Privacy Policy
This is a translation provided for convenience. The Russian version of the document is the main one: if the texts diverge, it prevails.
1. General
Brick Agency ("we", "the studio") respects your privacy. This Policy explains what information about you reaches us when you use the brickworld.biz website (the "Site"), what it is for, how long it is kept and what you can do with it. The document covers the Site itself and your account on it. By using the Site you confirm that you have read this Policy and agree with the arrangements described here. If you do not agree with them, please do not use the Site. Revised 12 August 2026.
2. What information we receive
Information reaches us in three ways.
You give it to us yourself
When you write to support, we keep your message and our answer.
We create it ourselves when we take on your work
If you have ordered work from us, we create an order record: its name, the scope of work, the amount, the date, the state and, where there is one, the brief. Files are attached to the record: the agreement and the finished materials. The record is tied to your Telegram identifier, so it can appear before you first sign in to the Site: until the first sign-in under that identifier it holds neither your name nor your photo, only the order itself.
Telegram passes it to us
When you sign in to your account, Telegram passes us your identifier and first name, and also, if you have them set, your last name, username and a link to your profile photo. You enter your password on the Telegram side: it is not passed to us and not stored by us.
The Site obtains it itself
- A session record: IP address, browser details, the time it was created and its term. It is needed to keep you signed in and to make it possible to investigate if someone else tries to get into your account.
- The server request log: the page address, IP address, browser details, the response code and the time. It is needed to protect the Site from overload and abuse.
- A counter of openings of our work cards. So that one visitor is not counted twice in a day, an irreversible fingerprint is computed from the IP address and browser details, and it changes every day. The counter saves neither the IP address nor the browser details.
We do not buy information about visitors from third parties and do not ask for information of a special nature: about health, beliefs or origin.
3. Why we need this information
The information we receive is needed only to make the Site work and to do what you ask us to do:
- to recognise you when you sign in and show you your own account rather than someone else’s;
- to show you your orders and let you download the files that come with them;
- to answer your messages to support;
- to keep the Site secure: to notice overload, access guessing and break-in attempts;
- to understand which of our works are opened more often, so that we can decide what to show on the Site.
We do not use your information for advertising, we do not build an advertising profile and we make no automated decisions about you on its basis. Your correspondence with us is not used to train artificial intelligence models.
4. Cookies
The Site uses a small number of cookies: they hold your sign-in, protect the sign-in procedure and store the language code of the version you opened. There are no advertising cookies and no third party counters on the Site. We count visits to the Site ourselves: that information stays with us and is not passed to third parties. The count works without cookies and saves nothing in your browser. The full list of files with their purpose, terms and ways to refuse them is gathered on a separate page, Cookie Use.
5. Who we pass information to
We do not sell your information, do not rent it out and do not pass it to anyone for gain. Some of it inevitably passes through those without whom the Site does not work:
- Telegram, through which you sign in. It receives the fact that a sign-in was requested and returns your profile to us; everything that happens on its side is governed by its own rules.
- The provider of the servers the Site runs on. It supplies the hardware and does not use your information for its own purposes.
We may disclose information in response to an official request we are obliged to comply with, and also where it is necessary to protect our rights or the safety of people. If that happens and we are not forbidden to speak about it, we will let you know.
6. How long we keep information
| What | How long it is kept |
|---|---|
| Profile | As long as your account exists |
| Orders and their files | As long as your account exists; individual files can be removed at your request |
| Sign-in session | 30 days from the moment you sign in; ends immediately when you sign out |
| Server request log | No longer than seven days, then overwritten |
| Visitor fingerprint in the counter | One day; yesterday’s already points at nobody |
| Backups | The database for the last 14 days, file archives for the last four weeks |
Profile
How long it is kept: As long as your account exists
Orders and their files
How long it is kept: As long as your account exists; individual files can be removed at your request
Sign-in session
How long it is kept: 30 days from the moment you sign in; ends immediately when you sign out
Server request log
How long it is kept: No longer than seven days, then overwritten
Visitor fingerprint in the counter
How long it is kept: One day; yesterday’s already points at nobody
Backups
How long it is kept: The database for the last 14 days, file archives for the last four weeks
If you want to delete your account, write to us: we will delete the profile, the sessions and the orders together with the attached files within 30 days. They leave the backups as those rotate, which is to say no later than the same term.
7. How we protect information
What we do about it:
- The Site works only over a secure connection; a request over an ordinary one is redirected to the secure one.
- The sign-in cookies are closed to page scripts and travel only over a secure connection.
That said, there is no such thing as completely safe transmission of data over the internet, so nobody can promise absolute protection, and neither can we. We do everything to keep the risk as small as possible. If a leak does happen and it affects your information, we will tell you about it: what exactly happened, which information it concerns and what is worth doing about it.
8. Your rights
You can:
- find out what information about you we hold and receive a copy of it;
- ask us to correct an inaccuracy;
- ask us to delete your account together with the information about it;
- block or delete cookies using your browser.
To exercise any of these rights, write to us; the contact is at the end of the document. We may ask you to confirm that the account is really yours: that is protection against an outsider disposing of someone else’s information. We answer such messages no later than within 30 days.
9. Children
The Site is not intended for children, and we do not knowingly collect information about them. If you believe that a child has given us information about themselves, write to us and we will delete it.
10. Links to other resources
The Site has links pointing outwards: channels and chats in Telegram, bots, our pages on Behance and Instagram, the websites of projects and of our clients. When you follow such a link you come under the rules of that resource rather than this Policy. We are not responsible for how outside resources handle your data, and we advise reading their documents.
11. Changes to the Policy
We may update this Policy: for example, if new sections appear on the Site or the way we handle information changes. A new revision is published on this page and its date is given in the first section. By continuing to use the Site after a new revision is published, you agree with it.
12. How to contact us
For any questions about this document and about your information, write to us on Telegram: or by email: hello@brickagency.email. These are the same contacts that are given on the Site.