Privacy Policy

This policy explains what Bricking It collects, why we collect it, and what rights you have over it. We keep things minimal — we're a small team and we're not in the data business.

Who we are

Bricking It is run by February House Ltd, a company registered in England and Wales (company number 17142357), registered office Unit A, 82 James Carter Road, Mildenhall, United Kingdom, IP28 7DE. "Bricking It", "we", "us" refers to February House Ltd. February House Ltd is the data controller for your personal data and is registered with the Information Commissioner's Office. You can reach us via the contact form, or for privacy and legal matters at legal@bricking-it.com.

What we collect

If you use guest mode

Nothing leaves your browser. Your collection, audit progress, missing list and loose pieces are stored in your device's local storage and aren't sent to us.

If you create an account

• Email address — to sign you in.
• Display name and custom slug (optional) — for public sharing only if you choose to enable it.
• Your collection data — sets you've added, audit progress, missing lists, custom set images you upload.
• Basic authentication metadata — last sign-in time, account creation date.

If you contact us

We keep the message, your name (if provided), and the email you reply to — long enough to answer you and for a short period after to refer back to it if you message again.

If you use piece-photo search ("Scan a piece")

When you photograph a piece to identify it, the photo is sent to our own recognition service to suggest matches. That service normally runs on our own server; if it's unavailable, the same service runs on Google Cloud (in the EU) instead, which processes the photo but doesn't keep it. If our service isn't confident about a match, the photo is also sent automatically to Brickognize, a third-party identification service, for a second opinion, and their privacy policy applies to that request. When you confirm a match, we keep the photo together with the piece you confirmed and may use it to improve our recognition of that piece. Photos are reviewed by a human before being used this way, aren't linked to your public profile, and contain only what you photographed — please keep other people and personal items out of frame. Photos you don't confirm are not kept.

Analytics (only with your consent)

If you accept cookies, we use Google Analytics 4 to understand how the site is used (which pages are visited, in aggregate). GA4 is configured without advertising features. If you decline, we don't load GA4 at all.

Why we collect it

• To make the app work (your collection is yours, we have to store it somewhere).
• To secure your account.
• To understand how the site is being used in aggregate, so we can improve it — only with your consent.
• To reply when you contact us.

We don't sell your data. We don't build advertising profiles. We don't share it with third parties beyond the service providers listed below.

Where it's stored

• Supabase (database + authentication) — EU region.
• Vercel (website hosting).
• Cloudflare (DNS, security, edge caching).
• Resend (sending transactional emails like contact-form replies).
• Google Cloud (piece-photo recognition when our own server is unavailable) — EU region; photos aren't stored.
• Brickognize (second-opinion piece identification, only when our own recognition isn't confident).
• Google Analytics (only if you consent to cookies).

If Bricking It changes hands

If Bricking It, or the business of February House Ltd, is sold, merged or otherwise transferred, your account and the data described here may pass to the new owner so the service can carry on. The new owner would have to keep using it in line with this policy. We'll tell you before it happens, so you can ask for a copy of your data or delete your account first if you'd rather.

Cookies

Bricking It itself doesn't use tracking cookies. We use local storage to remember your preferences and (if signed in) your auth session.

If you accept cookies via the banner, Google Analytics sets its own analytics cookies. You can change your choice at any time from your Profile page.

Your rights

Under UK GDPR you have the right to:

• Know what personal data we hold about you (subject access request).
• Ask us to correct it if it's wrong.
• Ask us to delete it.
• Object to processing, or withdraw consent.
• Complain to the Information Commissioner's Office (ico.org.uk).

Contact us via the contact form to exercise any of these.

Retention

Your account data is kept while your account is active. If you ask us to delete your account we remove everything within 30 days. Contact-form messages are kept for up to 12 months.

Children

Bricking It is not directed at children under 13. If you believe a child has signed up, contact us and we'll remove the account.

Changes to this policy

If we change anything material, we'll update the "Last updated" date at the top and, where appropriate, let you know by email or in-app notice.