Introduction
Welcome to JL-WEBDEV LLC d/b/a Brick by Brick ("we," "our," or "us"). We are committed to protecting your privacy and providing transparency about how we collect, use, and protect your personal information. This Privacy Policy explains our practices regarding data collection when you visit our website brickbybrickfun.com.
By using our website, you agree to the collection and use of information in accordance with this policy.
Information We Collect
1. Automatically Collected Information
When you visit our website, we automatically collect certain information about your device and browsing behavior:
- Browser Information: Browser type, version, and settings
- Device Information: Device type, operating system, screen resolution
- IP Address: Your approximate geographic location
- Usage Data: Pages viewed, time spent on pages, click patterns, referring URLs
- Cookies and Tracking Technologies: See "Cookies and Tracking" section below
2. Information You Provide
We collect information you voluntarily provide when you:
- Newsletter Subscription: Email address (with double opt-in confirmation)
- Contact Forms: Name, email, and message content (if applicable)
- Account Registration: Email and password (if you create an account)
3. Third-Party Information
We may receive information about you from third-party services:
- Google Analytics: Anonymous usage statistics
- Cloudflare: Security and performance data (country, ray ID)
- Affiliate Networks: Click and conversion data (anonymized)
- Rebrickable: LEGO product catalog and parts information via API
- BrickSet: LEGO news, themes, and supplemental set data via API
- BrickEconomy: Pricing data and market value information via API
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to improve your experience and support our affiliate marketing operations.
Our Cookie Approach
We use cookies to support our affiliate marketing business and improve your experience. Our cookies track affiliate clicks, measure site analytics, and remember your recently viewed products. These help us understand what content is valuable and keep the site free.
Types of Cookies We Use
bbf_tracking_id
Unique visitor identification for analytics and return visitor recognition (OPTIONAL - only set with "Accept All")
180 days
First-party (Optional)
bbf_affiliate
Affiliate link attribution tracking to ensure proper commission tracking (OPTIONAL - only set with "Accept All")
30 days
First-party (Optional)
bbf_products
Recently viewed products for personalized recommendations (OPTIONAL - only set with "Accept All")
14 days
First-party (Optional)
_affiliate_click
Server-side tracking of affiliate link clicks (ESSENTIAL - legitimate interest basis)
Session-based
First-party (Essential)
_ga, _gid
Google Analytics tracking for anonymous usage statistics
2 years / 24 hours
Third-party
cookie_consent
Stores your cookie consent preferences
Permanent (localStorage)
First-party
newsletter_shown
Prevents newsletter popup from showing repeatedly
Session (sessionStorage)
First-party
Managing Cookies
You have control over cookies:
- Cookie Consent Banner: Accept cookies when you first visit to enable all features
- Change Preferences: Clear your browser's localStorage and refresh the page to see the banner again
- Browser Settings: Block all cookies (may prevent site from functioning properly)
How We Use Your Information
We use the collected information for the following purposes:
1. Site Operation & Improvement
- Provide and maintain our website functionality
- Analyze usage patterns to improve user experience
- Monitor site performance and fix technical issues
- Detect and prevent fraud or abuse
2. Personalization
- Remember your product viewing history
- Provide personalized product recommendations
- Customize content based on your interests
3. Affiliate Marketing
- Track affiliate link clicks for commission attribution
- Ensure proper credit for product referrals
- Analyze which products and content drive conversions
- Optimize affiliate partnerships
4. Communications
- Send newsletter emails (only with your explicit consent)
- Respond to your inquiries or support requests
- Send important updates about our privacy policy or terms
5. Analytics & Research
- Understand visitor demographics and behavior
- Measure marketing campaign effectiveness
- Identify popular products and content
- Generate anonymous usage statistics
Affiliate Marketing Disclosure
JL-WEBDEV LLC d/b/a Brick by Brick is an affiliate marketing website. We earn commissions when you purchase products through our affiliate links (primarily Amazon and LEGO affiliate programs).
Important Points:
- Clicking our affiliate links does NOT increase your price
- We may earn a small commission at no extra cost to you
- We only recommend products we believe offer value
- Our opinions and reviews remain independent and unbiased
- Affiliate cookies help us track which links led to purchases (30-day window)
- We do NOT have access to your purchase data or payment information
Our affiliate cookies are used solely to ensure we receive proper credit for referrals. They do NOT collect personal information or track you across other websites.
Data Sharing and Third Parties
We do NOT sell your personal information. However, we share data with trusted third-party services:
Service Providers We Use
- Google Analytics: Anonymous website analytics (data is anonymized via IP anonymization)
- Cloudflare: Security, DDoS protection, and CDN services
- Amazon Associates: Affiliate link tracking (Amazon's privacy policy applies)
- LEGO Affiliate Program: Product referral tracking (LEGO's privacy policy applies)
- Heroku (Salesforce): Website hosting infrastructure
- Rebrickable: LEGO product catalog and parts data via API (Rebrickable's privacy policy applies)
- BrickSet: LEGO news and theme information via API (BrickSet's privacy policy applies)
- BrickEconomy: Pricing and market value data via API (BrickEconomy's privacy policy applies)
When We May Disclose Information
- Legal Requirements: If required by law, court order, or government request
- Fraud Prevention: To detect, prevent, or address fraud, security issues, or technical problems
- Business Transfers: In the event of a merger, acquisition, or asset sale
- With Your Consent: Any other disclosure with your explicit permission
Data Security
We implement industry-standard security measures to protect your information:
- HTTPS Encryption: All data transmitted is encrypted via SSL/TLS
- Cloudflare Protection: DDoS protection and web application firewall
- Secure Hosting: Infrastructure hosted on secure Heroku servers
- Access Controls: Limited access to personal data (admin-only)
- Regular Updates: Security patches and software updates
However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
Your Privacy Rights
General Rights (All Users)
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data (subject to legal obligations)
- Opt-Out: Unsubscribe from marketing emails at any time
- Cookie Control: Manage cookie preferences through our consent banner
GDPR Rights (EU Residents)
If you are located in the European Union, you have additional rights under GDPR:
- Right to Portability: Receive your data in a machine-readable format
- Right to Restrict Processing: Limit how we use your data
- Right to Object: Object to data processing for specific purposes
- Right to Lodge a Complaint: File a complaint with your data protection authority
CCPA Rights (California Residents)
If you are a California resident, you have rights under the CCPA:
- Know: What personal information is collected, used, shared, or sold
- Delete: Request deletion of personal information
- Opt-Out: Opt-out of the sale of personal information (we do NOT sell data)
- Non-Discrimination: Equal service regardless of privacy choices
How to Exercise Your Rights
To exercise any of these rights, please contact us (see "Contact Us" section below). We will respond within 30 days.
Children's Privacy
Our website is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete the information.
While LEGO products are enjoyed by children, our website is designed for adult consumers making purchasing decisions.
International Users
Our website is operated from the United States. If you are accessing our site from outside the U.S., please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located.
By using our website, you consent to the transfer of your information to the United States and processing in accordance with this Privacy Policy.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of significant changes by:
- Posting the new Privacy Policy on this page
- Updating the "Last Updated" date at the top of this policy
- Sending an email notification (for material changes, if you're subscribed to our newsletter)
We encourage you to review this Privacy Policy periodically. Your continued use of our website after changes constitutes acceptance of the updated policy.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
We will respond to your inquiry within 30 days.