Privacy policy

Who we are

Brickolio operates the service at brickolio.com. Questions or requests about this policy can be sent to privacy@brickolio.com.

Information we collect

We collect information you provide, information created as you use Brickolio, and limited technical information needed to run the service:

• Account information, including your email address and a securely hashed version of your password.
• Preferences, including your LEGO Store country and language, enabled vendors, and vendor priority.
• Content you add or import, such as wanted-list names, source links, part and color details, quantities, notes, and uploaded or pasted model data.
• Purchase-planning and order information, including selected parts, vendors, order status, received quantities, and temporary cart-transfer status and diagnostics. Brickolio does not collect payment-card details.
• Technical information, including essential session cookies and information normally recorded in server logs, such as IP address, browser type, requested pages, timestamps, and errors.
• Messages and account-email activity when you contact us, confirm your email address, or request a password reset.

How we use information

We use this information to:

• Create and secure your account, keep you signed in, and send password-reset messages.
• Provide wanted lists, imports, part search, purchase planning, cart handoffs, and order tracking.
• Show relevant vendor availability and pricing for your selected location and preferences.
• Maintain, troubleshoot, protect, and improve Brickolio, and prevent abuse.
• Comply with legal obligations and enforce our rights.

Where data-protection law requires a legal basis, we process information as needed to provide the service you request, for our legitimate interests in operating and securing Brickolio, to meet legal obligations, and with consent where we specifically ask for it.

When we share information

We disclose information only as needed to operate Brickolio, at your direction, or when the law requires it. Recipients may include:

• Infrastructure providers that host, store, deliver, secure, or monitor the service.
• Postmark, which processes your email address to deliver transactional account email, including email-confirmation and password-reset messages.
• LEGO Pick a Brick, BrickLink, Brick Owl, and Rebrickable when Brickolio requests part data, availability, or pricing. These requests may include part identifiers, colors, quantities, and your selected country or locale, but not your Brickolio password. Those services handle information under their own privacy policies.
• The Brickolio browser helper when you choose a guided cart or wanted-list transfer. The helper exchanges the selected part list and transfer progress with Brickolio and interacts with the vendor page using your existing browser session. Your vendor passwords and cookies are not sent to Brickolio.
• Professional advisers, authorities, or a successor to the service when reasonably necessary for legal compliance, safety, fraud prevention, or a merger, financing, or sale.

Brickolio does not sell personal information and does not use it for targeted advertising.

Cookies

Brickolio uses cookies and similar browser storage that are necessary for sign-in, security, and core features. We do not currently use advertising or third-party analytics cookies. Blocking essential cookies may prevent sign-in or other parts of the service from working.

How long we keep information

We keep account and workspace information while your account is active and for as long as reasonably needed to provide and secure the service. Temporary transfer records expire after a limited period. Server logs, backups, and records needed for security, fraud prevention, dispute resolution, or legal compliance may remain for a limited additional period. You may request account deletion using the contact details below.

Security

We use reasonable technical and organizational safeguards designed to protect personal information, including encrypted connections, hashed passwords, access controls, and secure session cookies in production. No service can guarantee absolute security.

International processing

Brickolio and its service providers may process information in countries other than the one where you live. Where required, we use appropriate safeguards for international transfers.

Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of your personal information, object to certain processing, or withdraw consent. You may also have the right to complain to your local data-protection authority. To make a request, email privacy@brickolio.com. We may need to verify your identity before completing it.

Children's privacy

Brickolio is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided personal information, contact us so we can delete it.

Changes to this policy

We may update this policy as Brickolio changes. We will post the revised policy here, change the effective date, and provide additional notice when required by law.

Contact

For privacy questions or requests, email privacy@brickolio.com.