Privacy Policy

Last updated: April 12, 2026

Who We Are

OpenStuds is operated by BrickVault, Kleiner Sandberg 8, 21481 Lauenburg/Elbe, Germany. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use OpenStuds, create an account, buy or sell digital MOC files, contact support, or otherwise interact with the service.

If you have privacy questions or want to exercise a legal right, email info@openstuds.com.

Information We Collect

We collect information you provide directly, information created through your use of the service, and information from service providers that help us operate OpenStuds.

Information You Give Us

This may include:

• account details such as email address, username, password credentials handled through our authentication provider, and profile content

• order and support information such as purchase email, transaction-related details, messages to support, and refund or dispute communications

• seller information such as payout onboarding status, listing text, uploaded files, pricing, and related marketplace content

• information you choose to publish, such as reviews, profile bios, and public seller or buyer activity

Information We Collect Automatically

This may include:

• device, browser, IP address, language, referrer, and approximate location derived from IP

• pages viewed, actions taken in the product, error logs, performance metrics, and general usage analytics

• authentication state, session identifiers, and information stored through cookies, local storage, or similar technologies needed to keep the site working

Information From Service Providers and Third Parties

We may receive information from providers that process payments, host infrastructure, authenticate users, store files, or provide analytics. Based on the current service setup, this includes providers such as Stripe for payment processing, Supabase for authentication, database, functions, and storage, and Vercel for site hosting, analytics, and performance insights.

Payment card details are collected directly by Stripe or another payment processor we designate and are not stored directly by OpenStuds.

How We Use Personal Information

We use personal information to:

• provide and secure your account

• process purchases, link guest purchases to later accounts where applicable, and provide download access

• support seller onboarding, listing management, payout workflows, moderation, and anti-piracy or anti-abuse efforts

• send transactional messages such as account, order, download, security, or support communications

• troubleshoot the service, monitor performance, improve product quality, and understand feature usage

• investigate fraud, payment disputes, abuse, infringement complaints, and security incidents

• comply with legal obligations and enforce our Terms of Service

We do not use guest checkout email addresses for promotional email by default. If we add optional marketing communications in the future, you will be able to opt out where required by law.

Legal Bases for Processing

Where European data protection law applies, we generally process personal information on one or more of these bases:

• performance of a contract, such as when we create your account, process a purchase, or provide downloads

• legitimate interests, such as operating the marketplace, preventing abuse, improving product reliability, and defending legal claims

• compliance with legal obligations

• consent, where consent is legally required for a particular processing activity

How We Share Information

We may share personal information:

• with service providers that help us operate OpenStuds, including payment, hosting, storage, analytics, email, security, and support providers

• with payment providers or financial institutions when needed to process payments, handle chargebacks, or prevent fraud

• with rights holders, affected users, or advisors when reasonably necessary to investigate infringement, abuse, or legal complaints

• with courts, regulators, law enforcement, or other authorities when required by law or reasonably necessary to protect rights, safety, or the integrity of the service

• in connection with a business transfer, restructuring, financing, or similar transaction, subject to appropriate confidentiality protections

We do not sell personal information in exchange for money. We also do not disclose guest checkout email addresses for routine advertising purposes.

Cookies, Local Storage, and Analytics

OpenStuds uses cookies, local storage, and similar technologies to keep you signed in, remember preferences, support checkout and download flows, prevent abuse, and understand how the site is performing.

We also use analytics and performance tools associated with the current site setup, including Vercel Analytics and Speed Insights. These tools help us measure product usage, page performance, and operational health.

You can control cookies through your browser settings, but some parts of OpenStuds may not work correctly if you disable technologies needed for authentication, checkout, or other core features.

Data Retention

We retain personal information for as long as reasonably necessary to operate the service, maintain accounts, provide downloads, comply with legal obligations, resolve disputes, prevent fraud, and enforce our agreements.

Retention periods vary depending on the type of information, whether you are a buyer or seller, whether a transaction or dispute is ongoing, and whether the information is needed for security, accounting, or legal reasons.

Your Rights

Depending on where you live, you may have rights to:

• access the personal information we hold about you

• request correction of inaccurate information

• request deletion of information, subject to legal or operational exceptions

• object to or restrict certain processing

• withdraw consent where processing is based on consent

• receive a portable copy of certain information

• complain to a supervisory authority

To exercise a privacy right, contact info@openstuds.com. We may need to verify your identity before responding.

International Data Transfers

OpenStuds and its service providers may process personal information in countries other than your own. When required, we rely on appropriate transfer safeguards, such as contractual protections or another lawful transfer mechanism.

Children's Privacy

OpenStuds is not directed to children and we do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided us with personal information improperly, contact us and we will review the request.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the revised version on this page and update the "Last updated" date above.

Contact

For privacy questions, requests, or complaints, email info@openstuds.com or write to:

BrickVault Kleiner Sandberg 8 21481 Lauenburg/Elbe Germany