Privacy Policy

BrickCircle is a local, in-person LEGO set exchange community. This policy explains what information we collect, why we use it, and the choices available to you.

1. Information we collect

We collect information you provide when you create and use a BrickCircle account, including your name or display name, email address, country, city, profile information, LEGO collection and wishlist details, exchange preferences, exchange requests, messages, reviews, and other information you choose to submit.

We also collect limited technical and usage information needed to operate and improve the service, such as browser/device information, authentication/session data, timestamps, error and performance information, and product analytics. We do not ask for precise GPS location for the current local-matching experience; matching is based on the city and country you provide.

2. How we use information

• To create and secure your account.
• To show your collection, wishlist, local reciprocal matches, exchange requests, and exchange history.
• To help members communicate and coordinate safe local exchanges.
• To deliver in-app notifications and, where separately enabled by you, browser/device notifications.
• To prevent abuse, investigate security issues, enforce our Terms of Use, and protect members.
• To understand service performance and improve BrickCircle.

3. Information visible to other members

Some profile and marketplace information is designed to be visible to other BrickCircle members so the community can function. This may include your display name, city, country, profile image, ratings or trust indicators, LEGO sets you make available for exchange, wishlist items, and information needed for an exchange. If you sign in through an identity provider that supplies a profile image, BrickCircle may display that provider-hosted image until you upload a BrickCircle profile photo; loading it may contact that provider. Do not place sensitive personal information in public profile fields, listings, or messages.

4. Service providers

BrickCircle uses third-party infrastructure and service providers to operate the site, including hosting, database/authentication, analytics, image delivery, and related technical services. These providers process information only as needed to provide their services to BrickCircle and are subject to their own security and privacy commitments.

Our current technical stack includes services such as Supabase for database/authentication and Vercel for hosting/deployment. We may change providers as the service evolves.

5. Cookies, local storage and analytics

BrickCircle may use cookies, browser storage, service-worker caches, and similar technologies to keep you signed in, remember preferences, support app functionality, measure usage, and improve performance. Some analytics may be provided by third-party analytics services. You can control certain browser storage and cookie settings through your browser, although disabling them may affect functionality.

6. Notifications

BrickCircle stores durable in-app notifications for events such as exchange proposals. If browser/device push notifications are offered and you choose to enable them, your browser will request permission and a device-specific push subscription may be stored so notifications can be delivered. You can disable push notifications at any time through your browser or device settings.

7. Data retention

We retain information for as long as reasonably necessary to operate BrickCircle, maintain account and exchange history, resolve disputes, prevent fraud or abuse, meet legal obligations, and enforce our agreements. Retention periods may differ depending on the type of information and the reason it is held.

8. Security

We use reasonable technical and organisational safeguards designed to protect information, including authenticated access and database access controls. No online service can guarantee absolute security. You are responsible for keeping your login credentials secure and for promptly reporting suspected unauthorised access.

9. Your choices and rights

You may update much of your profile information from your BrickCircle account. Depending on applicable law, you may also have rights to request access, correction, deletion, restriction, portability, or other action concerning your personal information. Some information may need to be retained where required for security, legal compliance, fraud prevention, or legitimate record-keeping.

10. Children

BrickCircle is intended for adult collectors and is not directed to children. You must be at least 18 years old to create an account or participate in exchanges unless BrickCircle expressly introduces a supervised minor-account program in the future.

11. International use

BrickCircle may be accessed from multiple countries. Information may be processed in countries other than your own through our infrastructure providers. Where required, we will take reasonable steps to handle information in accordance with applicable data-protection laws.

12. Legal disclosures

We may disclose information where reasonably necessary to comply with law, court orders, lawful government requests, protect rights or safety, investigate misuse, or enforce our agreements. If BrickCircle undergoes a merger, acquisition, financing, restructuring, or sale of assets, information may be transferred as part of that transaction subject to applicable law.

13. Changes to this policy

We may update this Privacy Policy as BrickCircle evolves. Material changes will be reflected by updating the date above and, where appropriate, providing additional notice in the service.

14. Contact

For privacy questions, data-rights requests, or suspected unauthorised access, email support@brickcircle.club. Please do not send passwords, identity documents, or other highly sensitive information through ordinary email unless specifically requested through a secure process.