Privacy Policy

Effective Date: October 14, 2026
Last Updated: October 14, 2026
Version: 1
Legal Operator: Vice City Garage LLC
Website: https://clonebrick.com
Privacy Contact: theenzowolfe@gmail.com
Governing Law: Florida, United States

1. Introduction

1.1. This Privacy Policy explains how Vice City Garage LLC, a Florida limited liability company operating clonebrick.com (“Clone Brick,” “we,” “us,” or “our”), collects, uses, stores, shares, and protects personal information.

1.2. Clone Brick is an online marketplace offering building-brick sets, loose parts, parts kits, downloadable building instructions, and digital design files.

1.3. Our Platform serves:

• Shoppers purchasing building-brick sets, loose parts, and parts kits.
• Customers purchasing downloadable building instructions and digital source files.
• Independent designers (“Creators”) who apply to sell their designs through Clone Brick.

1.4. This Privacy Policy applies to visitors, registered users, customers, and Creators who interact with our Platform.

1.5. We serve customers worldwide, including individuals located in the European Union, United Kingdom, and California. Where applicable privacy laws provide additional rights, those rights apply regardless of this Policy's Florida governing-law provision.

2. Information We Collect

We collect information necessary to operate our marketplace, process transactions, deliver products, support Creator accounts, and maintain Platform security.

2.1. Account Information

When you create or use an account, we collect:

• Name.
• Email address.
• Login session information.

Passwords are handled by our authentication provider, Supabase. We do not need to access or store readable account passwords in our application.

2.2. Order Information

When you place an order, we collect:

• Name and email address.
• Shipping address for physical orders.
• Phone number, if provided.
• Products purchased.
• Order history.
• Order notes.
• Refund and cancellation records.

We use this information to process purchases, arrange shipping, provide customer support, and maintain transaction records.

2.3. Payment Information

Payments are processed through Stripe. Clone Brick does not store full credit or debit card numbers.

We retain limited payment-related information, including:

• Payment status.
• Payment method type.
• Stripe payment identifiers.

Stripe processes payment information under its own applicable privacy and security terms.

2.4. Digital Purchase and Download Information

When you purchase or download digital products, we record:

• Download date and time.
• IP address.
• Browser user agent.
• The date and time you consented to immediate digital delivery, where applicable.

We use these records to deliver purchases, enforce download limits, investigate abuse, and maintain evidence relating to transaction disputes.

Delivered PDF files contain a watermark with:

• An order reference.
• A hashed buyer code that is not directly readable as the buyer's identity.

We do not include the buyer's email address in the watermark.

2.5. Creator Information

Creators applying to sell designs through Clone Brick provide:

• Display name.
• Public handle.
• Biography.
• Country.
• Portfolio images.
• Portfolio links.

For approved Creators, we also collect and maintain:

• Uploaded design files.
• Building instructions.
• Product photographs.
• Sales records.
• Earnings records.

We record Creator Agreement acceptance information, including:

• Agreement version.
• Acceptance date and time.
• IP address.
• Browser user agent.

Creator payout identity verification and tax forms, including W-9 and W-8BEN forms, are collected and held by Stripe Connect rather than Clone Brick.

2.6. Parts Tools and Uploaded Files

When shoppers use our parts-related tools, we collect the parts lists and design files they upload. These files are used to provide the requested parts-related functionality.

2.7. Communications

We collect and maintain information associated with:

• Order confirmations and receipts.
• Account-related emails.
• Shipping and order updates.
• Occasional store announcements.
• Messages you send to our support or privacy contact.

Store announcements include a one-click unsubscribe option. Transactional and account-related messages may still be sent when necessary to provide services, even if you unsubscribe from announcements.

2.8. Technical Information

Our hosting provider, Vercel, maintains server logs used for security and debugging. These logs may contain:

• IP address.
• Browser type.
• Pages requested.

We use this technical information to maintain Platform security, diagnose problems, and support reliable operation.

