Privacy policy
This notice explains how information is handled when you visit the brickmoney website, use the brickmoney app, connect a BrickLink store, use brickmoney pro or contact support. The app is designed around local processing; it does not require a separate brickmoney account.
1. Controller and privacy contact
The controller for brickmoney is:
Michael Holzhacker
Teuflstraße 10/4
4020 Linz, Austria
Email: support@brickmoney.eu
Please use this email for privacy questions and requests.
2. BrickLink connection and market data
If you connect a store, brickmoney handles the BrickLink API credentials you enter, your store's inventory information and prices, relevant BrickLink identifiers, and the market information requested for your analysis. These data are used to retrieve authorized information, calculate pricing recommendations and display your portfolio.
BrickLink credentials are stored on the device using secure operating-system storage (the Apple Keychain on iOS). The app makes authenticated requests to BrickLink for the data required by its features. The app is not designed to send those credentials to a brickmoney-operated account server. You must only connect a BrickLink account that you are authorized to use.
Requests made to BrickLink are also subject to that platform's own data processing and privacy terms. Providing valid credentials is necessary for the features that access your store; other parts of the app may remain usable without a connection. The principal legal basis for delivering the requested app functionality is Art. 6(1)(b) GDPR.
3. Local app storage and optional iCloud synchronization
brickmoney stores working data locally, including inventory snapshots, downloaded market and price-guide information, analysis results, selected pricing strategies, ignored recommendations, import/export working data, settings and relevant timestamps. The app uses a local database for this purpose. Pricing calculations are performed in the app rather than by a central brickmoney pricing service.
On supported Apple devices, selected source information can also be synchronized through Apple's iCloud and private CloudKit records associated with the user's Apple account. This can include inventory and market data, app state and synchronization metadata. The synchronization system also uses device and usage information to coordinate which of the user's devices may start a market-data download in a given 24-hour window. BrickLink API secrets are stored separately in secure device storage.
Existing local data can remain available without a network connection. On Apple devices, access to iCloud may nevertheless be required before starting new market-data downloads, so that the download allowance is not independently used by multiple devices. Apple's handling of iCloud information is explained in its privacy policy. The processing needed for app functions requested by users is based principally on Art. 6(1)(b) GDPR.
4. brickmoney pro subscriptions
Optional subscriptions are purchased and billed through Apple's App Store. brickmoney uses RevenueCat to obtain product offerings, check subscription status and restore purchases. RevenueCat creates an anonymous app user identifier rather than requiring a separate brickmoney sign-in. Purchase and subscription information needed to establish your access is processed by Apple and RevenueCat.
Subscription processing is necessary to provide the purchased features (Art. 6(1)(b) GDPR); legally required billing records may also be processed under Art. 6(1)(c) GDPR. See the privacy information of Apple and RevenueCat for their respective processing activities. We do not receive or store your payment-card details through the app.
5. Support and optional diagnostic reports
When you email support@brickmoney.eu, the sender address, message, attachments and related correspondence are processed to answer your request and resolve problems. Please do not send passwords, API secrets or information that is not needed for your inquiry.
The optional Weird Pricing function can prepare an encrypted diagnostic attachment from pricing cases you choose to report. The report may contain selected item and market information, calculation traces and an optional note. The report is prepared and encrypted on your device; it is not sent automatically. Sending requires your deliberate action in the email interface. Authorized brickmoney support can decrypt a report received for investigation.
Support email for brickmoney is hosted by World4You Internet Services GmbH (Austria). Support processing is based on Art. 6(1)(b) GDPR when it relates to the service and otherwise on our legitimate interest in responding to questions and fixing problems (Art. 6(1)(f) GDPR). For information about World4You's processing, see its privacy policy.
6. Using this website
The production brickmoney website is hosted by World4You Internet Services GmbH, Austria. To deliver the website, ensure operational security and diagnose faults, World4You generates technical access logs. According to World4You, these logs include the requested URL, browser and version, operating system, referrer URL, hostname and IP address, and the time of the request. Processing is based on our legitimate interest in providing a reliable and secure website (Art. 6(1)(f) GDPR).
World4You states that website access and error logs are deleted after 14 days and that its hosting servers are located in EU countries. The website does not include advertising pixels or third-party analytics scripts and does not intentionally set marketing cookies. World4You states that its web hosting does not itself place cookies on the website. See World4You's GDPR hosting information for details.
7. Sharing and recipients
Data is shared only insofar as needed for the functions described above. Depending on what you use, recipients or independent service providers may include BrickLink (API requests), Apple (iCloud and App Store), RevenueCat (subscription management), and World4You (website hosting, email and domain services). If you export a file or use an operating-system share feature, you decide which receiving application or recipient gets that file.
We do not describe data from your store as being sold to advertisers or pooled in a central brickmoney market-data database. Any future shared-data feature would require its own privacy assessment and an updated notice.
8. Storage periods and deletion
Locally stored app data remains on your device until you remove it through available app or device controls. The app also provides controls for removing outdated market data. Deleting the app does not necessarily delete data already synchronized to your iCloud account; cloud records are subject to Apple's account and data-management mechanisms.
Subscription records are retained according to the applicable Apple and RevenueCat arrangements. Support correspondence is kept for as long as necessary to handle the request and meet applicable obligations. World4You states that website access and error logs are automatically deleted after 14 days. Other records are retained only as required for their respective purposes or applicable legal obligations.
9. International transfers
Although World4You states that its web-hosting servers are located in EU countries, providers used by the app, including Apple, RevenueCat and BrickLink, may process information outside the European Economic Area. The protection applicable to a particular transfer may be based on an adequacy decision or safeguards such as standard contractual clauses. For details about processing locations and transfer mechanisms, please consult the respective providers' privacy notices or contact support@brickmoney.eu.
10. Your rights
Where the GDPR applies, you may have rights of access, rectification, erasure, restriction, data portability and objection, depending on the legal basis and circumstances. If a processing activity relies on consent, you may withdraw that consent for the future. You can contact support@brickmoney.eu to exercise your rights.
You may also lodge a complaint with a competent supervisory authority. In Austria, this is the Austrian Data Protection Authority (Datenschutzbehörde).
brickmoney provides pricing recommendations, not decisions about individuals with legal or similarly significant effects under Art. 22 GDPR. You remain in control of any changes to your BrickLink prices.
11. Updates to this notice
Last updated: 27 October 2026. Material changes to data processing will be reflected in an updated policy.