Privacy policy
How Brickzip collects, uses, shares, protects, retains, and deletes personal data across the website, installed app, catalog, community, account, and moderation surfaces.
Effective date
May 27, 2026
This Privacy Policy applies to Brickzip, including brickzip.com, the installed progressive web app, and any Brickzip app distributed through an app store. Brickzip is operated by the Brickzip team. For privacy questions, rights requests, or Play Store Data safety questions, contact [email protected].
Data we collect
- Account and authentication data, including name, email address, username, password or authentication provider, email verification status, role, security settings, session data, and two-factor authentication metadata.
- Profile and community data, including public profile details, avatar, bio, posts, replies, comments, polls, reactions, follows, bookmarks, reports, moderation history, and messages you choose to send.
- Catalog, collection, and contribution data, including saved sets, wanted lists, owned lists, public collections, catalog corrections, MOCs, events, images, files, and review notes.
- Media and device-permission data that you choose to provide, such as photos, avatars, uploaded images, camera capture for tools like the minifig scanner, filenames, file metadata, and generated thumbnails.
- Technical and usage data, including IP address, hashed request signals, user agent, device and browser information, cookie and local-storage identifiers, diagnostic logs, error records, security events, and approximate region inferred from requests.
- Commerce and support data, including affiliate click records, partner links opened, subscription support questions, payment-provider status information when paid features are enabled, and correspondence sent to Brickzip.
How we use your data
- Provide and maintain accounts, login, profiles, posts, catalog browsing, collections, bookmarks, chat, notifications, media hosting, search, language support, and app installation features.
- Review public contributions, moderate content, investigate reports, prevent spam, fraud, abuse, and security incidents, and enforce our Terms and Community Guidelines.
- Operate catalog imports, public JSON endpoints, product offers, affiliate links, advertising placements, analytics, performance monitoring, backups, and partner integrations when those features are enabled.
- Respond to support, privacy, copyright, legal, abuse, safety, partner, and account-deletion requests.
- Improve reliability, accessibility, localization, safety tooling, search quality, and product design.
Legal bases
Where EU, UK, or similar data-protection law applies, Brickzip processes personal data under the legal basis that fits the feature: contract when we provide the service you requested, legitimate interests when we operate and protect the platform, consent when required for optional storage or marketing, legal obligation when we must keep or disclose records, and vital or public-interest grounds where safety escalation is legally necessary.
Sharing and service providers
- We use service providers for hosting, database infrastructure, content delivery, media storage and image processing, authentication, email delivery, anti-abuse checks, analytics, advertising, affiliate attribution, payments when enabled, search, translation, and operational tooling.
- Public content, public profiles, catalog contributions, MOCs, events, public collections, public link pages, and public media may be visible to other users, visitors, search engines, app stores, and external services that index public pages.
- Affiliate and advertising partners may receive information needed for ad delivery, click attribution, conversion reporting, fraud prevention, and compliance when those features are enabled.
- We may disclose information if required by law, legal process, safety needs, abuse investigations, policy enforcement, rights protection, or a merger, acquisition, financing, reorganization, or sale of all or part of Brickzip.
- We do not sell personal and sensitive user data. We do not share personal data with third parties for their independent marketing unless you direct us to do so or applicable law allows it with the required notice or consent.
Data safety disclosures
- Account, contact, user content, app activity, app information and performance, device or other identifiers, and photos or files may be collected depending on the features you use.
- Personal data is transmitted over HTTPS and protected with access controls, encrypted token storage where used, role-based administrative access, rate limiting, anti-abuse systems, and operational monitoring.
- Optional camera or photo access is used only when you choose to upload media, change an avatar, attach images, or use scanner-style tools. Brickzip does not require continuous camera access.
- You can use core public browsing without an account, but posting, saving, following, messaging, cloud media, and account settings require account data.
Retention and deletion
- Account and profile data is kept while your account is active, then deleted or de-identified after account deletion unless retention is needed for security, legal, fraud-prevention, dispute, tax, audit, backup, or moderation reasons.
- Public posts, catalog contributions, MOCs, events, and public media may remain available after account deletion when needed to preserve community discussions, catalog integrity, or public references, but Brickzip will remove or de-identify account-level attribution where appropriate.
- Operational records are pruned under configured retention windows where practical, including completed background jobs, read notifications, affiliate clicks, price snapshots, anti-spam signals, webhook deliveries, and email logs.
- Backups and cached copies may persist for a limited period after deletion until rotation, restoration windows, or cache expiry complete.
- You can request account and data deletion at /data-deletion or by emailing [email protected] from the email address associated with your account.
Your choices and rights
- You can update profile details, avatar, public card settings, brand preferences, messaging preferences, and security settings in your account settings.
- You can request access, correction, deletion, restriction, portability, objection, or consent withdrawal when those rights apply to your jurisdiction.
- You can opt out of optional cookies or storage where consent controls are provided, and you can clear browser or app storage from your device settings.
- You may contact [email protected] to make a request. We may ask for information needed to verify your identity, protect the account, and understand the request.
- If you are in a region with a data-protection authority, you may complain to that authority if you believe your privacy rights were not handled properly.
Children and families
Brickzip is a general-audience service for brick fans and collectors. It is not directed to children under 13 or to children under the minimum digital-consent age in their country. Do not create an account or submit personal data if you are below the age allowed in your location without the consent required by law.
If you believe a child provided personal data to Brickzip without the required consent, contact [email protected] so we can review and remove the data where required.
International processing and changes
Brickzip and its service providers may process data in countries other than yours. Where required, Brickzip relies on appropriate legal safeguards, vendor commitments, and contractual controls for international transfers.
We may update this Privacy Policy when the product, legal requirements, app-store requirements, or our operating model changes. The effective date will show the latest version.