3. Cookies and Browser Local Storage

3.1. Essential Cookies

Clone Brick uses essential cookies required for account login, authentication, and session management. These cookies help keep users signed in and maintain secure account access.

3.2. Shopping Cart Storage

Shopping cart information is stored in your browser's local storage. This allows your cart to remain available while using the Platform.

3.3. Creator Referral Cookie

Clone Brick uses a referral cookie that records which Creator's referral link brought a visitor to a design. This cookie may remain active for up to 30 days. It is used to associate a referral with the appropriate Creator.

3.4. Advertising and Tracking

Clone Brick does not use:

• Advertising cookies.
• Cross-site behavioral tracking.
• Third-party analytics.

We do not sell or share personal information for cross-context behavioral advertising.

3.5. Cookie Controls

You can manage or remove cookies and local storage through your browser settings. Disabling essential cookies may prevent login or other account features from working correctly. Clearing local storage may remove saved shopping cart information.

4. How We Use Personal Information

We use personal information to:

4.1. Create and maintain customer and Creator accounts.

4.2. Process purchases and payments.

4.3. Arrange manufacturing, packing, and shipping of physical orders.

4.4. Deliver digital instructions and source files.

4.5. Process Creator sales, commissions, and payouts.

4.6. Prevent fraud, unauthorized transactions, and Platform abuse.

4.7. Enforce digital download limits and use order-reference watermarking.

4.8. Process refunds, cancellations, chargebacks, and payment disputes.

4.9. Investigate copyright complaints, takedown requests, and intellectual property disputes.

4.10. Meet applicable legal, tax, accounting, and recordkeeping obligations.

4.11. Send receipts, account notices, order updates, and other service-related communications.

4.12. Send occasional store announcements, subject to your ability to unsubscribe.

4.13. Maintain Platform security, troubleshoot technical problems, and prevent unauthorized access.

We do not use personal information for unrelated advertising or cross-site behavioral profiling.

5. How We Share Information

We share personal information with service providers and other recipients only as reasonably necessary for the purposes described in this Policy.

5.1. Stripe

Stripe processes customer payments and provides Stripe Connect services for Creator payouts, identity verification, and tax documentation.

5.2. Supabase

Supabase provides our database, authentication services, and file storage.

5.3. Vercel

Vercel provides website hosting and maintains technical server logs for security and debugging.

5.4. Resend

Resend delivers transactional, account-related, and store-announcement emails.

5.5. Manufacturing Partner

Our manufacturing partner is located in China. For physical orders, we provide the partner with the information needed to pack and ship purchased products, including:

• Recipient name.
• Shipping address.
• Items required to fulfill the order.

This involves transferring shipping information outside the United States.

5.6. Shipping Carriers and Label Services

We share the information needed to create shipping labels, transport packages, and deliver physical orders.

5.7. Creators

Creators may access limited information relating to their own sales, including:

• Order reference.
• Order date.
• Product sold.
• Sale amounts and earnings.

Creators do not receive buyers' email addresses or shipping addresses for digital sales.

5.8. Legal Authorities

We may disclose information when required by applicable law, legal process, or a valid government request.

5.9. Business Transfers

If Vice City Garage LLC is involved in a merger, acquisition, or similar business transaction, relevant personal information may be transferred to a successor as part of that transaction, subject to applicable law.

5.10. No Advertising Sales or Sharing

We do not sell personal information or share it for cross-context behavioral advertising.

6. How Long We Keep Information

We keep personal information only as long as reasonably necessary for the purposes described in this Policy, subject to applicable legal requirements.

6.1. Orders and Payments

Order, payment, refund, and related transaction records are generally retained for seven years for accounting, tax, dispute-resolution, and legal purposes.

6.2. Download Records

Digital download records, including download timestamps, IP addresses, and browser user agents, are generally retained for three years to support fraud prevention, download enforcement, and dispute resolution. Records may be kept longer when reasonably necessary for an active legal claim, dispute, or investigation.

6.3. Agreement Acceptance Records

Creator Agreement acceptance records are generally retained for seven years after the relevant Creator relationship ends, or longer when required for an active dispute or legal obligation.

