PRIVACY POLICY

Information We Collect

When you submit a form on our site, we collect the information you provide:

• Builder applications — name, portfolio/Instagram URL, style description
• Partner inquiries — first name, last name, work email, company name, partnership objective

We do not collect personal data unless you actively submit a form. No tracking pixels or advertising cookies are used.

Analytics

We use Umami Analytics, a privacy-respecting, cookieless web analytics tool that:

• Does not use cookies or identify individual users
• Does not collect personally identifiable information (PII)
• Only collects anonymous page views, referrers, and device type
• Does not share data with third parties
• Is self-hosted on our own infrastructure

No consent is required for cookieless analytics under GDPR. For more information, visit umami.is.

Legal Basis for Processing

We process your personal data based on:

• Consent (Article 6(1)(a) GDPR) — you explicitly consent via the checkbox when submitting a form
• Legitimate interest (Article 6(1)(f) GDPR) — to evaluate applications and respond to partnership inquiries

You may withdraw consent at any time by requesting data deletion.

How We Use Your Information

• Review and respond to builder applications
• Evaluate and respond to partnership inquiries
• Improve the site experience

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Data Retention

We retain your personal data for the following periods:

• Builder applications — retained for 12 months, then deleted
• Partner inquiries — retained for 12 months, then deleted

You may request earlier deletion at any time (see Your Rights below).

Third-Party Services

Our site uses the following third-party data processors:

• Supabase — database hosting for form submissions and site content (servers in US/EU). Supabase Privacy Policy
• Vercel — site hosting and deployment. Vercel Privacy Policy
• Google Fonts — typography (Space Grotesk, Inter). Google Privacy Policy
• Twitch API — to display live stream status (no personal data shared). Twitch Privacy Notice
• Umami Analytics — anonymous, cookieless web analytics (self-hosted, no personal data collected). Umami Website

Cookies

We use only essential cookies:

• Authentication cookies — set only when you log into the admin dashboard. These are session tokens required for site administration.
• Cookie consent preference — stored in your browser's local storage to remember your choice.

We do not use tracking cookies, analytics cookies, or advertising cookies. Umami Analytics is cookieless and does not require consent. You can manage cookie preferences via the consent banner shown on your first visit.

Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

• Access — request a copy of all personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your personal data
• Data portability — receive your data in a machine-readable format
• Withdraw consent — withdraw consent for data processing at any time
• Lodge a complaint — file a complaint with your local data protection authority

To exercise any of these rights, contact us at privacy@brickclub.tv. We will respond within 30 days.

International Transfers

Your data may be processed in the United States (Supabase, Vercel). These transfers are protected by standard contractual clauses and the service providers' data processing agreements.

Children's Data

Our site is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has submitted data through our forms, contact us and we will delete it promptly.

Contact

For privacy-related questions or GDPR requests, contact our data protection contact at:

Email: privacy@brickclub.tv