Elemodo Bricks is a LEGO® collection tracker built and operated by Elemodo. This policy explains what we collect when you use Elemodo Bricks at https://bricks.elemodo.com and in the Elemodo Bricks app, why we collect it, and what control you have over it.

We are an independent tool. We are not affiliated with, endorsed by, or sponsored by the LEGO Group.

The short version

We collect the account details you give us and the collection data you enter. We use them to run the product. We do not sell your personal information, we do not run advertising, and we do not share your collection with anyone you have not invited to it.

Information you give us

• Account details. Your name and email address, and a password stored only as a one-way hash. You may optionally add a phone number and a profile photo.
• Your collection. The LEGO sets you record, and for each one: quantity, condition, the dates you bought, opened, or built it, what you paid, and any notes you write.
• Photos. Any pictures you upload of your sets or your collection. These are stored in private cloud storage and are served only to people who are members of that collection.
• Receipts. If you import a purchase receipt, the PDF is read to extract set numbers, dates, and prices, and is then discarded. We do not keep the file.
• People you invite. If you invite someone to a collection, we store the email address you supply in order to send that invitation.

Information collected automatically

• Device and session information. A device identifier we generate, plus operating system, browser, timezone, and language. This is used to keep you signed in across devices, to show you your active sessions, and to spot suspicious sign-ins.
• Server logs. Standard web server records including IP address, request time, and pages accessed. Used for security, debugging, and abuse prevention.
• Error reports. When something breaks, technical details of the failure are sent to our error monitoring provider so we can fix it.

How we use it

• To operate your account and show you your collection
• To look up set details and current market values from third-party LEGO data sources
• To share a collection with the people you invite to it
• To send you service email such as verification, password resets, and collection invitations
• To secure the service, prevent abuse, and diagnose faults
• To process payment if you subscribe to a paid plan

We do not use your collection data to advertise to you, and we do not sell it.

Third parties we share data with

We use a small number of processors to run the service. Each one receives only what it needs:

• Rebrickable — receives the LEGO set numbers you look up, so we can retrieve catalog details and images. It does not receive your identity or your collection.
• BrickEconomy — receives the LEGO set numbers we price, so we can retrieve current market values. It does not receive your identity or your collection.
• Amazon Web Services — hosts the service, stores your photos in private storage, and delivers our email.
• Fathom Analytics — privacy-focused, cookieless website analytics. It does not build profiles of individuals across sites.
• Honeybadger — receives error reports so faults can be diagnosed.
• Stripe — if and when you subscribe, Stripe processes your payment. Card details go to Stripe directly; we never see or store them.

We may also disclose information where we are legally required to, or where it is necessary to protect the rights or safety of our users.

Cookies

We use cookies that are necessary to keep you signed in and to protect against cross-site request forgery. We do not use advertising or cross-site tracking cookies. Our analytics provider is cookieless.

Sharing a collection

A collection can have more than one member. Anyone you invite as a member can see the sets in that collection, including quantities, conditions, dates, prices you have recorded, notes, and photos. Members you make an administrator can also edit those things and manage who else has access. Only administrators can see the email addresses of other members. Remove someone from a collection and their access ends immediately.

Data retention

We keep your data for as long as your account is open. Backups are retained for up to sixty days, so deleted content may persist in a backup for that period before ageing out.

Your rights and choices

You can review and correct your account details and your collection at any time in the app. You can disable your account from Settings, which removes it from use and schedules its data for deletion.

Depending on where you live, you may also have the right to request a copy of your personal data, to have it corrected or erased, to restrict or object to how we process it, and to receive it in a portable form. Residents of California have the right to know what personal information we collect, to have it deleted, and to direct us not to sell it (we do not sell it). To exercise any of these rights, contact us using the details below. We will respond within one month.

Children

Elemodo Bricks is not directed at children under 13 and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

International users

Our service is operated in the United States, and your information is stored and processed there. If you use Elemodo Bricks from elsewhere, you are transferring your information to the United States.

Changes to this policy

If we change this policy we will update the date at the top of this page. Material changes will also be communicated in the app.

Contact

Questions about this policy, or about your data, can be sent to support@elemodo.com. If you have an account, you can also reach us from the Settings screen in the app.