Privacy Policy

Last updated: June 4, 2026

1. Who We Are

BrickMarket (brickmarket.co) is operated by Tarchick Services LLC, an independent LEGO community platform. We are not affiliated with the LEGO Group. For privacy questions or requests, contact us at TarchickservicesLLC@gmail.com. We will respond within 30 days.

2. What Data We Collect

Account information: Email address, username, full name, and password (stored as a secure hash — never in plain text) when you create an account.

Profile information: Optional details you choose to add, such as bio, location, phone number, and collector type.

Payment information: Payment is processed entirely by Stripe. We never store, see, or have access to your credit card number or full payment details. We only receive a Stripe customer ID and subscription status.

Usage data: Pages visited, features used, sets searched, and time spent on the platform. This helps us improve BrickMarket.

Transaction data: Marketplace listings, purchases, and trade activity associated with your account.

Portfolio and flip data: Sets you add to your portfolio or log as flips. This data is private to your account by default.

IP address and general location: Collected automatically when you use the platform, used for security and fraud prevention.

Cookies: See Section 7 and our Cookie Policy.

3. How We Use Your Data

To create and manage your account
To provide the BrickMarket subscription service
To send transactional emails (deal alerts, marketplace notifications, trade updates)
To process subscription payments via Stripe
To improve platform features and fix bugs
To enforce our Terms of Service and prevent fraud
To comply with applicable laws and regulations

We do not sell your personal data to third parties. Ever.

4. Data Storage and Security

Your data is stored securely using industry-standard encryption. Authentication and database hosting is provided by Supabase, which uses industry-standard security practices. Payment data is handled entirely by Stripe and is never stored on our servers. We retain your data for as long as your account is active, plus 2 years after account closure, except where a longer retention period is required by law.

5. Third-Party Services

We use the following third-party services, each governed by their own privacy policies:

Supabase — database and authentication hosting. No user data is sold by Supabase.
Stripe — payment processing. We never store card numbers. Stripe may set cookies for fraud prevention.
Resend — transactional email delivery (deal alerts, account emails).
Anthropic (Claude AI) — powers Set Score, Photo Valuation, and Budget Builder. Inputs you submit to these features may be processed by Anthropic per their API terms. We do not send personally identifiable information to Anthropic.
Vercel — website hosting and deployment.
BrickLink / eBay — market data sources. We query publicly available data only. No user data is shared with BrickLink or eBay.

6. Your Rights

Depending on your location, you have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you.
Correction: Update inaccurate data at any time from your Settings page.
Deletion: Request deletion of your account and all associated personal data. We will process deletion requests within 30 days.
Portability: Request your data in a portable, machine-readable format.
Opt-out of marketing: Unsubscribe from marketing emails at any time using the unsubscribe link in any email. Transactional emails (security, billing) cannot be opted out of while your account is active.

California residents (CCPA): We do not sell personal information. You have the right to know what data we collect, the right to request deletion, and the right to opt out of any data sale (we do not sell data).

EU/UK residents (GDPR): You have the rights listed above, plus the right to data portability, the right to object to processing, and the right to lodge a complaint with your local supervisory authority. Our lawful basis for processing is contract performance (to provide the service) and legitimate interests (to improve and secure the platform).

To exercise any of these rights, email TarchickservicesLLC@gmail.com. We will respond within 30 days.

7. Cookies

Essential cookies: Required for authentication and keeping you logged in. Cannot be disabled without breaking the Service.

Analytics cookies: Optional. Used to understand how the platform is used so we can improve it. Only set after you give consent via the cookie banner on your first visit.

Preference cookies: Store your cookie consent choice and UI preferences.

You can manage cookie preferences at any time from your browser settings. See our full Cookie Policy.

8. Email Communications

When you create an account you may receive:

Transactional emails: account confirmation, billing receipts, deal alerts you've opted into
Platform notifications: marketplace activity, trade matches, price alerts

Every marketing or non-essential email includes an unsubscribe link that works immediately, as required by CAN-SPAM law. You can also manage email preferences from your Settings page.

9. Children's Privacy

BrickMarket is intended for users 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us data, contact us immediately at TarchickservicesLLC@gmail.com and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or an in-app notice before the changes take effect. Continued use of the Service after changes constitutes acceptance of the updated Policy.

11. Contact

Privacy questions or data requests:

Tarchick Services LLC
220 Rope Mill Parkway
Woodstock, Georgia 30188
Email: TarchickservicesLLC@gmail.com

We will respond to all privacy requests within 30 days.