blockdeco – Privacy Policy

Effective Date: April 14, 2026

Website: https://blockdeco.com

Contact: [email protected]

This Privacy Policy explains how blockdeco collects, uses, stores, shares, and protects personal data and uploaded content.

blockdeco is a non-commercial hobby project operated privately by its founders. It is not currently operated through a company or separate legal entity.

1. Data Controllers

Personal data is managed by:

  • Dániel Sasvári, Hungary
  • Dávid Sándor, Hungary

Contact for all privacy, GDPR, deletion, export, copyright, and legal requests:

[email protected]

2. What Data We Collect

blockdeco may collect and process the following categories of data.

Account data

  • email address;
  • password hash;
  • email verification status;
  • account status;
  • account creation and update timestamps;
  • two-factor authentication or security-related data, if enabled or used.

Passwords are hashed and are never stored in plain text.

Artist profile data

If a user becomes an artist, blockdeco may collect and display:

  • artist name;
  • social profile links;
  • donation links;
  • public artist-related information provided by the artist.

Artwork and uploaded content

Artists may upload or provide:

  • artwork images;
  • artwork titles;
  • descriptions;
  • dimensions;
  • tags;
  • BrickStudio files or similar model files;
  • related metadata;
  • other information connected to an artwork submission.

Moderation and operational data

blockdeco may process:

  • moderation decisions;
  • rejection reasons;
  • review status;
  • internal notes;
  • duplicate or previously rejected submission detection data;
  • technical identifiers used to protect the Platform and enforce submission rules.

blockdeco may use technical measures to detect previously rejected or duplicate submissions.

Logs and technical data

blockdeco may collect:

  • IP addresses;
  • request logs;
  • browser and device information;
  • security logs;
  • error logs;
  • performance logs;
  • audit logs;
  • authentication logs;
  • CDN or hosting-related logs;
  • analytics identifiers if analytics consent is granted.

Cookie and analytics data

If a user consents to analytics cookies, blockdeco may use Google Analytics 4 to collect analytics information about website usage.

If analytics cookies are rejected, blockdeco will not load analytics cookies or collect analytics data through Google Analytics for that user.

3. Public Data

blockdeco is a public gallery.

Content submitted by artists or uploaded with written approval for publication may become publicly visible.

Public content may include:

  • artist name;
  • uploaded images;
  • artwork title;
  • artwork descriptions;
  • artwork dimensions;
  • artwork tags;
  • BrickStudio or model files;
  • donation links;
  • social profile links;
  • other artist-provided public information.

The following are not intended to be public:

  • email address;
  • password hash;
  • security logs;
  • internal moderation data;
  • internal account metadata;
  • private support communications.

Public content may appear on:

  • https://blockdeco.com;
  • blockdeco-operated social media channels, including Instagram, TikTok, Pinterest, Facebook, and similar platforms;
  • search engines;
  • AI indexing systems;
  • public previews;
  • archive systems;
  • third-party caches;
  • external websites or forums outside blockdeco’s control.

Because the Platform is public, blockdeco cannot guarantee that public content will not be copied, indexed, cached, downloaded, reposted, archived, discussed, or redistributed by third parties.

4. Ownership of Uploaded Content

Uploaded content remains the property of the artist or the relevant rights holder.

blockdeco does not obtain ownership of uploaded images, descriptions, model files, or related artist content.

blockdeco stores, displays, distributes, caches, indexes, and promotes artist content only under the permissions described in the Terms of Use and granted by the artist.

5. Why We Process Data

blockdeco processes data for the following purposes:

  • creating and managing user accounts;
  • verifying email addresses;
  • enabling login and security features;
  • allowing artists to submit artworks;
  • reviewing and moderating artwork submissions;
  • displaying approved artworks publicly;
  • hosting downloadable files;
  • operating the public gallery;
  • maintaining sitemaps and public discoverability;
  • publishing public artist content on blockdeco-operated social channels;
  • handling copyright, privacy, deletion, export, and support requests;
  • protecting the Platform against abuse, spam, unauthorized access, and security threats;
  • maintaining logs, backups, and operational records;
  • improving the Platform;
  • complying with legal obligations;
  • collecting analytics only where consent has been granted.

6. Legal Bases for Processing

Where GDPR applies, blockdeco relies on the following legal bases:

Contractual necessity

Used where processing is necessary to provide account functionality, login, artist upload features, content hosting, and related Platform services.

Consent

Used for optional analytics cookies and Google Analytics.

Users may reject analytics cookies. If rejected, analytics will not be collected through Google Analytics.

Legitimate interests

Used for security, abuse prevention, moderation, service maintenance, logs, backups, technical operations, public gallery operation, and protection of blockdeco and its users.

Legal obligations

Used where blockdeco must keep or process data to comply with applicable legal requirements, respond to lawful requests, or handle disputes and rights claims.

7. Hosting, Storage and Infrastructure

blockdeco uses DigitalOcean infrastructure for:

  • application hosting;
  • database hosting;
  • object storage;
  • uploaded image storage;
  • uploaded file storage;
  • backups;
  • CDN distribution;
  • technical infrastructure.

Primary database and file storage are located in London.

Some cached content may temporarily be distributed globally through CDN infrastructure or other technical caching layers. blockdeco cannot guarantee immediate removal of cached copies from all caching systems.

blockdeco may also use third-party services for email delivery, analytics, security, monitoring, or other technical purposes if needed to operate the Platform.

