Privacy Policy

Who I am

The website address is https://brickfiction.pl. Brick Fiction is an independent blog about game development and building bricks from various manufacturers, including LEGO®, COBI, and others. The LEGO Group is not connected with this website in any way and does not support it. The relevant trademarks belong to their respective owners.

The controller of personal data collected through the blog is Stefan Kania, the author and person running Brick Fiction. Privacy contact: kontakt@brickfiction.pl.

Last updated: July 1, 2026.

What data is collected

  1. Basic visit statistics. The site uses Cloudflare Web Analytics for aggregate analysis of how the blog works. According to Cloudflare’s description of Web Analytics, I do not use cookies, localStorage, or fingerprinting here to track users.
  2. Comments. Comments under posts are handled by Waline, running at https://comments-brick-fiction.vercel.app. If you post a comment or create an account in the comment system, the processed data may include your name/nickname, email address, optional website address, comment content, comment date, commented post path, account/login data, avatar, and technical data needed for the comment system to work.
  3. Comment technical data. Waline may process your IP address, browser and operating system information (User-Agent), approximate region, anti-spam data, session data, and identifiers needed for login, moderation, form security, and abuse prevention.
  4. Public content. Your nickname, comment content, comment date, optional website address, and avatar may be visible publicly. Your email address and IP address are not displayed publicly.
  5. Images in comments. If you upload an image through the comment form, it may be stored as part of the comment. Do not upload images containing someone else’s personal data, sensitive data, or anything you do not want to publish.
  6. Local browser data. The comment form may store draft comment content, form data, login state, or a session token locally in your browser. You can remove this data by clearing site data in your browser.
  7. Embedded content. The site may contain embedded content from external services, such as YouTube. Embedded content may behave as if you visited the external service directly, and that service has its own privacy rules.

Why I process data

  1. Comment data is used to publish comments, run discussions, handle account/login features, moderate comments, reply to comments, and keep order under posts.
  2. Technical data is used for security, spam protection, abuse detection, rate limiting, and diagnosing technical issues.
  3. Statistical data is used for aggregate analysis of site performance.
  4. Data may also be processed when needed to defend against claims, pursue claims, or comply with legal obligations.

For users in the European Economic Area, the legal bases include in particular:

  1. Article 6(1)(f) GDPR - legitimate interest in running the blog, providing comments, moderation, security, spam protection, and site analysis;
  2. Article 6(1)(b) GDPR - handling features requested by you, such as creating an account or logging in to the comment system;
  3. Article 6(1)(c) GDPR - compliance with legal obligations, if such obligations arise.

Who may receive data

  1. Waline - the software that powers the comment system. Waline’s privacy policy is available at https://waline.js.org/en/advanced/privacy.html.
  2. Vercel - the hosting provider for the comment instance at https://comments-brick-fiction.vercel.app. Vercel privacy and data processing information is available at https://vercel.com/legal/privacy-notice and https://vercel.com/legal/dpa.
  3. The database provider used by Waline - comment data is stored in the database configured for the Waline instance.
  4. Cloudflare - for site operation and Cloudflare Web Analytics statistics.
  5. Data may also be disclosed if required by law, a competent public authority, or when necessary to protect the rights of the blog author.

I do not sell user data and I do not use comments for advertising profiling.

Transfers outside the EEA

Some technical providers, in particular Vercel and other infrastructure providers, may process data outside the European Economic Area. In such cases, the mechanisms declared by the providers apply, such as Standard Contractual Clauses or the EU-U.S. Data Privacy Framework, where the provider uses it.

How long data is kept

  1. Comments are kept for as long as they are visible on the site or needed to run the discussion.
  2. Comment account data is kept for as long as the account is active or needed to operate comments.
  3. Technical data and logs are kept according to the Waline configuration, hosting provider, database provider, and security needs.
  4. Local browser data remains until you or your browser remove it.
  5. If you ask for a comment or account to be deleted, the data will be deleted or anonymized unless further storage is needed for legal, security, or claims-related reasons.

Your rights

You have the right to request access to your data, rectification, deletion, restriction of processing, data portability, objection to processing, and withdrawal of consent where processing is based on consent.

For data-related requests, write to kontakt@brickfiction.pl. According to the Polish Data Protection Authority (UODO), you should first request the exercise of your rights from the data controller. You also have the right to lodge a complaint with the President of the Personal Data Protection Office: https://uodo.gov.pl/.

Important limits

Do not publish sensitive data, children’s data, private data of other people, or content you do not have rights to in comments. A comment is a public statement and may be indexed by search engines.

Policy changes

This policy may change, especially after changes to technical providers, comment configuration, or new features. The current version will be published at https://brickfiction.pl/privacy-policy/.