Privacy Policy

Overview

TinyPlay (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use our website at tinyplay.app.

Analytics

We use Simple Analytics to collect anonymous usage data. Simple Analytics is a privacy-first analytics tool that:

• Does not use cookies
• Does not track visitors across websites
• Does not collect personal information
• Is fully GDPR compliant without consent banners
• Stores data in the European Union

We collect basic page view data and anonymous events (like when you generate an activity or use filters) to understand how our service is used and improve it.

Data we store

TinyPlay stores minimal data to provide our service:

• Activity database: Our collection of activity ideas, stored in Supabase (a secure cloud database hosted in the EU/US)
• Feedback votes: Anonymous thumbs up/down votes on activities to help us improve recommendations (no personal data attached)
• Contact messages: If you use our contact form, we store your email address, subject, and message to respond to your inquiry
• Newsletter signups: If you subscribe to our email list, we store your email address along with a record of your consent (the date and time, the wording you agreed to, and the IP address and browser used to sign up). We keep this record so we can show that you opted in. See the “Email newsletter” section below.
• Local storage: Your browser may store recent activity IDs locally to avoid showing you the same activity repeatedly. This data never leaves your device.

Email newsletter

Subscribing to our newsletter is entirely optional. When you sign up:

• What we collect: your email address, plus proof-of-consent details (date and time, the consent wording, the signup IP address, and the browser's user-agent string).
• Why (legal basis): your consent, given by submitting the signup form. We process this data only to run the newsletter.
• How it's stored: in our Supabase database (EU region). The list is not publicly accessible and is never sold or shared with advertisers.
• Sending: we are still building the list and are not sending newsletter emails yet. We will only email subscribers once the newsletter launches, and every email will include an unsubscribe link.
• Withdrawing consent: you can ask us to remove your address at any time via the contact form, and we will delete your record.

What we don't collect

We do not collect, store, or process:

• Your name or any contact details beyond an email address you choose to give us
• Cookies or cross-site tracking of any kind
• Device fingerprints or advertising identifiers
• Analytics IP addresses (Simple Analytics anonymizes these; the only IP we retain is the one recorded as proof of newsletter consent)
• Any data about your children

Third-party services

We use the following third-party services:

• Simple Analytics: Privacy-first analytics (their privacy policy)
• Supabase: Database hosting (their privacy policy)
• Netlify: Website hosting (their privacy policy)

Your rights

For the limited personal data we hold (contact messages and newsletter signups), you have the right to:

• Access the data we hold about you
• Correct it if it's wrong
• Have it deleted (“right to be forgotten”)
• Withdraw consent for the newsletter at any time

To exercise any of these, just contact us and we'll action it promptly.

Data retention

We keep newsletter signups for as long as you stay subscribed, and the related proof-of-consent details for as long as we run the list, so we can demonstrate that consent was given. If you unsubscribe or ask to be removed, we delete your record. Contact messages are kept only as long as needed to handle your inquiry.

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last updated” date.

Contact

If you have questions about this Privacy Policy, please use our contact form.