DRAFT: placeholder wording until the final text from the COPPA package is in. Do not publish while this box shows.

Privacy Policy

Effective [EFFECTIVE DATE]. Beyond Their Years is run by [OPERATOR NAME].

The short version

• We collect only what we need to run a family membership: the parent's email, a password (stored scrambled, never readable), and the PayPal subscription that pays for it.
• Your children's names, characters and progress stay in the browser on your own device. They are not sent to us.
• No ads, no tracking, no analytics, and we never sell anything about you or your children.

What we collect from parents

• Your login: your email address and your password, which we keep only as a salted, one-way hash.
• Your membership: your PayPal subscription ID and what PayPal tells us about it (active, cancelled, next billing date). PayPal handles the payment itself; we never see your card or bank details.
• Your consent: the date you agreed to this policy and which version you agreed to. We do not store your IP address with it.
• Sign-in safety: a count of recent failed sign-in attempts for your email, kept for 15 minutes to stop password guessing.

What stays on your device

Each player's name, character, stars, streak and lesson progress (including the players and scores in the Korean, Japanese, Chinese and English games) are saved in your browser's storage on the device you use. They never reach our servers. Before a child plays, a parent types their name to sign a consent; that signature and its date are saved the same way, only in this browser. You can see and delete them any time from the Parents screen. Clearing your browser data also removes them.

Cookies

We use one cookie to keep you signed in (and, for the site owner only, a cookie that turns on a preview switch). We use no advertising or tracking cookies.

Who else is involved

• PayPal processes membership payments under its own privacy policy.
• Cloudflare hosts the site and stores our account records. Like any web host, it handles basic connection information to deliver pages.
• Your browser: the language games read words aloud with your device's built-in voices (on some browsers, such as Chrome, these voices are provided online by the browser maker). The games do not use the microphone, and we never receive or store any recording.

How long we keep things

We keep your account while your membership is active, and delete it within about 90 days after your last paid period ends. You can delete it yourself at any time from the Parents screen; if you are signed in on another device, that device may keep access for up to a day.

Your choices

You can review or delete your children's information from the Parents screen, delete your whole account there, and cancel your membership in PayPal. For anything else, contact us.

Changes

If we change this policy, we will ask you to read and agree to it again before the kids' area opens.

Contact

[OPERATOR NAME]
[MAILING ADDRESS]
[CONTACT EMAIL]

See also our Children's Privacy Notice and Terms.