Privacy

This page describes what the site actually does, and the site's own tests check that it keeps doing it.

Visiting

• No cookies are set for browsing, which is why there is no cookie banner.
• No third-party analytics or advertising scripts run on any page.
• The server counts page views per day. To count visitors without identifying anyone, it hashes the day, your IP address and browser with a secret it never stores; the result cannot be reversed and is different every day, so nothing follows you from one day to the next. IP addresses are not stored.
• It also counts which website sent you (the site's name only, never the page), and clicks on outbound buy links, as daily totals.
• Detailed counts are deleted after 400 days.
• Set photos load from Rebrickable's servers, so Rebrickable's servers see those image requests.

Your collection

• Without an account, your collection and wishlist live in your own browser and go nowhere.
• With an account, they are stored on this site's server so they can sync between your devices. An account is a username and a password (stored salted and hashed) and a recovery code. No email address is required.
• A share link publishes a read-only snapshot of your collection to anyone who has the link. You can stop sharing at any time and the link goes dead.
• A public profile is off unless you turn it on, never shows what your collection is worth, and is not indexed by search engines.

Contact form

A message you send, with the name and email address you chose to include, is stored on the server until it has been read and answered. It is not shared with anyone.

Affiliate links

Some buy links go to Amazon with an affiliate tag. Amazon's own privacy policy applies once you are there.

Questions

Ask through the contact page.