Last updated 16 October 2026
This policy explains what Brickhaven World, a product of BrickLab ("we"), keeps about you when you use brickhaven.world and play the game, why, for how long, and what you can do about it.
What we keep
- Your account: your email address, whether you have confirmed it, and when the account was made. If you use a password, we store only a secure hash of it, never the password itself.
- Google sign-in: if you choose "Continue with Google", Google tells us your account's email address, that Google has confirmed it, and an identifier for your Google account. We do not get your Google password, contacts or files.
- Your saved game: your progress (studs, what you bought, jobs and races done, the time of day and similar game values), its version, when it was last saved and whether it came from a phone or a computer.
- Play stats: how many times you have started the game and when you last did.
- Technical logs: our hosting keeps records of requests, including your IP address and browser type, for up to 30 days, to run and protect the game.
- On your device: see the Cookie and storage notice.
We do not show ads, we do not sell or rent your data, and we do not use it to follow you on other websites.
Why we use it
- To make and run your account, confirm your email and reset your password (this is needed to give you the game).
- To keep your progress on every device you play on (needed to give you the game).
- To keep the game secure, stop abuse and cheating, and fix problems (our legitimate interest in a safe, working game).
- To send you emails about your account (confirmation and password reset). We send no marketing emails.
Who else handles it
- Webmati hosts the website, the accounts and the saved games, and sends the account emails, on our behalf.
- Google, only if you sign in with Google, under Google's own privacy policy.
- jsDelivr serves some of the game's open-source code libraries. Like any server your browser contacts, it sees your IP address.
Our providers may process data outside your country. Where the law requires it, they do so under appropriate safeguards.
How long we keep it
- Your account and saved game: until you delete your account, or after two years without a sign-in, when we may delete it.
- Technical logs: up to 30 days.
- When you delete your account, your account and saved game are deleted at once. Copies in our providers' backups expire on their normal schedule.
Your rights
You can ask to see, correct, export or delete your data, to restrict how we use it, or object to it. You can delete your account yourself at any time: see Delete your account. For anything else, write to [email protected]. Depending on where you live, you may also complain to your data protection authority.
Children
You must be 13 or older to make an account. See Children.
Changes
We will update this policy when what we do changes. The date at the top says when it last changed.
