Privacy policy

Data controller

The “Ma Collection de Briques” app processes your data solely to let you manage your personal LEGO® collection.

Data collected

• First name and email address (to create and secure your account)
• With “Continue with Apple”: the identifier provided by Apple, your first name and email (or Apple’s private relay address if you choose to hide it)
• Your collection: set numbers, names, years, themes, condition, prices, photos, instructions

Guest mode (no account)

Without an account, your collection is stored only on your device and is not sent to our servers. Only set numbers are transmitted when you use automatic search, inventory or LEGO instructions. Your data is moved to your account if you create one.

Shared wishlist

If you create a share link, anyone with the link sees your first name, your wishes and their retail price (never your collection or target prices). A visitor who reserves a gift may give a first name, visible to other visitors but not to you. Turning off the link makes it unusable and clears reservations.

Face ID lock (iPhone app)

If you turn on the app lock, recognition is performed by iOS on your iPhone. The app only receives the result (success or not): no biometric data is read, stored or transmitted.

Legal basis and purposes

Processing is based on the consent you give when creating your account and on providing the service you request. No data is used for advertising and no data is ever sold.

Security and encryption

Traffic with the server is encrypted (HTTPS/TLS) and the database is encrypted at rest (AES-256). Passwords are never stored in plain text: they are irreversibly hashed and checked against known breached-password lists. Each user can only access their own data, enforced by access rules at database level.

Hosting and transfers

Data is hosted within the European Union. LEGO® catalogue images come from the Rebrickable service, which is queried only when a set is not in the local catalogue. To show official instructions, only the set number is sent to lego.com; PDFs open directly on LEGO’s website.

Retention

Your data is kept for as long as your account exists. It is deleted immediately and permanently when you delete your account.

Your rights

You have the right to access, rectify, port (full export from “My account”) and erase your data (account deletion from “My account”). You can withdraw your consent at any time by deleting your account.

Trademarks

LEGO® is a trademark of the LEGO Group, which does not sponsor, authorise or endorse this app.

This website

This website sets no cookies, uses no analytics and loads no external resources.

Contact

For any question about your data or to exercise your rights, email [email protected]. You may also lodge a complaint with the French data protection authority, the CNIL (cnil.fr).