Privacy Policy

The short version

Children can play without telling us anything about themselves. We never ask for a name, show no ads, have no chat and never sell data. Only the adult who subscribes gives us an email address.

Who is responsible

Etalia.ai Tech Solutions AB (org. nr 559495-4959), Häreslattsvägen 8, 442 66 Marstrand, Sweden, is responsible for your personal data (the "controller"). Questions: hello@lillaforskaren.me.

What we collect, and why

• Playing: a random game ID in a cookie, and the progress linked to it (discoveries, mixes, hints used). This is needed to run the game. It is deleted automatically 5 days after your last visit. A few settings (such as music on/off) are kept only in your browser.
• Technical data: IP address and browser details in our server logs, used to keep the game secure and fix problems (legitimate interest). Our hosting provider keeps them for a few days at most, and we don't store them anywhere else.
• Usage statistics: Google Analytics (through Google Tag Manager) tells us which pages and game features are used, on what kind of device and from which country. It uses cookies and only runs if you accept them in the cookie banner (consent). We use it to improve the game.
• Parent account: email address and sign-in ID (sign-in by Auth0), saved discoveries, and your subscription and hint balance. Needed to provide Premium (contract).
• Payments: Stripe collects card details, name and billing address. We never see your full card number. We keep payment records for 7 years because Swedish bookkeeping law requires it.
• Emails you send us: kept as long as needed to answer you.

Hints written with AI

When a hint is written by AI (OpenAI), we send only the names of game items and the language. Nothing about you or your child is sent.

Who helps us

These companies process data for us, only to provide the game: Heroku/Salesforce (hosting), Redis Cloud (game sessions), MongoDB Atlas (accounts), Auth0 by Okta (sign-in), CookieScript (cookie banner), Stripe (payments), Google (statistics) and OpenAI (hint text, no personal data). Some of them are in the United States. Transfers are protected by the EU–US Data Privacy Framework or the EU's standard contractual clauses.

How long we keep data

Game sessions: 5 days after the last visit. Account data: until you delete your account. Payment records: 7 years. Server logs: a few days at most.

Cookies

Needed cookies: a game cookie (5 days), a sign-in cookie for parents (up to 1 year), a cookie that remembers your cookie choice, and Stripe's cookies during checkout (fraud prevention). Only if you accept: Google Analytics cookies (statistics, up to 2 years). You can change your choice at any time with "Cookie settings" at the bottom of the page.

Children

The game is made for children to play, but accounts and purchases are for adults only. We don't knowingly collect personal data from children. If you think a child has given us their email address, contact us and we will delete it.

Your rights

You can delete your account yourself with "Delete account" at the bottom of the game. You can also ask to see, correct, delete or get a copy of your data, and object to how we use it. Email hello@lillaforskaren.me and we will answer within one month. You can also complain to the Swedish Authority for Privacy Protection (IMY) or the data protection authority where you live.

Changes

When we change this policy, we update the date at the top. If a change matters to account holders, we will email you.