← Back to BrickForever

Privacy Policy

Last updated: January 28, 2026

BrickForever ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our LEGO set borrowing service in Seattle, Washington.

1. Information We Collect

Personal Information

When you create an account, we collect:

  • Name: To identify you and personalize your experience
  • Email address: For account verification, communications, and notifications
  • Phone number: For pickup coordination and important notifications
  • Password: Stored securely (hashed) for account access

Transaction Information

When you borrow sets, we collect:

  • Borrowing history (which sets, dates, return status)
  • Deposit and fee payment records
  • Communication history with our team

Automatically Collected Information

When you visit our website, we may automatically collect:

  • Browser type and version
  • Device information
  • IP address
  • Pages visited and time spent
  • Referring website

2. How We Use Your Information

We use your information to:

  • Create and manage your account
  • Process borrowing reservations and returns
  • Send confirmation emails and reminders
  • Communicate about your account, due dates, and service updates
  • Process membership payments and deposits
  • Improve our service and user experience
  • Prevent fraud and enforce our Terms of Service
  • Respond to your inquiries and support requests
  • Send occasional marketing communications (with your consent)

3. Information Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

  • Service Providers: With trusted third parties who help us operate our service (e.g., email delivery, payment processing), bound by confidentiality agreements
  • Legal Requirements: When required by law, court order, or government request
  • Safety: To protect the rights, property, or safety of BrickForever, our users, or the public
  • Business Transfer: In connection with a merger, acquisition, or sale of assets, with notice to you

4. Third-Party Services

We use the following third-party services:

Supabase

Database hosting and authentication. Your data is stored securely with encryption.

Resend

Email delivery service for confirmations, reminders, and notifications.

Vercel

Website hosting and deployment platform.

Venmo

Payment processing for deposits and membership fees. We do not store your Venmo credentials or financial information.

5. Data Security

We implement appropriate security measures to protect your information:

  • Encrypted data transmission (HTTPS/TLS)
  • Secure password hashing
  • Access controls and authentication
  • Regular security updates
  • Secure database hosting with encryption at rest

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as:

  • Your account is active
  • Needed to provide our services
  • Required by law or for legitimate business purposes
  • Necessary to resolve disputes or enforce agreements

After account deletion, we may retain anonymized data for analytics and service improvement.

7. Your Rights

You have the right to:

  • Access: Request a copy of your personal information
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your account and data
  • Portability: Receive your data in a portable format
  • Opt-out: Unsubscribe from marketing emails
  • Withdraw consent: Where processing is based on consent

To exercise these rights, contact us at contact@brickforever.com.

8. Cookies and Local Storage

We use cookies and local storage for:

  • Essential cookies: For authentication and security
  • Local storage: To save your cart items before you sign up
  • Preference cookies: To remember your settings

We do not use tracking or advertising cookies. You can disable cookies in your browser, but some features may not work properly.

9. Children's Privacy

BrickForever is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information we collect
  • Right to delete your personal information
  • Right to opt-out of the sale of personal information (we do not sell your data)
  • Right to non-discrimination for exercising your rights

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through our service. Your continued use of BrickForever after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: contact@brickforever.com

Location: 2533 31st Ave S, Seattle, WA 98144

By using BrickForever, you acknowledge that you have read and understood this Privacy Policy.