6.4. Rejected Creator Applications

Rejected Creator applications and associated portfolio submissions are generally deleted within 90 days after rejection, unless retention is required for a legitimate legal or dispute-related purpose.

6.5. Account Information

Account information is retained while your account remains active. You may request deletion of your account information, subject to applicable legal obligations, unresolved transactions, and permitted recordkeeping requirements.

6.6. Uploaded Parts Lists and Design Files

Uploaded parts lists and design files are retained as reasonably necessary to provide the requested service, maintain associated records, or meet legal obligations.

6.7. Legal Holds

Information may be retained beyond normal periods when reasonably necessary to resolve an active dispute, comply with law, or preserve evidence. When information is no longer required, we delete it or otherwise dispose of it in accordance with applicable requirements.

7. Your Privacy Choices and Rights

Depending on where you live and applicable law, you may have the right to:

7.1. Request access to personal information we maintain about you.

7.2. Request correction of inaccurate personal information.

7.3. Request deletion of personal information, subject to lawful exceptions.

7.4. Request a copy or export of certain personal information.

7.5. Object to certain uses of your information.

7.6. Request that certain processing activities be restricted.

7.7. Unsubscribe from store announcements at any time.

7.8. Exercise applicable privacy rights without unlawful discrimination or retaliation.

7.9. How to Submit a Request

Send your privacy request to theenzowolfe@gmail.com. Please describe the request and provide enough information for us to identify the relevant account or records. We may ask for additional information reasonably necessary to verify your identity before fulfilling certain requests. We will respond within the time required by applicable law.

7.10. Limits on Deletion

We may retain information when necessary to:

• Complete outstanding transactions.
• Maintain legally required tax or accounting records.
• Resolve disputes or chargebacks.
• Prevent fraud or abuse.
• Comply with other legal obligations.

We will explain applicable limitations when responding to a request.

8. Security

8.1. We use encryption in transit to protect information transmitted between users and our services.

8.2. We use access controls to limit access to personal information and sensitive Platform resources.

8.3. Paid digital files are stored privately and delivered using short-lived download links.

8.4. Payment card information is processed by Stripe rather than stored as full card numbers by Clone Brick.

8.5. Creator identity verification and tax documentation are handled by Stripe Connect.

8.6. No online service or data storage system can guarantee complete security. Users should protect their account credentials and contact us if they suspect unauthorized account activity.

9. Children's Privacy

9.1. Clone Brick is not directed to children under 13 years of age.

9.2. We do not knowingly collect personal information from children under 13.

9.3. Creators must be at least 18 years old.

9.4. If we learn that we have collected personal information from a child under 13 without legally required authorization, we will take appropriate steps to delete that information.

9.5. Parents or guardians with concerns may contact theenzowolfe@gmail.com.

10. International Data Transfers

10.1. Clone Brick serves customers worldwide.

10.2. Personal information is processed in the United States through our Platform and service providers.

10.3. For physical order fulfillment, necessary shipping information is transferred to our manufacturing partner in China.

10.4. We limit information shared with the manufacturing partner to what is needed to fulfill physical orders.

10.5. Where applicable law requires safeguards for international transfers, we will use appropriate contractual, organizational, or other legally recognized protections.

10.6. International transfers may be subject to different privacy laws and protections than those available in your country.

11. European Union and United Kingdom Privacy Rights

This section applies where the EU General Data Protection Regulation (“GDPR”) or UK GDPR governs our processing of your personal information.

11.1. Data Controller

Vice City Garage LLC is the controller of personal information processed for the Clone Brick marketplace, except where another party independently determines the purposes and means of its own processing. Controller Contact: theenzowolfe@gmail.com

11.2. Legal Bases for Processing

Depending on the activity, we rely on the following legal bases:

• Contract performance: To maintain accounts, process orders, deliver digital purchases, arrange shipping, and administer Creator services.
• Legal obligations: To maintain required tax, accounting, and legally mandated records.
• Legitimate interests: To protect the Platform, prevent fraud, enforce download limits, investigate abuse, and manage disputes, subject to applicable balancing requirements.
• Consent: Where required, including for certain store-announcement communications and immediate digital delivery acknowledgments.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before withdrawal.

