Privacy Policy
Last updated: June 2026
Lakea.net is a price-comparison site for LEGO® sets. We take your privacy seriously and process as little data as possible — only what is needed to run the site and send price alerts.
1. Who are we?
Data controller: Lakea.net
Contact: info@lakea.net
Got a question about your data, or want to view or delete it? Email the address above. We respond within 30 days.
2. What data do we process?
We process data from visitors who create an account, and from visitors who post a comment. Anyone who only browses the site — without logging in and without commenting — leaves no personal data behind.
| Data | Why | Retention |
|---|---|---|
| Email address | Logging in + sending price-alert emails | Until you delete your account |
| Password | Authentication — stored as a bcrypt hash; the original password is never readable by us | Until you delete your account |
| Name (optional) | Display on the account page ("Hi, Jan") | Until you delete your account |
| Shop preferences | Tailoring filters and price alerts to your choice | Until you delete your account |
| Price alerts | Emailing you when a LEGO set you follow drops in price | Until you delete the alert or your account |
Lakea also has a comment system: you can comment on set, blog and theme pages — even without an account and without an email address. When you post a comment, we process:
| Data | Why | Retention |
|---|---|---|
| Comment text + automatic screen name | Showing your comment publicly and worldwide. The screen name is assigned automatically — you do not choose it yourself. | Until the comment is deleted |
| Anonymous token (in your browser) | Recognising you as the same anonymous poster, without email or account | Locally in your browser, until you clear it |
| Encrypted (hashed) IP address | Preventing spam and abuse, rate-limiting and bans. We never store your real IP address, only an irreversible hash. | With the comment |
Legal basis: our legitimate interest in showing comments and protecting the site against spam and abuse (Article 6(1)(f) GDPR). Comments are public. Want one removed? Email info@lakea.net.
3. Legal basis for processing
We process your data on the basis of performance of a contract (providing the service you request when creating an account — Article 6(1)(b) GDPR). The same applies to sending price-alert emails: you activate the alert deliberately.
4. No cookies, no trackers
Lakea.net uses no tracking cookies and no external advertising networks (such as Google Ads or Meta Pixel). That is why there is no cookie banner.
Your login status is kept via a JWT token in your browser's local storage (localStorage) — technically not a cookie, but a small file read solely by your own browser and never sent automatically to external servers.
Affiliate links (to shops like Bol.com or LEGO.com) may set a cookie of their own once you click. That is outside our control; consult the privacy policy of the shop in question.
5. Is data shared?
No. We do not sell or rent your data to third parties. We do not use it for profiling or advertising purposes. Price-alert emails are sent via our own mail server; an external email service may act as a processor but has no access to your other data.
6. Your rights
On your account page you can handle most things yourself, directly and without intervention:
- Access / portability — The "Download my data" button instantly delivers a JSON file with everything we hold about you.
- Rectification — Name, location and shop preferences are edited directly on the account page.
- Change password — Under "Account & privacy" on the account page.
- Erasure — The "Delete account…" button erases your account and all associated data (favourites, alerts, preferences, clicks, views) immediately and irreversibly.
- Objection / restriction — Email info@lakea.net.
- Complaint — You have the right to lodge a complaint with the data protection authority in your country.
For requests that cannot be made via the account page, email info@lakea.net. We respond within 30 days.
7. Security
Passwords are stored hashed (bcrypt). Connections run over HTTPS. We hold no payment data; transactions take place directly at the shop.
8. Price information and affiliate links
All prices on Lakea.net are indicative and are fetched automatically from the shops. Prices may differ from what you see on the shop's site. Lakea.net receives a commission via affiliate links; this does not influence the order or selection of sets.
9. Partners and payments
If you sign up as a selling partner via /partners, we also process your business details: shop name, website, contact person, email address, phone number, country, product feed and the currency, shipping-country and shipping information you provide. Legal basis: performance of the partner agreement (Art. 6(1)(b) GDPR), plus a statutory retention obligation for invoices.
Payment for the partner subscription is handled by Stripe. Stripe receives the data needed to process the payment (name, email address, billing address and payment details) and processes it under its own privacy policy. Card details never reach our servers — we only store a Stripe customer ID and subscription ID to manage your subscription. You can cancel at any time via the secure Stripe portal.
10. Changes
We may adjust this policy if the law or our way of working changes. The date at the top of this document indicates the most recent version. For significant changes, account holders receive an email.