Privacy policy
Effective October 7, 2026
Puddlebright is a learning app for children aged 2 to 6. One person runs it, not a company. "We" and "us" in this policy mean that person.
The short version
- Children use Puddlebright with a parent, on the parent's account.
- We collect your email address so you can sign in, and save your child's course progress on your account so they can pick up where they left off.
- We don't collect personal information from children: no names, contact details, photos, voice, location, or anything they type.
- We don't show ads, use trackers, or sell or share your data.
- Deleting your account deletes everything on it, including progress.
What we collect
- Your email address. You give it to us when you sign in. We use it to create your account, send you sign-in codes, and write to you about your account, such as announcing changes to this policy.
- Course progress. We save which lessons your child has finished on your account. We use this only to resume lessons and choose the next one. We don't record free-text answers, recordings, or each tap.
- A nickname, if you add one. You can give your child a nickname to tell their progress apart. You type it, not your child. Use a nickname, not their full name.
- One cookie, your IP address, and browser details. A cookie keeps you signed in, and our servers see the IP address and browser details of the device you use. We use them only to keep Puddlebright running and secure, for example to limit sign-in attempts and fix errors. It's the only cookie we use, so there's no cookie banner.
Children
Puddlebright doesn't collect personal information from children. There are no accounts for children, and children can't type, upload, record, or chat in Puddlebright. We don't collect a child's name, contact details, photo, voice, or location.
While your child plays, our servers see your sign-in cookie and the device's IP address and browser details, and save course progress to your account. We use these only to run Puddlebright, never to build a profile of your child or for ads.
What we don't do
- We don't sell or rent your data.
- We don't show ads or share data with advertisers.
- We don't use analytics, ad pixels, or tracking tools.
- We don't share course progress or nicknames with anyone.
Service providers
These service providers help us run Puddlebright. They may use the data they receive only to provide their service to us.
- OVHcloud US hosts our servers.
- PlanetScale hosts our database.
- PostShiba sends sign-in emails. It receives your email address.
- Sentry receives error reports and server logs, and checks that the site is up. It receives IP addresses and browser details, which we use for security and performance. We remove email addresses and sign-in codes first.
- Honeycomb receives performance measurements. It receives IP addresses and browser details, which we use for security and performance. We remove email addresses and sign-in codes first.
- Cloudflare runs our domain's DNS.
- Fastmail hosts hello@puddlebright.com, so it handles messages you send us.
We store course progress and nicknames only in our database and handle them only on our servers. They never go to the other providers. Error reports and performance measurements use ID numbers instead.
We'll also disclose information if the law requires it, for example to answer a valid court order. If Puddlebright passes to someone else, such as a company we set up or a buyer, we'll tell you before your information becomes subject to a different privacy policy.
See or delete your data
Email hello@puddlebright.com from your account's email address, and we'll show you what we hold or delete your account. Deleting your account deletes its course progress and nicknames too. We act only on requests from the account's email address, to keep strangers from deleting your data. We're building a way to do this in the app.
How long we keep data
- Your account, its progress, and nicknames stay until you delete the account or ask us to.
- We delete sign-in codes and sessions once they expire.
- Sentry keeps server logs for 30 days. The server itself keeps only a small, rolling buffer.
- We keep emails you send to hello@puddlebright.com only as long as we need them to help you, and delete them if you ask.
- Backups of our database may hold deleted data for up to 2 days before they expire.
Security
We encrypt all traffic to Puddlebright, and only we can reach your data. If a breach affects your data, we'll email you.
Where your data is stored
Our servers and database are in the United States.
Changes to this policy
When we change this policy, we'll update the date at the top. If a change is important, we'll email you before it takes effect, and ask for your consent where the law requires it.
Contact us
Email hello@puddlebright.com.