Privacy Policy

Effective date: September 7, 2026

Introduction

RigFig (“RigFig,” “we,” “us”) is operated by RigFig LLC, a Texas limited liability company. This policy explains what we collect when you use rigfig.com, why we collect it, and what you can do about it.

Short version: we run a gear site. We collect the minimum needed to save your rig, send you email if you asked for it, and understand how the site is used. We don’t sell your personal information.

1. Who this applies to

RigFig is intended for adults. You must be 18 or older to create an account. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, email us at admin@rigfig.com and we will delete it.

2. What we collect

Information you give us:

— Account information. If you create an account with email and password, we collect your email address. Your password is handled by our authentication provider (Supabase) and stored only as a cryptographic hash — we never see it. If you sign in with Google instead, we receive your email address and basic profile information from Google; we never receive your Google password.
— Profile details. An optional display name, discipline, and avatar selection.
— Signup confirmations. We record the date and time you confirmed you are 18 or older, and whether you opted in to our email newsletter.
— Your rig data. The gear you add to your Armory or wishlist — items, quantities, status, and any notes you write — plus any competition or event entries you log.
— Anything you send us. Email, form submissions, or other messages.

Information collected automatically:

— Anonymous session. When you first open The Armory, we create an anonymous session so your rig saves without an account. It’s identified by a random ID with no name or email attached. If you later create an account, that session is upgraded in place and your saved gear carries over.
— Local browser storage. We store your rig, your theme preference, and a short-lived record of your signup checkbox answers in your browser’s local storage. This stays on your device and is not a tracking cookie. Clearing your browser data clears it.
— Usage analytics. We use PostHog to understand how the site is used — pages viewed, features used, and technical details like browser type, device type, referring page, and an approximate location derived from your IP address. PostHog also captures unhandled JavaScript errors so we can fix things that break. This is aggregate product analytics, not advertising profiling.
— Server logs. Our hosting providers keep standard access logs, including IP addresses, for security and troubleshooting.

Information we do not collect:

We do not collect payment information — RigFig doesn’t sell anything directly. We don’t ask for your address, phone number, or date of birth. We don’t collect information about firearms you own beyond the gear entries you choose to save, and we never share Armory contents with anyone unless you publish a share link yourself.

3. Affiliate links and how they work

RigFig is supported by affiliate commissions. When you click a product link, you are redirected through our link manager to a retailer such as Amazon or a brand’s own store. Two things happen at that moment:
– Our redirect manager logs the click — which link, when, and standard request details like IP address and browser — so we can report on which gear people are interested in.
– The retailer sets its own cookies to attribute any resulting purchase to us. What that retailer collects, and how it uses it, is governed by their privacy policy, not ours.

We never see your order details, your payment information, or your address. We only see aggregate commission reporting from the affiliate programs.

4. Shared rig links

If you publish a share link for your Armory, the contents of that rig — plus your display name if you’ve set one — become publicly viewable by anyone with the link. Share links are only available to registered accounts.

A share link is a snapshot taken when you create it. Editing your Armory afterward does not change what a previously published link shows, and creating a new link does not retire an old one. To take a share link down, email admin@rigfig.com with the link and we’ll delete it; deleting your account removes all of your share links. Assume that anything you publish this way may be indexed or copied while it’s live, so don’t put anything in your notes that you wouldn’t want public.

5. Email

If you check the newsletter box at signup, we’ll send occasional email about new gear guides and site updates. Every email includes an unsubscribe link, and you can also email us to be removed. We also send transactional email — sign-in links, password resets, and account notices — which you’ll receive regardless of newsletter status because they’re part of running your account.

We do not sell, rent, or share our mailing list.

6. Who we share information with

We share personal information only with the service providers that make the site work:
– Supabase for Accounts, authentication, and your saved rig data
– Kinsta for Website hosting
– Google for Optional “Sign in with Google”
– PostHog for Product analytics
– Affiliate networks and retailers for Attribution when you click an affiliate link

Each of these is bound by its own terms to use the data only to provide the service to us.

Beyond that, we will disclose information only when legally required — a subpoena, court order, or valid legal process — or when necessary to protect the safety, rights, or property of RigFig or its users. If RigFig is ever sold or merged, account data may transfer to the new owner, and we’ll say so on the site before that happens.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

7. How long we keep things

– Account and rig data: as long as your account exists.
– Anonymous sessions: until you clear your browser data or the session expires from disuse.
– Analytics: retained in aggregate by our analytics provider under its standard retention period.
– Email records: until you unsubscribe, plus a short period to honor the unsubscribe.

Delete your account and the associated rows — profile, Armory items, wishlist, events, and share links — are removed along with it.

8. Your choices and rights

Whatever state or country you’re in, you can:
– See your data. Email us and we’ll send you what we have.
– Correct it. Edit your profile and rig directly in the app.
– Delete it. Ask us to delete your account and we’ll do it, normally within 30 days.
– Unsubscribe. Use the link in any newsletter email.
– Opt out of analytics. Enable “Do Not Track” or a content blocker in your browser; PostHog will be blocked and the site still works.

Residents of California, Colorado, Connecticut, Virginia, and other states with comprehensive privacy laws have these same rights under those laws, plus the right not to be discriminated against for exercising them. If you’re in the EU or UK, our legal bases for processing are: performance of a contract (running your account), consent (newsletter and optional analytics), and legitimate interests (security, and understanding how the site is used).
To exercise any of this, email admin@rigfig.com. We may ask you to confirm you control the account’s email address before acting on a request.

9. Security

We use HTTPS everywhere, row-level security in our database so accounts can only read and write their own rows, and hashed password storage handled by our authentication provider. No system is perfectly secure, and we can’t guarantee that a determined attacker will never get in — but we don’t store payment data or government identifiers, so there is comparatively little to take.

10. Data location

RigFig is operated from the United States, and our providers store data on servers in the United States. If you use the site from outside the US, you’re consenting to that transfer.

11. Changes

We’ll update this policy as the site changes. When we do, we’ll revise the effective date above. Material changes — new categories of data, new sharing — will be announced on the site or by email to registered accounts.

12. Contact

RigFig LLC
[MAILING ADDRESS]
admin@rigfig.com