Privacy policy

LastChanceBricks is an editorial project about LEGO sets in a test phase. This page explains what data we process, why, and how to ask to see, correct or delete it. For any privacy question, write to avisos@lastchancebricks.com.

What data we process and why

Account

If you sign up we store your email, your encrypted password (never in plain text), whether you have verified your email, and your sign-up and last login dates. If you sign in with Google, we also store your Google account identifier. We use this to give you access to your dashboard.

Collection, follows and alerts

If you use them, we store the sets you follow, whether you want price-drop alerts and your collection (quantity, condition, location, purchase price and date, and notes). They are private: only you can see them. To know how many people use each feature we count events per day, without storing who triggered them.

If you link the Telegram bot, we store your Telegram user identifier and the sets you follow there, to send you the alerts.

If you subscribe we store your email, the subscription status, where you subscribed from and the sign-up, confirmation and unsubscribe dates. There is double opt-in by email and every email includes an unsubscribe link.

Visits and purchase clicks

On each visit we record your IP address, your browser and device (user-agent), the page, the referring page and campaign parameters (utm). When you click a purchase link we also record the set and the shop. We use this to measure usage, detect bots and click fraud and check that purchase links work. We do not use it to build profiles or for advertising.

Google Analytics

It only loads if you accept it in the cookie notice, and with the IP anonymised. If you do not accept it, nothing from Google Analytics is loaded.

Cookies and local storage

lcb_sess: keeps you signed in (30 days). Only if you sign in.
lcb_oauth: protects Google sign-in (10 minutes).
lcb_hp: anti-bot check on purchase links (15 minutes).
lcb_idioma: remembers the language you chose (1 year).
lcb-consent (browser local storage): remembers your answer to the cookie notice.
Google Analytics cookies: only if you accept them.

Legal basis

The account, collection, follows and Telegram are based on providing the service you ask for. The newsletter and Google Analytics are based on your consent, which you can withdraw at any time. Visits and clicks are based on our legitimate interest in keeping the website working, secure and free of fraud.

Who we share it with

We do not sell data or pass your email to shops. These providers are involved: Google (Google sign-in and, if you accept it, Analytics), Telegram (if you use the bot), Resend (sending emails) and our hosting provider. When you click a purchase link you go to the shop (Amazon, LEGO.com or others), which processes your visit under its own policy.

How long

The account, collection and follows, until you ask us to delete them. Sessions expire after 30 days. The newsletter, until you unsubscribe; we keep the fact that you unsubscribed so we do not email you again. Visits and clicks, for as long as they are needed for statistics and security.

Your rights

You can request access, rectification, erasure, objection, restriction or portability of your data by writing to avisos@lastchancebricks.com from the email of your account or subscription. For the newsletter, the unsubscribe link in each email is enough. If you think we have not handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es).

Changes

If we start processing new data, we will update this page before doing so.