rivacy Policy — Last updated: 17 July 2026

This policy explains what personal data Brick Loupe processes, why, and the rights you have. Brick Loupe is operated from Germany and follows the EU General Data Protection Regulation (GDPR). Questions? Email support@brickloupe.com.

1. Who is responsible — The data controller is the individual operator of the service, reachable at support@brickloupe.com. A full postal address is available on request.
2. What we collect

Images you scan and the minifigure crops derived from them. When you scan, the image is sent to our backend to detect, identify, and price the figures. We retain the individual minifigure crops. We retain the whole image only when you supplied the file yourself — a photo you took, or a file you chose from your device. If you scanned an image you found on a web page, we do not keep that image.
Account data. If you sign in with Google, we receive your email address and basic profile info, used to hold your collection and enforce scan limits. We do not receive your Google password.
Technical data. Server logs may record your IP address, request time, and a device identifier, used to run the service, apply usage limits, and prevent abuse.
3. Why we process it (legal bases) — To provide the service you request (identifying and pricing figures, saving your collection); your consent (by scanning an image you consent to it being stored and used to improve our identification technology, including training machine-learning models, as described in our Terms — withdrawable by requesting deletion); and our legitimate interests (security, preventing abuse, improvement).

1. Storage, location & retention — Account data, collections, and the minifigure crops are stored using Supabase on servers in the European Union. The application backend runs on a server in the EU (Finland). We keep your data for as long as your account/collection is active or as needed to run the service; you can request deletion at any time. Whole images are treated differently from crops: we keep the crops of the figures we find, which is what improves our identification models. We keep the whole image only when you supplied the file yourself. When you scan an image from a web page, that photograph is used to produce the crops and is then discarded rather than stored, because it is usually somebody else's photograph and not ours to keep.
2. Who we share it with — We do not sell your personal data. We share data only with processors acting on our behalf: Supabase (authentication, database, image storage); Brickognize (receives the minifigure crops to identify them); BrickLink (queried for price data by figure ID, not your personal data); Google (sign-in, if you choose it); Hetzner, EU (hosting).
3. Your rights — Under the GDPR you may access the data we hold about you, have inaccurate data corrected, have your data erased, receive it in a portable format, object to or restrict processing, withdraw consent at any time, and lodge a complaint with your local data protection authority. To exercise any of these — including deleting your account, collection, or uploaded images — email support@brickloupe.com.
4. Browser storage — The extension stores a login session and your theme/settings in your browser's local storage so it can keep you signed in and remember preferences. This stays on your device and is not a tracking cookie.
5. Children — Brick Loupe is not directed at children under 16, and we do not knowingly collect their personal data.
6. Changes — We may update this policy; the "last updated" date above reflects the current version.
7. Contact — support@brickloupe.com