Privacy Policy
Last updated: 26 September 2026
BrickDeal is a deal catalogue for LEGO-compatible brick sets. Browsing it needs no account: there is no sign-up, no newsletter and no login for visitors. The only place we handle personal data is the TikTok connection described below, which is used by us to publish our own videos.
TikTok Login Kit
We use TikTok Login Kit so the owner of the BrickDeal TikTok account can connect it to our own server. When an account is connected, TikTok gives us:
- Basic profile info (the
user.info.basicscope): the account'sopen_id, display name and avatar image URL. - An access token and a refresh token (the
video.uploadscope), which let our server upload video files to that account.
This connection is only ever made by us, for the BrickDeal account. We do not offer TikTok login to visitors and we never receive anyone else's TikTok data.
What the tokens are used for
Only one thing: uploading video files to the account owner's own TikTok drafts through TikTok's Content Posting API. A video sent this way is not published — it lands in the drafts inbox in the TikTok app, where the account owner writes the caption and decides whether to post it. We do not read, browse, follow, comment, message, or post publicly on anyone's behalf.
How the tokens are stored
Tokens are held server-side only, in a file on our own server that is outside the web root and readable only by the account that runs the uploader. They are never sent to a browser, never written to logs, never shared with anyone and never sold. They are kept only as long as the connection is in use, and are deleted on request — email natikyan153@gmail.com and we will delete the stored tokens and profile identifiers. You can also revoke our access at any time from TikTok's own security settings.
AliExpress affiliate links and cookies
Every deal on the site links to AliExpress through an affiliate link. When you follow one, AliExpress records the click and sets its own cookies in your browser so a later purchase can be attributed to us, which is how we earn a commission. That tracking is done by AliExpress under its own privacy policy, not by us: we see only that a commission was paid, never who you are or what else you bought. Product images on the site are loaded directly from AliExpress's image servers, so those requests reach AliExpress too.
Analytics and cookies we set
None. The site runs no analytics, no tag manager, no advertising pixels
and no tracking scripts, and it sets no cookies for visitors. The one cookie this domain
ever sets is a short-lived, server-side CSRF token during the TikTok connection flow
(tiktok_oauth_state, HttpOnly, 10 minutes), and only for the person doing the
connecting. Fonts are loaded from Google Fonts, which means your browser requests them
from Google's servers.
Server logs
Our web server keeps standard access logs — IP address, timestamp, requested URL, user agent — to operate the site and diagnose faults. They are not used to profile anyone and are rotated and discarded automatically.
Contact
Privacy questions, data deletion, anything else: natikyan153@gmail.com. See also our Terms of Use.