Privacy Policy
Last updated: April 2026
Lakea.net is a price-comparison site for LEGO® sets. We take your privacy seriously and process as little data as possible — only what is needed to run the site and send price alerts.
1. Who are we?
Data controller: Lakea.net
Contact: info@lakea.net
Got a question about your data, or want to view or delete it? Email the address above. We respond within 30 days.
2. What data do we process?
We process only data from visitors who create an account themselves. Anyone who visits the site without logging in leaves no personal data behind.
| Data | Why | Retention |
|---|---|---|
| Email address | Logging in + sending price-alert emails | Until you delete your account |
| Password | Authentication — stored as a bcrypt hash; the original password is never readable by us | Until you delete your account |
| Name (optional) | Display on the account page ("Hi, Jan") | Until you delete your account |
| Shop preferences | Tailoring filters and price alerts to your choice | Until you delete your account |
| Price alerts | Emailing you when a LEGO set you follow drops in price | Until you delete the alert or your account |
3. Legal basis for processing
We process your data on the basis of performance of a contract (providing the service you request when creating an account — Article 6(1)(b) GDPR). The same applies to sending price-alert emails: you activate the alert deliberately.
4. No cookies, no trackers
Lakea.net uses no tracking cookies and no external advertising networks (such as Google Ads or Meta Pixel). That is why there is no cookie banner.
Your login status is kept via a JWT token in your browser's local storage (localStorage) — technically not a cookie, but a small file read solely by your own browser and never sent automatically to external servers.
Affiliate links (to shops like Bol.com or LEGO.com) may set a cookie of their own once you click. That is outside our control; consult the privacy policy of the shop in question.
5. Is data shared?
No. We do not sell or rent your data to third parties. We do not use it for profiling or advertising purposes. Price-alert emails are sent via our own mail server; an external email service may act as a processor but has no access to your other data.
6. Your rights
On your account page you can handle most things yourself, directly and without intervention:
- Access / portability — The "Download my data" button instantly delivers a JSON file with everything we hold about you.
- Rectification — Name, location and shop preferences are edited directly on the account page.
- Change password — Under "Account & privacy" on the account page.
- Erasure — The "Delete account…" button erases your account and all associated data (favourites, alerts, preferences, clicks, views) immediately and irreversibly.
- Objection / restriction — Email info@lakea.net.
- Complaint — You have the right to lodge a complaint with the data protection authority in your country.
For requests that cannot be made via the account page, email info@lakea.net. We respond within 30 days.
7. Security
Passwords are stored hashed (bcrypt). Connections run over HTTPS. We hold no payment data; transactions take place directly at the shop.
8. Price information and affiliate links
All prices on Lakea.net are indicative and are fetched automatically from the shops. Prices may differ from what you see on the shop's site. Lakea.net receives a commission via affiliate links; this does not influence the order or selection of sets.
9. Partners and payments
If you sign up as a selling partner via /partners, we also process your business details: shop name, website, contact person, email address, phone number, country, product feed and the currency, shipping-country and shipping information you provide. Legal basis: performance of the partner agreement (Art. 6(1)(b) GDPR), plus a statutory retention obligation for invoices.
Payment for the partner subscription is handled by Stripe. Stripe receives the data needed to process the payment (name, email address, billing address and payment details) and processes it under its own privacy policy. Card details never reach our servers — we only store a Stripe customer ID and subscription ID to manage your subscription. You can cancel at any time via the secure Stripe portal.
10. Changes
We may adjust this policy if the law or our way of working changes. The date at the top of this document indicates the most recent version. For significant changes, account holders receive an email.