Children’s Privacy Policy

Our promise to parents

Bloomy Games is a website for children aged 4–12. We built it so that children can play and learn without us collecting personal information from them. We follow the U.S. Children’s Online Privacy Protection Act (COPPA), including the amendments that took effect in 2025, the UK Age Appropriate Design Code, the EU/UK GDPR, Canada’s PIPEDA and the Australian Privacy Principles.

What we collect

When children play without an account (guest mode)

• No personal information. No names, emails, photos, voice recordings, precise location, contact lists or persistent identifiers used for tracking.
• Progress stays on the device. Stars, stickers, a nickname you choose and settings are saved in your browser’s local storage. We cannot see them. Clearing your browser data or using “Delete all data” in the Parent Area removes them.
• Age group, not birthday. To make games fit, we ask for an age group (4–6, 7–9 or 10–12) or an age in years. It is stored only on this device, is never a date of birth, and is never used for advertising.
• Anonymous usage counts (optional). We may count events like “a game was completed at level 2” to learn which games are useful. These counts contain no user ID, device ID, cookie or free text, are sent to our own servers only, and are kept as daily totals. Parents can turn this off in the Parent Area.
• Technical logs. Like every website, our hosting provider briefly processes IP addresses to deliver pages and protect against abuse. We do not use them to identify or profile anyone, and they are deleted within 30 days.

Speech & sound

Read-aloud uses your device’s built-in voice. Text is turned into speech on the device; nothing is recorded or sent to us. We never use the microphone or camera.

What we never do

• No behavioural or targeted advertising, ever.
• No selling or renting of any data.
• No third-party tracking pixels, advertising SDKs or social media widgets.
• No chat, messaging or user-generated content that could expose children to strangers.
• No “dark patterns”: no fake urgency, no loot boxes, no streaks that punish missed days.

Cookies

We do not use cookies for children. Local storage is used only to remember progress and settings on your device.

Third parties

We use service providers only to run the website (for example, hosting). They process data on our instructions and may not use it for their own purposes. Fonts and images are served from our own domain. We do not disclose children’s information to third parties. If we ever wished to, we would first obtain your separate, verifiable parental consent for that disclosure, and saying no would never stop your child from playing.

Family accounts (optional, for grown-ups)

Parents, guardians and teachers can create a free account to keep each child’s progress in sync across devices. Only adults can create accounts. Children never sign up, log in or give us an email.

What we collect, and why

• Your email address — to sign you in with a one-time link or code (there is no password) and to send account notices, such as confirming your consent.
• Whether you are a parent/guardian or a teacher, and that you confirmed you are 18 or older.
• For each child you add: a nickname (a first name or made-up name — no surnames needed), the buddy character they picked, their age group or age in years, and their game progress (stars, levels, skills practised, stickers, the days they played and a list of finished games). This lets progress follow them to any device you sign in on and lets you see how they’re doing.

We never collect a child’s email, photo, voice, location, contacts, full name or date of birth, and there is no chat, public profile or any way for children to contact each other.

Your consent comes first

• After you sign in, we show you a direct notice of exactly what is collected. Nothing about any child is stored in your account until you agree.
• We verify consent using the “email plus” method permitted by COPPA for information used only internally: you consent from the email address you proved you control, and we send a confirmation email to that address afterwards. We may offer stronger verification methods in future.
• Consent to disclose information to third parties is separate, is off, and is not offered — we don’t share children’s information.
• We record when you consented and to which version of this notice, and ask again if it materially changes.

How it’s protected

• Data is stored with our database provider (Supabase) and encrypted in transit and at rest. Database rules make each family’s records accessible only to that family’s signed-in parent — and only while their consent is active.
• Guest players on a device are never uploaded unless you choose “Add to family”.
• Signing out removes your family’s profiles from that device; they come back when you sign in again.

Deleting data

• Delete one child from the Parent Area: their profile and progress are deleted from our servers and every device.
• “Stop syncing” deletes all your children’s data from our servers and withdraws your consent, while keeping progress on your device.
• “Delete my account” permanently deletes your account and everything linked to it, immediately.
• Synced data for a child who hasn’t played for 12 months is deleted automatically.

Your rights

You can review, download or delete your child’s information at any time in the Parent Area (“Download my data”, “Delete all data”, and — with a family account — deleting a child, “Stop syncing” or “Delete my account”). You can also withdraw consent at any time. For any request, contact us at privacy@bloomygames.com and we will respond within 30 days.

Security

The site is served only over HTTPS with strict security headers. Without a family account, no children’s information reaches our servers at all. With one, we keep only the minimal information listed above, protected by per-family access rules, and never in advertising or analytics systems.

Changes

If we make a material change to this policy, we will update the date above and, where required, ask for parental consent again before any new collection.

Contact

Bloomy Games — Privacy Team
Email: privacy@bloomygames.com