Privacy Policy
Applies to the Brick Finder app (Android and iOS) and brickfinderapp.com. Published by Magness Enterprises LLC. Last updated: October 25, 2026.
Brick Finder helps you catalog LEGO® sets and loose bricks, identify pieces from photos, and see what you can build. This policy explains what we collect, why, how long we keep it, and how to delete it.
Using the app without an account
You can use Brick Finder without an account. Your collection, scans and settings are then stored only on your device. We do not receive them.
Information we collect when you create an account
- Account details: first and last name, email address, optional phone number, and your password (stored only as a secure one-way hash, never in readable form).
- Your collection: the sets you own and your loose bricks, so they can be backed up and restored on another device.
- Consent choices: which agreements and message preferences you accepted, and when.
- Sign-in sessions: security tokens that keep you signed in.
- Optional cloud backup of your creations (only if you choose "Back up my creations and collection"): the Brick Studio builds you saved, your minifigures, your Display Room rooms and favourites, and your inventory bins, so you can restore them on a new device. Backup is off unless you turn it on, and you can turn it off or delete the cloud backup at any time in Account & privacy. Photos and videos are never part of the backup.
Website accounts and referral rewards
Website accounts are separate from launch-list signups and anonymous Brick Studio keep codes. Creating an account does not subscribe you to marketing. Verification, password-reset and earned-reward emails are service messages. Account emails wait in a protected queue; their contents are encrypted until sent.
When the referral program opens, we record personal referral codes, which account accepted an invitation, verified purchase and refund status, qualification dates and membership rewards. Your private tracker shows counts and reward status, not other members' identities or purchase histories. Staff may view an internal referral leaderboard. We do not access or upload your address book.
The referral program is coming soon. New paying customers only will qualify after our 60-day qualification period; later refunds may still be reconciled. Physical bricks are not supplied as rewards. See referral rewards and availability.
Camera and photos
Brick Finder asks for camera access so you can photograph bricks, trays and barcodes. Brick scans are analyzed on your device. Your photos are not sent to our server, and scan results stay on your device; they are not uploaded to your account. If you correct a piece while signed in, the app may send the part and colour you chose with the piece's measurements, never the photo.
Barcode and QR scanner (Google)
When you scan a set's barcode or QR code, the app uses Google's code scanner (Google Play services / ML Kit). The scan itself runs on your device, but Google's scanner sends Google basic diagnostic and usage information: device details (manufacturer, model, operating-system version), the app's package name and version, performance measurements such as speed, the scanner's settings, event types and error codes, and a per-installation identifier that is not meant to identify you or your device. With auto zoom, it also sends a scanning-session identifier, zoom changes and where a barcode was predicted in the frame. Google says it uses this to measure and improve the scanner, sends it over an encrypted connection, and does not pass it to third parties. Details: Google ML Kit data disclosure. Brick Finder does not receive this information.
Purchases
Paid features are sold only through the Apple App Store or Google Play. Apple or Google processes the payment; we never see your card details. The app receives confirmation of what you bought so the features unlock.
Email and text messages
We contact you by email about your account and support requests. You may choose whether you want product news by email, by text message, or not at all. We only send text messages if you choose that option; message and data rates may apply, and you can reply STOP at any time. If we use a messaging service to send emails or texts, it receives only what it needs to deliver them.
What we do not do
- We do not sell or rent your personal information.
- The app contains no advertising and no analytics or tracking tools of our own. The only outside service that collects usage data is Google's barcode scanner, described above.
- We do not use your photos to identify you.
Who processes your information
Your account data is stored on servers we rent from our hosting provider. Payments are handled by Apple or Google as described above.
How long we keep it
We keep account data while your account exists. Account deletion removes your profile, collection backup, verification tokens and queued account emails from the active service. Minimal pseudonymous purchase/referral audit references may remain for refund reconciliation and fraud prevention. Restricted disaster-recovery backups rotate out within 14 days and are not used for marketing; deletion requests must be reapplied if a backup is restored.
Deleting your account and data
In the app: sign in, open account settings and choose Delete Cloud Account. You will be asked for your password. This immediately and permanently deletes your cloud account, the sets and loose bricks backed up to it, any backed-up creations, your consent records and your sign-in sessions.
Only the cloud backup: in Account & privacy, choose Delete cloud backup. This deletes the backed-up creations from our server and turns backup off; your account and the creations on your device are not changed.
App Store and Google Play subscriptions are not cancelled by deleting your account. Cancel them in your Apple ID settings or the Google Play Store, or you may keep being charged.
The collection saved on your device is not affected and stays available offline until you delete the app.
For your website account, sign in at your referral account and choose Delete my website account. No access to the app? See Delete your account.
Your choices
You can view and edit your profile in the app. You may also ask us for a copy of your account data, a correction, or deletion by emailing us from the address on your account.
Children
Brick Finder is designed for builders aged 9 and up. Anyone can use the app without an account; nothing is then sent to us. A cloud account must be created by someone aged 13 or older. A parent or guardian may create and manage an account for a younger child. We do not knowingly collect personal information from children under 13 without a parent's involvement; if you believe we have, contact us and we will delete it.
Contact
Email: support@brickfinderapp.com. We reply within 2 business days.
LEGO® is a trademark of the LEGO Group, which does not sponsor, authorize or endorse Brick Finder.
Website traffic counts
Our main website pages send a page-view count to our own server. The public footer shows a running total and the owner dashboard shows daily totals and popular pages. Reloads count; these are not unique people or visits. We exclude known bots and browsers sending Do Not Track or Global Privacy Control where detected. No analytics cookies or persistent browser identifiers are used. We store only daily page totals, without account information, query strings, individual model identifiers, referral codes or raw network addresses. A short-lived in-memory address hash limits abuse and is cleared each hour or on restart. Ordinary server access logs remain separate.
Website visit analytics
We use Matomo on our own Brick Finder server to understand website visits, pages, link/button categories, campaign tags, referring websites, device/browser categories, approximate network location and time spent. The application, database and offline location lookup run on our server. We do not send visit analytics to an outside analytics service. We do not record form contents, names, email addresses or account IDs in visit analytics. Tracked page URLs contain only approved campaign tags; referring-page query strings are removed. IP addresses are masked before storage. Network location is approximate and can be wrong; it is not a home address or GPS location. IP Geolocation by DB-IP, licensed under CC BY 4.0.
Website measurement runs without an automatic pop-up. We do not use analytics cookies, store a visitor ID in browser storage, or probe browser features. Matomo uses a daily-changing server-side technical signature to group requests on this website; visit counts are estimates, not identified people. These pseudonymous records are not shared for cross-site advertising. Do Not Track, Global Privacy Control and an existing analytics opt-out stop this optional measurement. Use the control here or the Analytics privacy settings link at the foot of the website to turn it off or on. Only a choice you make is saved in local storage. Turning measurement off stops future collection; earlier statistics are not automatically erased. Detailed visit logs are retained for up to 90 days, aggregate reports for comparisons, and private rolling backups for up to 14 additional days. Tagged links identify campaigns, not individual email recipients. Visit analytics are not matched to account records. Ordinary server access logs remain separate.