Legal
Privacy Policy
Last updated: June 6, 2026
LegoFuture(“we,” “us,” “our”) provides educational market-analysis tools for LEGO sets at bricksfuture.com (the “Service”). This policy explains what data we collect, how we use it, who we share it with, and your rights.
1.Who this policy covers
This policy applies to all visitors to bricksfuture.com. The Service does not require an account and is designed to collect as little personal data as possible.
2.Data we collect
We collect only what is necessary to operate the Service:
- Server logs. When you visit a page, our hosting provider automatically records standard request metadata: IP address, user-agent string, referring URL, requested path, response status, and timestamp. These logs are used for security, debugging, and traffic-pattern analysis.
- Contact-form submissions. If you send us a message, we collect the name, email address, subject, and message body you provide.
- Affiliate click metadata. When you click an eBay affiliate link, eBay records that the click originated from LegoFuture for commission tracking. We do not see your eBay activity.
We do not currently use analytics scripts, advertising trackers, social-media pixels, or third-party fingerprinting on the Service.
3.What we do not collect
We do not require accounts and do not store passwords. We do not request location data, contacts, or device permissions. We do not collect payment information (we do not sell anything directly). We do not knowingly collect data from children under 13.
4.How we use your data
We use the limited data we collect to:
- operate, secure, and improve the Service;
- respond to contact-form messages;
- detect and prevent abuse, fraud, or attacks;
- comply with legal obligations.
We do not use your data for advertising, profiling, or automated decisions that produce legal effects about you.
5.Legal bases (GDPR / UK GDPR)
If you are in the European Economic Area, United Kingdom, or another jurisdiction with similar law, we process personal data under the following legal bases: legitimate interests (operating and securing the Service, responding to inquiries), consent (where you voluntarily submit a contact-form message), and legal obligation (where required to comply with law).
6.Third parties
The Service relies on the following third parties. Each has its own privacy policy that you should review:
- Hosting and CDN: processes requests and logs as described above.
- PriceCharting, BrickLink, Rebrickable, Brick Insights, Google Trends, Reddit: read-only public-data sources we fetch from to build forecasts and signals. They do not receive any personal data about you from us.
- eBay Partner Network: when you click an outbound eBay link, eBay tracks the click for affiliate-commission purposes.
7.Cookies and similar technologies
We use only strictly necessary first-party cookies required for basic Service operation (for example, remembering a one-time dismissal of a disclaimer banner). We do not use analytics cookies, advertising cookies, or third-party tracking cookies. Because no non-essential cookies are used, no cookie consent banner is shown.
8.Data sharing and sale
We do not sell or rent personal data. We do not share personal data with third parties for their own marketing. We may disclose data when required by law, court order, or to protect the rights, property, or safety of LegoFuture, our users, or the public.
9.Data retention
Server logs are retained for up to 30 days for security and debugging, after which they are rotated and deleted. Contact-form submissions are retained for up to 12 months so we can follow up on conversations, then deleted. We retain data longer only when required by law.
10.Security
We use industry-standard safeguards (HTTPS in transit, restricted access to production systems, principle of least privilege). No system is perfectly secure. You acknowledge that you use the Service at your own risk.
11.International data transfers
LegoFuture operates from the United States. If you access the Service from outside the US, your data may be processed in the US, which may have data-protection laws different from those in your country. By using the Service, you consent to this transfer.
12.Children
The Service is not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us via the contact form and we will delete it.
13.Your rights
Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal data, and to object to or restrict certain processing. See our Privacy Rights page for the full list of rights and how to exercise them.
14.Changes to this policy
We may update this policy from time to time. Material changes will be indicated by an updated “Last updated” date at the top of this page. We encourage you to review the policy periodically.
15.Contact
For any privacy question or to exercise a privacy right, use our contact form. We will respond within the timelines described on the Privacy Rights page.