Trust & Privacy

Your data, handled with care.

This page is maintained by the RCRP Community team to answer common security and privacy questions about our platform. It describes the controls and practices currently in place and is editable project content, not an independent certification.

Authentication & Access

Accounts are protected by secure email/password and Google sign-in. Access to community data is enforced server-side with row-level security so members can only see and change what they are permitted to. Administrative areas require elevated roles checked on the server.

Platform & Hosting

RCRP runs on Lovable Cloud, which provides managed hosting, a managed Postgres database, authentication, and serverless functions. This describes capabilities of the underlying platform and is not an independent certification.

Data We Collect & How We Use It

We store the information needed to operate the community: your profile details, posts and comments you create, support tickets you submit, and donation records. This data is used to run community features and is not sold to third parties.

Subprocessors & Integrations

We rely on a small set of trusted providers to operate the site, including our cloud/database host, Stripe for processing donations, and Discord for community communication and support notifications. Payment card details are handled directly by Stripe.

Cookies & Analytics

We use essential cookies required for sign-in and session management. Any analytics we use are limited to understanding general usage and improving the site.

Retention & Deletion

We keep your data while your account is active. If you would like your account or specific data removed, contact us and we will handle the request.

Security & Privacy Contact

Have a privacy request, security concern, or vulnerability to report? Reach out through our Discord community and a staff member will follow up.

Shared responsibility: platform-level features are provided by our hosting provider, while the RCRP team is responsible for how the community is configured and operated. This page may be updated as our practices evolve.