written to our database or emailed. The same check reads the country your connection appears to be in, to keep the form to visitors in the United States (see "Visitors outside the United States" below).
  • Page-view analytics: we use Vercel Web Analytics to count how many people visit and which tools actually get used, so we know what's worth improving. It is cookieless and aggregate — it does not follow you across other sites, does not build an advertising profile, and does not identify you personally.
  • Payment data: none. If you use the tip jar, Stripe processes and stores your payment details directly — we never receive or store your card information.

We do not use advertising cookies, and nothing on this site tracks you across other websites.

How we use it

Shop Ticket submissions are used solely to respond to your request (for example, researching and adding a vehicle or driver you asked for) or to improve the site. We never sell your information or share it with third parties for their own marketing.

How long we keep it

Shop Ticket submissions are emailed directly to the site owner's inbox, and are also stored in our database (Supabase) so requests don't get lost in an inbox. We keep them for as long as they're useful for the research they describe — a vehicle request stays until that vehicle is added and verified.

To be straight with you about how that works: there is no automatic expiry timer. A submission stays in the database until it is deleted by hand, either because the request it describes is finished or because you asked us to remove it. We would rather tell you that than publish a tidy-sounding retention schedule that nothing actually enforces. If you'd like a submission you sent removed or forgotten, use the Shop Ticket form itself (pick "General feedback") to ask, and we'll honor that request — including deleting the stored copy.

Third-party services we use

Some outbound product links are affiliate links (Build My Box may earn a commission if you buy through one) — see the affiliate disclosure in our Terms of Use for which partners and what that means. Clicking an affiliate link takes you to that retailer's own site, subject to their own privacy policy, not ours.

Your rights

Since there's no account system, there's no ongoing profile of you to access or delete beyond a Shop Ticket message you've sent us — and you can ask us to delete that at any time (see above). Visitors outside the United States: see the section below.

California residents: you have the right to know what personal information we've collected about you and to request its deletion. Submit either request through the Shop Ticket form. We do not sell personal information, so there's nothing to opt out of on that front.

Visitors outside the United States

Build My Box is run from the United States, in English. The Shop Ticket form is offered to visitors in the United States and its territories only.

To keep the form to those visitors, our server reads the country that our hosting provider's network attaches to each submission, which it works out from the IP address, and refuses the submission with a message saying so if the country is anywhere else. We read that country only to make that decision. Our code does not save it, email it, or add it to what you sent.

This is an IP check, so it is not perfect. A connection that shows a United States address, such as some VPNs, is let through, and so is a request that arrives with no country information. If you are outside the United States, please do not send us a Shop Ticket, whatever your connection shows.

The rest of the site is not blocked. Anyone can open the pages and use the calculators, with no account and no cookies of our own. For every visitor, wherever they are, our host (Vercel) logs standard technical data such as the IP address, and Vercel Web Analytics counts page views, as described under "What we collect." The Shop Ticket form is the only way to reach us through this site, so visitors outside the United States currently have no route to send us a message. We would rather say that plainly here than offer a form that will refuse you.

Children's privacy

This site is not directed at children under 13, and we do not knowingly collect personal information from them.

Changes to this policy

We may update this policy as the site changes. The "Last updated" date at the top reflects the most recent revision.

Contact

Questions about this policy, or a request to access/delete a Shop Ticket submission? Use the Shop Ticket form on the homepage (pick "General feedback"). The form is offered to visitors in the United States only — see the section above.