Datenschutzerklärung

Last updated: 1 September 2026 · Operator: Codiro, the Netherlands ("we", "us") · Contact: [email protected]

1. Who we are

BrickTracker (bricktracker.eu) is a LEGO® price-comparison service operated by Codiro, based in the Netherlands. This policy explains what personal data we process, why, and what rights you have under the EU General Data Protection Regulation (GDPR).

2. What data we collect

• Account data. If you create an account we store your name, email address and a hashed password (or your Google account identifier if you sign in with Google). We use your email address to secure your account and to send the price alerts you asked for.
• Preferences. Your chosen language, country and notification settings, so the site shows relevant shops and prices.
• Watchlist & portfolio. The sets you track and the collection details you enter (quantities, purchase prices, notes). These are only used to provide those features to you.
• Usage data. Basic technical logs (IP address, browser, pages visited) for security, abuse prevention and debugging, plus aggregated, privacy-friendly analytics (see the Cookie Policy).
• Outbound clicks. When you click through to a shop we record which offer was clicked. This measures which shops and deals are useful and supports our affiliate model. Affiliate networks may know a visit came from BrickTracker; we never sell your personal data.

3. Why we process it (legal bases)

• Contract: operating your account, watchlist, portfolio and the alerts you set up.
• Legitimate interest: security logging, fraud prevention, aggregated analytics and measuring outbound clicks.
• Consent: optional communications and any non-essential cookies, where applicable.

4. Sharing

We do not sell personal data. We share data only with processors needed to run the service (hosting, email delivery, privacy-friendly analytics) under GDPR-compliant agreements, or when the law requires it. Outbound shop links may contain an affiliate tag; the shop then processes your visit under its own privacy policy.

5. Retention

Account data is kept while your account exists. Technical logs are kept briefly (typically no longer than 12 months). Aggregated statistics contain no personal data and may be kept longer.

6. Your rights

You can access, correct, export or delete your data at any time. You can delete your account yourself via Settings → Danger zone; this permanently removes your account, watchlist, alerts and portfolio. For anything else — access requests, objections, complaints — email [email protected]. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

7. Security

Passwords are stored hashed, traffic is encrypted (HTTPS) and access to production data is restricted. No system is perfectly secure; report suspected issues to the address above.