Privacy Policy

Last updated: July 11, 2026

Assemble ("we", "the app") is a catalog application for LEGO® sets and minifigures, available on the web and on iPhone. This policy explains what personal data we process, why, and the choices you have. We are not affiliated with, authorized, or sponsored by the LEGO Group.

Data we collect

• Account data. When you create an account we store your email address and display name. If you sign in with email and password, we store a securely hashed password (never in plain text). If you sign in with Google or GitHub, we receive your email and basic profile from that provider.
• Content you create. Your favorites and your browsing history within the app, so we can display them back to you across your devices.
• Technical data. Standard server logs (such as IP address and request metadata) generated by our hosting provider for security and to operate the service.

We do not track you across other apps or websites, we do not serve advertising, and we do not sell your personal data.

How we use your data

• To create and secure your account and authenticate you.
• To provide core features: search, set and minifigure pages, favorites, and history.
• To send transactional emails you request, such as email verification and password resets.

Legal basis (EU/EEA users)

We process account and content data to perform the contract you enter when you use the app (Article 6(1)(b) GDPR), and technical/security data on the basis of our legitimate interest in operating a safe service (Article 6(1)(f) GDPR).

Service providers

We share the minimum necessary data with providers that operate the service on our behalf, under their own security and privacy terms:

• Vercel — application hosting and server logs.
• Neon — managed PostgreSQL database where your account and content are stored.
• Resend — delivery of transactional emails.
• Google and GitHub — only if you choose to sign in with them, as identity providers.
• Gravatar — to display a profile picture associated with your email, if available.

LEGO catalog data

Set and minifigure information is retrieved by our servers from third-party catalog sources (BrickLink, Rebrickable, and Brickset). These requests are made by our backend and do not include your personal data.

Data retention

We keep your account and content data for as long as your account is active. When you delete your account, we delete the associated personal data, except where we must retain limited information to comply with legal obligations.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at the address below. You may also lodge a complaint with your local data protection authority.

Children

The app is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide a more prominent notice.

Contact

For any privacy question or request, contact us at p.lhoste13@proton.me.