Privacy Policy

Effective Date: June 5, 2026 | Last Updated: June 5, 2026

            Short version: We collect only what we need to run your account — your username and password. We do not collect your email address or log or store your IP address. We do not sell your data or use any third-party analytics.
          

1. Who We Are

Remote Construct ("we," "us," or "our") is a remote machine rental platform operated by Dylan (an individual). You can contact us at contact@remoteconstruct.io.

2. What Information We Collect

When you create an account, we collect:

Username — chosen by you at registration (3–32 characters). This is the only name associated with your account.
Password — stored as a secure one-way hash using bcrypt. We cannot read your password.
Account creation date — the date and time your account was created.
Account role — the type of account you hold (for example, standard user, Ko-fi supporter, machine operator, or administrator).
Account status — whether your account is in good standing or subject to a moderation action (ban or timeout), and the reason if applicable.
Quest progress — if you take part in on-site challenges, we store your progress and completion of those challenges, linked to your account.

While you use the service, we temporarily hold in memory:

Session data — a server-side session, identified by a sid cookie in your browser, used to keep you logged in.
Queue position — your username and position in the machine queue while you wait. This is held in memory only and is not saved to disk.

If you message us through the on-site Contact Admin form, we store the subject and body of your message, the date you sent it, and any reply we send, so that we can respond and keep a record of the conversation.

We do not collect:

Email addresses
IP addresses — we do not log or store them (an IP address may be used momentarily in memory to rate-limit login attempts, but it is never written to our database or logs)
Payment information (see Section 8)
Location data
Device identifiers or fingerprints

3. How We Use Your Information

We use the information we collect only to:

Authenticate you when you log in
Manage your place in the machine queue
Track your progress in on-site quests or challenges, if you take part
Enforce account moderation actions (bans, timeouts) if you violate our Terms of Service
Allow you to update your username or password via your profile settings
Respond to messages you send us through the Contact Admin form

4. Cookies

We use a single first-party session cookie named sid. This cookie is strictly necessary for the site to function — it keeps you logged in. It is set as HttpOnly (not accessible by JavaScript), restricted to our own site (SameSite=Strict), and sent only over HTTPS in production. We do not use any advertising, analytics, or tracking cookies of our own.

Some pages embed third-party content (see Section 5), which may set its own cookies in your browser. Apart from that, because we use only a strictly necessary session cookie, no cookie consent banner is required under current US law.

5. Third-Party Content and Data Sharing

We do not sell, trade, or share your personal information with any third parties. We do not use any third-party analytics services (such as Google Analytics), advertising networks, or social media tracking pixels.

However, some pages embed content served by third parties, and when your browser loads that content the third party may receive technical information such as your IP address and may set its own cookies, governed by their own privacy policies:

Instagram feed — image thumbnails from our Instagram are loaded from Meta's servers. See the Instagram Privacy Policy.
Ko-fi — our donation/support widget is provided by Ko-fi. See the Ko-fi Privacy Policy.
jsDelivr CDN — some interface scripts are loaded from the jsDelivr content-delivery network.

We do not control these third parties and are not responsible for their data practices.

6. Data Storage and Security

Your account data is stored in a SQLite database on our server, and your login session is stored server-side. Passwords are hashed with bcrypt (cost factor 12) and are never stored in plaintext. We take reasonable technical precautions to protect your data, including HTTPS-only access and rate limiting on login attempts.

No security system is perfect. If you believe your account has been compromised, please contact us immediately.

7. Data Retention and Deletion

Your account data is retained until you request deletion. To delete your account and all associated data, email us at contact@remoteconstruct.io. We will process deletion requests within a reasonable time.

8. Donations and Future Payments

If you choose to support us through Ko-fi, that transaction is handled entirely by Ko-fi as a third-party provider. We do not receive or store your payment card details. We may plan to introduce paid sessions in the future; if we do, payment processing will be handled by a third-party payment processor (such as Stripe), we will not store your card details on our servers, and this Privacy Policy will be updated before any such feature goes live.

9. Age Restriction

Remote Construct is intended for users who are 13 years of age or older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of the service after changes are posted constitutes your acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or want to request deletion of your account, email us at contact@remoteconstruct.io, use the Contact Admin form on your profile page (login required), or join our community Discord.

Back to Dashboard