Privacy Policy

1. Who is responsible for your data?

BrickTracker.eu is part of Codiro BV. Codiro BV is the controller for personal data processed through BrickTracker, unless another party clearly acts as the controller for its own service, such as a third-party shop you visit through a link.

This policy applies to BrickTracker.eu and related BrickTracker account, wishlist, collection, alert and comparison features.

2. Personal data we may process

Depending on how you use BrickTracker, we may process the following categories of personal data:

• Account data: name, email address, password hash, account settings, language and country preferences.
• Collection and wishlist data: saved sets, owned quantities, wanted sets, price alerts, notes and preferences you add.
• Communication data: messages you send us, support requests, email preferences and replies.
• Technical data: IP address, device/browser information, logs, session data, security events and approximate location derived from IP address.
• Usage data: pages viewed, searches, clicks, alert interactions, shop click-outs and feature usage.
• Cookie data: consent choices, analytics identifiers and similar technologies as explained in our Cookie Policy.

3. Why we process personal data

We process personal data to provide, secure and improve BrickTracker. This includes:

• creating and managing user accounts;
• saving collections, wishlists, country preferences and price alerts;
• sending account, security, service and alert emails;
• showing relevant prices, shops, currencies and country-specific information;
• measuring website performance, fixing bugs and improving the user experience;
• preventing abuse, spam, scraping, fraud and security incidents;
• responding to questions, complaints and legal requests;
• complying with legal obligations.

4. Legal bases under the GDPR

We rely on different legal bases depending on the processing activity:

• Contract: to provide account features, saved preferences, wishlists, collections and alerts you request.
• Legitimate interests: to secure the platform, prevent misuse, improve BrickTracker, measure basic service performance and respond to non-marketing messages.
• Consent: for optional cookies, analytics, marketing emails or similar processing where consent is required.
• Legal obligation: where we must keep or disclose information to comply with applicable law.

You can withdraw consent at any time where processing is based on consent. Withdrawal does not affect processing that happened before withdrawal.

5. Sharing personal data

We do not sell personal data. We may share personal data with carefully selected service providers where needed to run BrickTracker, such as hosting providers, email delivery providers, analytics providers, security tools and support systems.

When you click a shop link, you leave BrickTracker and the relevant shop may receive technical information from your browser and process data under its own privacy policy. BrickTracker is not responsible for how third-party shops process your data.

We may disclose information if required by law, court order, regulator request or to protect our rights, users, systems or the public.

6. How long we keep data

We keep personal data only as long as necessary for the purposes described in this policy, unless a longer period is required by law or needed to resolve disputes, enforce agreements or protect our systems.

• Account data is kept while your account exists.
• Collection, wishlist and alert data is kept while you keep those features active or until you delete it.
• Support messages are kept as long as needed to handle the request and maintain reasonable records.
• Security and technical logs are generally kept for a limited period unless needed for investigation or legal reasons.
• Cookie retention periods are described in our Cookie Policy or cookie banner where applicable.

7. Your privacy rights

Depending on your location and the situation, you may have the right to request access, correction, deletion, restriction, portability or objection to processing of your personal data. You may also withdraw consent where processing is based on consent.

You can send a privacy request to [email protected]. We may ask for information needed to verify your identity before handling the request.

If you believe we did not handle your request properly, you can lodge a complaint with your local data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens.

8. Security

We use technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse and alteration. No online service can be guaranteed completely secure, so you should also protect your account by using a strong password and keeping your login details confidential.

9. Children

BrickTracker is intended for general audiences and collectors. If you are under the age required by privacy law in your country to create an online account or give consent, you should use BrickTracker only with permission from a parent or guardian.

10. Changes to this policy

We may update this Privacy Policy when BrickTracker changes, when our processing changes or when legal requirements change. The updated version will be posted on this page with a new “last updated” date.

11. Contact

Questions or requests about privacy can be sent to BrickTracker.