Privacy Policy

Effective date: October 10, 2026. Site operator: CleanPCSetups, independently operated. Location/jurisdiction: Idaho, United States. Contact: [email protected].

Scope and contact

This Privacy Policy explains how CleanPCSetups.com handles information for accounts, PC-build and desk-setup showcases, likes, saves, comments and moderation. The public site operator is CleanPCSetups, independently operated. Send privacy questions or requests to [email protected]. This policy applies to this community, not the independent sites reached through public social or retailer links.

Information you provide

Account data includes username, private email address, a password stored by WordPress as a one-way hash, and records of policy acceptance and age confirmation. Your chosen display name, bio, avatar and social links are optional public profile information. Submissions include photographs, descriptions, component names, costs/currency and attributes. Comments, likes, saved selections and moderation reports are stored to provide those features. Support messages include the information you choose to email us. Do not send passwords or identity documents.

Public and private information

Published setups, selected profile information, social links and approved comments are public and may be copied or indexed by others. Account email and saved collections are not displayed publicly. Reports are restricted to administrators; moderation may require discussing a reported issue with the affected creator without publishing your private contact details. Draft photos are restricted to their owner and administrators. Removing an avatar or photo selection hides it from its public placement but is not an immediate permanent file purge.

Photographs and privacy

Upload only images you have rights to share and review them for addresses, screens, serial numbers and other private details. The site decodes and rewrites supported uploads to remove embedded EXIF/GPS metadata and reduce image size. This does not remove private information visibly present in the pixels. Published photos can be accessed by visitors; no technical measure prevents recipients from copying them.

Cookies and security information

WordPress uses cookies for authentication, session preferences and the optional remember-me choice. The community uses a temporary guest-session cookie for form security and stores short-lived action counters linked to a member ID or a keyed hash of an IP address. These counters expire after the applicable security window, generally 15 minutes, one hour or one day after the latest action. The browser may store discovery state locally to restore browsing. Hosting access/security logs may include IP address, browser/request information and timestamps. Hostinger provides server-side traffic analytics, including request counts, bandwidth and visitor-country/IP information. Its dashboard offers time filters up to the last seven days; that display window is not a verified permanent deletion period. The exact retention period for provider-managed access and security logs has not been verified. We do not promise a fixed deletion deadline for those records.

Why we use information

We use information to create and protect accounts, send essential account/reset emails, publish chosen content, provide search and discovery, maintain private saves and real reactions, review reports/comments, prevent abuse and answer requests. We do not use this initial community implementation to sell personal information, run targeted advertising or send marketing campaigns. If practices change, update this policy and any required choices before enabling them.

Service providers and external services

The site uses WordPress and hosting infrastructure from Hostinger. The hosting account identifies the server location as Arizona, United States, and the backup location as Boston, United States. Account/reset email is generated by WordPress and currently uses PHP’s mail transport on Hostinger’s hosting infrastructure; support sent to the supplied Gmail address is handled through Google. The hosting transport configuration does not establish all downstream routing providers or their retention. Administrators and necessary service providers may access information for operation and security. WordPress comment avatars may contact Gravatar when enabled, sending a hashed email identifier and normal request information; Gravatar display is enabled in the current WordPress discussion settings. Creator links lead to services with their own policies. We may disclose information when legally required, to address security/rights claims, or in a properly disclosed transfer of the service. We have not verified every downstream mail-processing location or provider. Contact us for questions about the services involved in a particular request.

Retention and deletion

Account and community records are retained while needed to operate your membership and content, handle moderation, or meet legal obligations. No automatic inactive-account deletion schedule has been implemented in the community features.

To request access to, correction of, or deletion of your personal data, email [email protected]. Where possible, write from the address associated with your account and describe your request. You may also request account closure or removal of your public submissions and comments. We may ask for proportionate identity verification before disclosing or changing personal information.

Our target is to respond to privacy requests within 30 calendar days of receipt. This is a response target, not a promise that every request will be completed within that period. If verification or the nature of a request requires additional time, we will explain the reason and expected next step. This target does not limit any applicable statutory rights or response requirements.

Our retention rule for resolved support emails is 12 months (365 days) from the date the support matter is resolved. After that period, our policy is to delete the correspondence unless it must be retained longer for legal obligations, security needs, or legitimate business reasons. Longer retention should be documented and reviewed when the reason no longer applies. Reopened matters are treated as unresolved until they are resolved again.

Support-email cleanup currently requires manual review and deletion; automated mailbox deletion is not enabled. Website settings do not themselves delete Gmail messages. Moving a message to Gmail Trash is a recoverable step and is not immediate permanent erasure. We do not promise immediate deletion from provider backups or other retained copies.

Personal-data requests use manual review. The community supplies its custom records to WordPress’s verified personal-data export workflow; exports include structured photo references rather than a bundle of image files. This export feature does not automatically erase accounts, submissions, photographs, support mail, hosting logs, or backups. Removing data from public view can precede removal from recoverable Trash and backups. We explain any information retained for security, disputes, or legal duties. Copies held by other visitors or search engines are outside our direct control. WordPress is currently configured with a 30-day Trash setting for applicable trashed content. This setting does not cover all personal data or support email, and scheduled cleanup depends on the site’s scheduled tasks; actual permanent deletion timing has not been tested. Backup copies can remain after active-site deletion. Daily hosting backups are enabled. Hostinger’s current documentation states that daily backups are retained for seven days and weekly backups for six weeks. These are the provider’s documented rotation periods, not deletion timing tested by CleanPCSetups; separately retained manual or downloaded backups may persist longer and require reviewed handling. Separately retained backups and provider-managed logs are reviewed when handling a deletion request, including any justified retention needs. We do not represent them as automatically erased by a website account change.

Your choices and rights

Edit or remove optional public profile fields and social links through Account. You may choose not to submit optional details or publish photographs. Disable nonessential cookies through your browser, recognizing that account features need authentication cookies. Applicable privacy rights depend on your location; send access, correction, deletion or other requests to [email protected]. We will review them under applicable law and explain any lawful limitation. No blanket waiver of mandatory privacy rights is required to use the community.

Members aged 16 and above

Membership is limited to people aged 16 or older. Users below the age of legal adulthood should involve a parent or guardian as described in the Terms. The community is not directed to children under 13 and does not knowingly permit accounts under 16. If you believe an underage account or inappropriate collection exists, contact [email protected] so we can investigate and remove or restrict it as appropriate. We do not collect a full birth date for the initial age confirmation.

Security and changes

We use authentication, access controls, upload validation, metadata rewriting and moderation measures, but no service can guarantee perfect security. Use a unique password and avoid sharing private information publicly. Material policy changes will be identified here and communicated where appropriate before they take effect. The current effective date is shown above.