Legal & credits

BrickOSINT is an independent, non-commercial fan project. There are no ads, no affiliate links and nothing for sale.

Trademarks

LEGO® is a trademark of the LEGO Group of companies which does not sponsor, authorize or endorse this site.

LEGO, the LEGO logo, the Minifigure, and the Brick and Knob configurations are trademarks and/or copyrights of the LEGO Group. So are other LEGO Group names that appear here as theme or product names, such as DUPLO, TECHNIC, NINJAGO, BIONICLE, MINDSTORMS and BrickLink. Licensed theme names such as Star Wars, Harry Potter, Marvel and Disney are trademarks of their respective owners, who likewise do not sponsor or endorse this site. BrickOSINT uses these names only to identify the products it catalogues.

Copyright

Credits

Catalogue data courtesy of Rebrickable. BrickOSINT is not affiliated with Rebrickable.

Accuracy

Catalogue data is compiled from third-party sources and may contain errors or gaps. Prices are historical retail prices shown for reference, not current offers.

Privacy

Last updated 15 September 2026

BrickOSINT (brick-osint.games) is run by an individual. This section explains what the site stores, why, and for how long.

What's collected

Accounts (optional): your username, your password (stored only as a salted bcrypt hash), when you signed up and last signed in, and your per-game stats. No email, real name, phone number, address, location or payment details.
Guests: a random guest ID and the display name you choose, kept in your session cookie. Game records refer to the guest ID.
Gameplay: moves or click paths, times, scores, results and your display name.
Technical data: the hosting provider's server logs record IP address, browser, pages requested and timestamps, for security, abuse prevention and debugging. IP addresses are also held briefly in memory for rate limiting.

Cookies and local storage

One strictly necessary session cookie handles sign-in or guest identity and CSRF protection. It expires after 30 days. Local storage remembers your theme, sidebar and dismissed notices. There are no analytics, advertising or tracking cookies, and no third-party trackers.

How it's used

To run the games and accounts, leaderboards and multiplayer, to keep the site secure and prevent abuse, and to fix problems. Data is never sold, never used for advertising and never used for profiling.

What other players see

Your display name is visible to other players in multiplayer rooms and results, and appears on public leaderboards such as the Brick Race daily.

Service providers

Google Cloud hosts the site, database and storage, in US regions.
Cloudflare Turnstile runs bot checks where they're enabled, and processes IP address and device signals to do so.
Third-party image hosts: your browser loads some images directly from them, so they receive your IP address and browser details.

How long it's kept

Accounts: until deleted.
Multiplayer rooms and their invite codes: deleted automatically about 24 hours after the last activity.
Brick or No Brick games, and practice or custom Brick Race puzzles and runs: deleted automatically about 30 days after they're created.
Daily Brick Race runs: kept, for the leaderboard.
Server logs: about 30 days.
Backups: daily backups are kept 7 days; occasional manual backups up to 30 days.

Your choices

Guests can clear their cookies at any time, which unlinks their game history. Self-serve account deletion isn't available yet.

Children

BrickOSINT isn't directed at children under 13, and doesn't collect email addresses or real names.

Security and location

HTTPS throughout, hashed passwords, strict same-site cookies and access controls. Data is stored in the United States.

Changes

When this policy changes, the date at the top of this section changes too.