Privacy Policy

1. Who is responsible for your data

The operator named in the Impressum is responsible for the personal data described here. RateBricks is operated from Switzerland; we process personal data in line with the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR). For privacy questions or requests, contact privacy@ratebricks.com.

2. Data we collect

• Account data such as your email address, username, display name, and authentication provider.
• Profile data you choose to publish, including your biography, avatar, country, website, collection visibility, and wishlist visibility.
• Content and activity you submit, including ratings, reviews, reactions, reports, collection entries, wishlist entries, build logs, follows, and similar-set votes.
• Brick-Off votes, linked to your account when signed in or to a random guest identifier when you vote without an account.
• Technical request data needed to protect and operate the service, such as short-lived rate-limit keys and security logs handled by our infrastructure providers.

3. How we use data

• To provide accounts, authentication, profiles, ratings, reviews, collections, and community features.
• To show regional purchase links when you choose a country or allow approximate country detection.
• To prevent abuse, investigate reports, moderate content, and keep the service secure.
• To respond to support, privacy, and legal requests.

We use privacy-friendly Vercel Web Analytics to understand aggregate page views and traffic patterns. We do not sell personal data and we do not use advertising or analytics cookies.

4. Legal bases and retention

We process account and community data to provide the service you request, to fulfil our legitimate interest in operating a safe community, and where necessary to comply with legal obligations. We retain account data while your account is active. Published community content may remain visible until you delete it or it is removed under the moderation rules. Reports and moderation decisions may be retained for a limited period to detect repeat abuse and document decisions.

5. Cookies and local storage

Essential Supabase session cookies are used when you sign in. When you vote in Brick-Off, the essential cookie brick_off_guest stores a random, signed identifier for up to one year so that each visitor's votes are counted once. It does not contain your name, email address, or IP address. The cookie named ratebricks_cookie_consent stores your consent choice and ratebricks_cookie_consent_version records which consent text was shown. After you accept preference cookies, locale stores your language, country stores an approximate country detected from the hosting request, and country_pref stores a country you select manually. You can change this choice at any time with the Cookie settings link in the footer.

Country detection uses a country header supplied by Vercel's infrastructure. RateBricks does not store your full IP address and does not send it to advertisers.

6. Service providers

• Supabase provides authentication, database, and storage infrastructure.
• Vercel provides hosting, edge infrastructure, and privacy-friendly Web Analytics, including the country signal used for regional links.
• Resend may deliver account emails such as verification and password-reset messages when configured.
• Retailers receive information you choose to provide when you follow a purchase link; their own privacy policies apply.

7. Transfers abroad

Some service providers may process data outside Switzerland, including in the European Union and the United States. Where a destination country does not offer adequate data protection, we rely on safeguards recognised under Swiss and EU law, such as standard contractual clauses.

8. Your rights and account deletion

Depending on where you live, you may have rights to access, correct, export, restrict, object to, or delete your personal data. You can edit your profile in Settings and permanently delete your account there. Account deletion removes your authentication account and associated profile, ratings, reviews, reports, reactions, collection, wishlist, follows, activities, and build logs. User-created catalogue links and tags are deleted as well. Contact privacy@ratebricks.com if you cannot access Settings or want to make a privacy request. You may also lodge a complaint with a data protection authority, in Switzerland the Federal Data Protection and Information Commissioner (FDPIC).

9. Updates

We may update this policy when the service, providers, or legal requirements change. The latest version and its effective date are published on this page.