Priacy Policy | Bricks in a Bag

PRIVACY POLICY

Bricks in a Bag Ltd
United Kingdom
Contact: support@bricksinabag.com

Last updated: 21 May 2026

Introduction

Bricks in a Bag respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how Bricks in a Bag Ltd collects, uses, stores, and protects personal data across our website, products, services, apps, and customer interactions, including:

Bricks in a Bag stadium kits
Mosaic Maker
Digital instruction products
Bespoke builds
Future apps and online services operated by Bricks in a Bag

2. Information We Collect

We only collect information necessary to operate our business, fulfil orders, and support customers.

This may include:

Name
Email address
Delivery address
Telephone number
Order information
Payment references
Uploaded photos and cropped images used in Mosaic Maker
Generated mosaic previews and fulfilment files
Customer service communications
Technical information relating to website or app usage

3. How We Use Your Information

We use your information to:

Process and fulfil orders
Deliver digital products and instructions
Create custom mosaic and bespoke products
Provide customer support
Send order updates and service communications
Improve our products, services, and website
Prevent fraud, abuse, or misuse
Meet legal and accounting obligations

Uploaded images submitted to Mosaic Maker are processed only for the purpose of generating the requested mosaic product.

4. Payments

Payments are processed securely using approved payment providers including Square.

Bricks in a Bag does not store full card or payment details on its own systems.

5. Sharing of Data

Bricks in a Bag does not sell or rent your personal information.

We may share limited information with trusted service providers where necessary to operate the business, including:

Payment providers
Delivery couriers
Website and hosting platforms
Cloud storage providers
Image moderation services
Customer communication providers

We may also disclose information where required by law or to protect the security and operation of our business and customers.

6. Image Uploads and Mosaic Maker

If you upload an image to Mosaic Maker:

You confirm that you own the image or have permission to use it.
Images may be temporarily processed or moderated to prevent unlawful or unsuitable content.
Generated files may be temporarily stored for fulfilment and support purposes.

Bricks in a Bag may refuse or cancel orders involving unlawful, offensive, copyrighted, or inappropriate content.

7. Data Retention

We retain personal data only for as long as reasonably necessary.

Digital fulfilment files, uploaded images, and generated mosaic files may be deleted after fulfilment and support requirements have been completed.

Accounting, payment, legal, and dispute-related records may be retained longer where required by law or legitimate business need.

8. Your Rights

Under UK data protection law, you have the right to:

Request access to your personal data
Request correction of inaccurate data
Request deletion of your personal data
Object to certain processing activities
Withdraw consent where processing is based on consent

Requests can be made by contacting support@bricksinabag.com.

9. Cookies and Analytics

The Bricks in a Bag website may use cookies and analytics tools to help improve website performance and understand visitor behaviour.

These tools may collect anonymous information such as:

Pages visited
Time spent on the site
Browser type
General location information

Most web browsers allow you to control or disable cookies through browser settings.

Google Analytics may be used on parts of the website. You can learn more or opt out at:
https://tools.google.com/dlpage/gaoptout

10. External Websites

Our website or apps may contain links to external websites or services including payment providers, LEGO-related services, BrickLink, social media platforms, or video platforms.

Bricks in a Bag is not responsible for the privacy practices or content of external websites.

11. Data Security

We take reasonable technical and organisational steps to protect personal information from loss, misuse, unauthorised access, or disclosure.

However, no internet-based system can be guaranteed 100% secure.

12. Children’s Privacy

Our products and services are intended for a general audience and are not specifically directed at children under

We do not knowingly collect personal information from children without appropriate consent.

13. Changes to This Policy

This Privacy Policy may be updated from time to time to reflect changes to our products, services, or legal obligations.

Updated versions will be published on the Bricks in a Bag website with a revised “Last Updated” date.

14. Contact

For privacy questions or data requests, contact:

support@bricksinabag.com

15. LEGO® Disclaimer

LEGO® is a trademark of the LEGO Group, which does not sponsor, authorise, or endorse Bricks in a Bag, Mosaic Maker, this website, app, products, or instructions.

----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

The below is a privacy statement in reference to the mobile game Sudoku Arena

Sudoku Arena

Operated by Bricks in a Bag Ltd

United Kingdom

Contact: support@bricksinabag.com

Last updated: 12/02/2026

1. Overview

Sudoku Arena is a free puzzle game. We respect your privacy. The app is designed to collect as little personal data as possible.

Most game data is stored locally on your device.

2. Information We Collect

A. Information You Choose to Provide

• Profile name (optional)

• Profile picture (optional)

This information:

• Is stored locally on your device.

• Is shared only during live multiplayer via Firebase.

• Is not permanently stored by us.

B. Multiplayer Data

When playing online multiplayer:

• A temporary session ID (random UUID) is generated.

• Profile name and picture are sent to the other player.

• Firebase transmits game progress (e.g. squares remaining, power-ups).

This data:

• Is only used to enable live gameplay.

• Is not stored after the session ends.

• Is not linked to your real identity.

C. Automatically Collected Information

The app itself does not collect:

• Device identifiers (IDFA / IDFV)

• Advertising identifiers

• IP addresses

• Location data

• Contacts

• Crash logs

• App analytics data

Firebase may process basic network metadata on its servers for routing/security as part of its service.

3. Analytics & Tracking

• App analytics is disabled.

• No active advertising SDK.

• No cross-app tracking.

• No user profiling.

If advertising or analytics are added in future, this policy will be updated.

4. Data Storage

• Solo gameplay data is stored locally.

• Deleting the app deletes local data.

• No user accounts are created on servers.

• We do not maintain user databases.

5. Children

Sudoku Arena is suitable for a general audience and not specifically directed at children under 13.

We do not collect personal data from children.

6. Your Rights (UK GDPR)

Under UK data protection law, you have the right to:

• Request access to personal data

• Request deletion of personal data

• Request correction of personal data

Most data is stored locally and can be deleted by removing the app.

7. Data Security

We use Firebase for secure multiplayer connections.

No system can be 100% secure, but we minimise risk by collecting minimal data.

8. Changes to this Policy

We may update this policy if features change. The updated policy will include a revised “Last Updated” date.

9. Governing Law

This policy is governed by the laws of England and Wales.

Contact Us

PRIVACY POLICY