8. Cookies and Google Analytics

blockdeco uses cookies and similar technologies.

Essential cookies may be used for login, security, authentication, session handling, and basic website operation.

Analytics cookies are optional. blockdeco uses Google Analytics 4 only if the user gives consent through the cookie consent window.

If the user rejects analytics cookies, blockdeco will not collect analytics data through Google Analytics for that user.

Users may change or withdraw cookie consent where the Platform provides this functionality, or by clearing cookies in their browser.

A separate Cookie Policy may provide additional details.

9. Email Communications

blockdeco may send essential service emails, including:

  • email verification emails;
  • two-factor authentication or security emails;
  • account-related notices;
  • policy update notices;
  • important service or operational notifications.

blockdeco does not currently send marketing newsletters.

10. Social Media Publication

Artists understand that approved public artworks and artist-provided public information may be displayed on blockdeco-operated social media channels, including Instagram, TikTok, Pinterest, Facebook, and similar platforms.

These posts may include uploaded images, artwork titles, artist names, descriptions, tags, and similar public information.

If an artist later deletes their account or requests removal from blockdeco, previously published social media posts may remain available unless removal is legally required or separately agreed.

Social media platforms may process data according to their own privacy policies. blockdeco does not control how those platforms process data.

11. Search Engines, AI Systems and Third-Party Indexing

Public content on blockdeco may be indexed by search engines, AI systems, social platforms, automated discovery systems, public previews, archives, and similar services.

blockdeco may include approved artworks in sitemaps and metadata to support public discoverability.

blockdeco cannot guarantee removal from third-party indexes, caches, AI systems, archives, screenshots, reposts, or external websites after content is deleted from blockdeco.

12. Data Sharing

blockdeco does not sell personal data.

blockdeco may share or make data available as follows:

  • public artist content may be visible publicly;
  • uploaded public content may be distributed through hosting and CDN infrastructure;
  • Google Analytics may process analytics data if consent is granted;
  • DigitalOcean may process hosting, storage, infrastructure, logging, and backup data;
  • email service providers may process email delivery data if used;
  • legal or security requests may require disclosure where required by law;
  • service providers may process data where necessary to operate the Platform.

blockdeco does not process payments directly.

Donation links and external payment pages are controlled by the artist or third-party services, not by blockdeco.

13. Data Retention

blockdeco keeps data only as long as reasonably necessary for the purposes described in this Privacy Policy.

General retention principles:

  • account data is kept while the account exists;
  • public artist content is kept while the artist account and artwork remain active;
  • deleted public content is removed from public visibility as soon as reasonably possible;
  • hard deletion is generally completed within five business days where technically and legally possible;
  • logs may be retained for security, audit, abuse prevention, diagnostics, and legal purposes;
  • backups may temporarily retain deleted data until backup rotation or deletion processes remove it;
  • moderation records and technical duplicate-detection information may be retained where necessary to protect the Platform and prevent repeated abuse or reuploads.

blockdeco does not promise instant permanent deletion from every technical system, backup, cache, index, or third-party service.

14. Account and Content Deletion

Users may request deletion of their account, profile, and uploaded content by contacting:

[email protected]

Deletion process:

  • public content is soft-deleted immediately or as soon as reasonably possible;
  • hard deletion is generally completed within five business days where technically and legally possible.

Some information may remain temporarily or permanently in:

  • security logs;
  • audit logs;
  • server logs;
  • backups;
  • moderation records;
  • legal records;
  • abuse-prevention systems;
  • third-party caches or indexes outside blockdeco’s control.

Deletion from blockdeco does not guarantee deletion from search engines, AI systems, social media platforms, archive systems, screenshots, mirrors, reposts, or external websites.

15. Data Export and GDPR Rights

Where applicable, users may have the right to:

  • access their personal data;
  • request correction of inaccurate data;
  • request deletion;
  • request restriction of processing;
  • object to certain processing;
  • request data portability;
  • withdraw consent for analytics cookies;
  • lodge a complaint with a data protection authority.

Requests can be sent to:

[email protected]

blockdeco may need to verify the identity of the requester before fulfilling certain requests.

16. Security

blockdeco uses reasonable technical and organizational measures to protect user data, including hashed password storage and account verification.

However, no website, hosting provider, storage system, or internet transmission is completely secure.

Users are responsible for keeping their account credentials secure and for protecting access to their own email accounts, browsers, and devices.

17. International Access

blockdeco is globally accessible.

Although the Platform is operated from Hungary and hosted primarily using DigitalOcean infrastructure with primary database and file storage in London, users may access the Platform from other countries.

Public content may be visible worldwide.

Some technical processing, caching, analytics, or third-party service processing may occur outside the user’s country of residence.

18. Children and Minors

blockdeco is not intended for users under 16 years old.

Users must be at least 16 years old to use the Platform.

If blockdeco learns that a user under 16 has created an account, blockdeco may delete or restrict the account.

19. Changes to This Privacy Policy

blockdeco may update this Privacy Policy from time to time.

If changes are material, blockdeco may notify users through the Platform, email, or another reasonable method.

Continued use of the Platform after an updated Privacy Policy becomes effective means that you acknowledge the updated Privacy Policy.

20. Contact

For privacy requests, GDPR requests, deletion requests, export requests, copyright complaints, legal notices, or support matters, contact:

[email protected]