Privacy Policy

1. Who we are

MomentBricks is a community for LEGO enthusiasts. We value your privacy and protect your personal data in accordance with the GDPR.

2. What data do we collect?

📝 Data you give us:

• Account details: Name, email, age, gender, nickname
• Profile data: About me text, profile picture, preferences
• Content: Forum posts, comments, images, messages

🔍 Data we collect automatically:

• Technical data: IP address, browser type, device type
• Usage data: Pages visited, click data, session duration
• Cookies: Session ID, language choice, preferences

3. How we use your data

• ✅ Provide and maintain our service
• ✅ Communicate with you (notifications, messages)
• ✅ Improve the website and user experience
• ✅ Prevent spam, abuse and security issues
• ✅ Comply with legal obligations
• ❌ We NEVER sell your data to third parties

4. Cookies we use

🔒 Essential cookies (required):

• Session cookies: Keep you signed in
• Security: CSRF protection, anti-spam
• Preferences: Language choice, theme

⚙️ Functional cookies (optional):

• User settings: Remember your preferences
• Chat: SignalR connection for real-time chat

📊 Analytics cookies (optional):

• Statistics: Help us understand how the site is used
• Error reporting: Help us fix bugs

💰 Marketing cookies (optional):

• Currently: Not used on MomentBricks
• Later: Only if we add optional partner/ad links — we will update this policy then

5. Your rights under the GDPR

You have the right to:

• 📥 Access your data
• ✏️ Rectify incorrect data
• 🗑️ Erase your data (right to be forgotten)
• 📤 Download your data (data portability)
• 🚫 Object to processing of your data
• ⏸️ Restrict processing of your data

Manage my data Contact us about GDPR

6. How long we keep your data

• Active users: As long as your account is active
• Inactive users: 2 months of inactivity → warning email → deletion
• Deleted accounts: 30 days deactivation → permanent deletion
• Logs: Error logs deleted after 30 days
• Backup: Anonymised data may be kept in backups

7. Data security

We protect your data with:

• 🔐 HTTPS encryption on all pages
• 🔒 Password hashing (BCrypt)
• 🛡️ CSRF protection
• 🚫 SQL injection protection (Entity Framework)
• ⚠️ Rate limiting against spam and DDoS
• 📧 Email verification

8. Sharing with third parties

We do NOT share your personal data with third parties unless required to deliver our service:

• 🖥️ Hosting provider: Server infrastructure
• 📧 Email service: To send notifications

⚠️ Important: We never sell or rent your data to marketing companies!

9. Children's privacy

Our website is for LEGO fans of all ages. If you are under 15, you need parental permission before creating an account.

Parents may request to see or delete their child's data at any time by contacting us.

10. Changes to this privacy policy

We may update this privacy policy from time to time. For material changes we will notify you by email or a site notification.