Privacy Policy

Who is responsible and how to contact us

During beta, MyHobbyDesk is operated by its individual publisher. No personal postal address is published. Privacy, legal and support requests can be made through the Contact page.

Data we process

• Account and authentication information; profile details and visibility choices.
• Projects, miniatures, recipes, paint inventory, avatars, photos and covers.
• Community posts, replies and votes; reports and moderation records.
• Subscription and billing identifiers where billing is used. MyHobbyDesk does not store card numbers.
• User-triggered AI scan inputs, reviewed results, and AI credit/usage records.
• Technical and security information needed to operate, diagnose and protect the service.

Why we process it and our legal bases

• Contract/service delivery: create and secure accounts and provide requested collection, project, recipe, paint and AI functionality.
• Contract and your publication choices: display public profiles and content using the visibility you select.
• Legitimate interests: operate Community reporting and proportionate moderation, prevent abuse, secure and improve reliability.
• Contract and legal obligations where applicable: administer subscriptions, billing identifiers and provider/financial records.

Providers and recipients

The service uses Supabase for authentication, database and storage; Vercel for hosting; Google when you choose Google OAuth; OpenAI for requested AI analysis; and Stripe where subscription/billing functions apply. Browsers may request public news imagery from Warhammer Community remote hosts. Access is limited according to service roles and visibility settings.

Optional AI Scan

AI Scan is user-triggered. Images are sent to an external AI provider for analysis and suggestions can be wrong, so you must review them. Temporary scan inputs are not intentionally persisted by MyHobbyDesk solely for analysis, and raw successful AI responses are not deliberately stored. Images you accept and save may become permanent miniature, gallery or recipe content. Recipe scanning may send collection context needed to suggest a match. Provider-side handling is governed by the provider's current privacy information.

Retention and deletion

Account and hobby content generally remain while the account/content is active or until you delete them. Reports, usage, security and operational records are kept as necessary for those functions; no unsupported fixed period is promised. Account deletion runs MyHobbyDesk's deletion workflow. Payment or other provider records may be retained independently when operationally or legally required.

Your rights

Depending on the applicable GDPR rules, you may request access, rectification, erasure, restriction, objection, and portability where applicable. UI features cover some corrections and deletion; other requests can be made privately through Contact. You may complain to your competent supervisory authority, including the CNIL in France.

International processing

Some providers may process data internationally. Regions and transfer mechanisms are not asserted here where they cannot be verified from this application. Consult each provider's current privacy information or contact us for questions.