11.3. Your Rights

Subject to applicable law, individuals may request:

• Access to personal data.
• Correction of inaccurate data.
• Erasure of personal data.
• Restriction of processing.
• Data portability.
• Objection to processing based on legitimate interests.
• Withdrawal of consent where consent is the legal basis.

Individuals may also have rights concerning decisions based solely on automated processing where applicable.

11.4. Complaints

You may contact us at theenzowolfe@gmail.com. You also have the right to lodge a complaint with the appropriate data protection supervisory authority. UK individuals may contact the Information Commissioner's Office (ICO).

11.5. International Transfers

Where required, transfers of personal data outside the European Economic Area or United Kingdom will be supported by an applicable adequacy decision, appropriate contractual safeguards such as Standard Contractual Clauses or the UK International Data Transfer Addendum, or another legally permitted transfer mechanism.

12. California Privacy Rights

This section applies to California residents to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), applies to our business and processing activities.

12.1. Categories of Personal Information

Depending on how you use Clone Brick, we may collect:

• Identifiers, including names, email addresses, IP addresses, and account identifiers.
• Commercial information, including purchases, order history, refunds, and payments.
• Internet or network activity information, including login sessions, download activity, browser information, and server logs.
• Professional or business-related information submitted by Creators.
• User-submitted content, including portfolio materials, design files, and communications.

12.2. Purposes and Disclosures

We use these categories for the business purposes described in Section 4 and disclose them to the recipients described in Section 5.

12.3. No Sale or Advertising Sharing

Clone Brick does not sell personal information or share it for cross-context behavioral advertising. We do not use advertising cookies or third-party analytics.

12.4. California Consumer Rights

Where applicable, California residents may have the right to:

• Know what personal information we collect and how it is used.
• Access specific pieces of personal information.
• Request deletion.
• Request correction.
• Obtain information about applicable disclosures.
• Opt out of sale or sharing, if such practices occur.
• Limit certain uses of sensitive personal information, where applicable.
• Exercise privacy rights without unlawful discrimination or retaliation.

12.5. Requests

California residents may submit requests to theenzowolfe@gmail.com. We may verify identity before fulfilling requests and will respond according to applicable legal requirements. Because Clone Brick does not sell or share personal information for cross-context behavioral advertising, we do not currently offer an advertising sale or sharing opt-out for those activities.

13. Emails and Announcements

13.1. Clone Brick sends transactional and service-related emails, including:

• Purchase receipts.
• Account notifications.
• Order and shipping updates.
• Important service communications.

13.2. We may also send occasional store announcements.

13.3. Store announcements include a one-click unsubscribe option.

13.4. Unsubscribing from announcements does not prevent necessary transactional or account-related communications.

14. Changes to This Privacy Policy

14.1. We may update this Privacy Policy to reflect changes in our services, business practices, or legal obligations.

14.2. When we update the Policy, we will publish the revised version on clonebrick.com and update the “Last Updated” date.

14.3. We may also provide notice by email when appropriate or legally required.

14.4. Changes take effect on the stated effective date, subject to applicable law.

14.5. Where applicable law requires additional notice or consent for a change, we will provide it.

15. Governing Law

15.1. This Privacy Policy is governed by the laws of the State of Florida, United States, except where applicable mandatory privacy or consumer protection laws provide otherwise.

15.2. Nothing in this Policy limits rights that individuals have under applicable federal, state, EU, UK, or other mandatory privacy laws.

16. Contact Us

For questions, privacy requests, or concerns about this Privacy Policy, contact Vice City Garage LLC, a Florida Limited Liability Company operating as Clone Brick. Website: https://clonebrick.com. Email: theenzowolfe@gmail.com.

Privacy Policy — Version 1 — Effective October 14, 2026 — Last Updated October 14, 2026