Privacy Policy

1. Introduction

Brain Play is committed to protecting the privacy of children and their parents or guardians. This Privacy Policy explains how we handle information when you use Brain Play at https://www.brainplayy.com.

This policy complies with:

• EU General Data Protection Regulation (GDPR)
• German Federal Data Protection Act (DSGVO / BDSG)
• Children's Online Privacy Protection Act (COPPA)
• UK GDPR where applicable

2. Data Controller

Data Controller: Brain Play
Contact Email: brainplayy@gmail.com
Location: Freiburg, Germany

3. What Data We Collect

We collect NO personal data from children.

Brain Play stores the following information locally on your device using browser localStorage. This data never leaves your device and is never transmitted to our servers:

• Child profile names and chosen avatars
• Game progress and scores
• Stars and achievements earned
• Sound and display preferences
• Session history for the parent dashboard
• Privacy consent records

We do NOT collect:

• Names, email addresses or contact information from children
• Location data beyond country level
• Device identifiers or IP addresses for profiling
• Behavioural or advertising tracking data
• Advertising identifiers
• Biometric data of any kind

4. Analytics

Essential local storage. Profiles, game progress, preferences, and privacy consent stay on your device in browser localStorage. This data is not uploaded as child profile or gameplay records to Brain Play servers.

Vercel Analytics and Speed Insights. We use these privacy-friendly tools to understand aggregate site usage and keep Brain Play fast. They are designed to collect anonymised metrics such as page views, general country-level location, and performance data without advertising profiles. See Vercel's analytics privacy documentation.

Google Analytics 4 (optional). If a parent or guardian chooses Accept All in our privacy banner, we may use Google Analytics 4 to learn which pages and games are popular and to spot technical issues so we can improve Brain Play. We do not use Google Analytics for advertising, to sell children's data, or to build marketing profiles of children. Google acts as a processor for this analytics data. Parents can withdraw consent anytime via Parent Dashboard → Reset Cookie Preferences (Essential Only). See Google's Privacy Policy.

5. Children's Privacy

Brain Play is designed for children aged 4 to 8 under parental supervision. We do not collect personal information from children for accounts or marketing, require registration, show advertising to children, or sell children's data. Child profile names, scores, and gameplay progress stay on your device.

All gameplay data is stored locally on the parent's device. Parents have full control and can delete all data at any time through the Parent Dashboard settings.

In compliance with GDPR Article 8 and COPPA, Brain Play does not process personal data of children without verifiable parental consent. Our privacy-by-design approach ensures no personal data is collected from children.

6. Legal Basis for Processing

Under GDPR Article 6, our legal basis for essential local data storage is legitimate interest (Article 6(1)(f)) — necessary to provide the Brain Play educational service. Processing is minimal, proportionate, and necessary for providing the service.

Optional Google Analytics runs only with parental consent (Article 6(1)(a)) when Accept All is chosen. Consent can be withdrawn at any time in Parent Dashboard settings.

7. Data Retention

Local device data is stored until the parent manually deletes it via Parent Dashboard settings or clears browser data. There is no automatic expiration. Vercel Analytics retains anonymised data per their own policy. If Google Analytics is enabled by consent, Google retains analytics data per Google's retention settings for the Brain Play property. No child profile or gameplay records are retained by Brain Play on our servers.

8. Your Rights Under GDPR

As a parent or guardian you have the right to:

• Access: request information about data we hold
• Erasure: delete all data via Parent Dashboard settings at any time
• Portability: all data is already on your device
• Rectification: update profile information directly in the app
• Objection: stop using the app at any time
• Withdraw consent: reset privacy preferences in Parent Dashboard settings

Since all data is stored locally on your device you have complete control at all times. To exercise your rights contact: brainplayy@gmail.com

9. Third Party Services

Brain Play uses Vercel for hosting and privacy-friendly aggregate analytics. When a parent chooses Accept All, Google Analytics 4 may also process analytics data as described in section 4. We do not share child profile names, scores, or gameplay records with third parties for advertising. We do not sell children's data.

10. Cookies and Local Storage

We use browser localStorage to save game progress, privacy consent, and parental acknowledgment on your device. This is essential for the service to function.

If you choose Accept All, optional Google Analytics may use cookies or similar technologies to measure site usage. If you choose Essential Only, we do not enable optional Google Analytics. You can change this later with Reset Cookie Preferences in the Parent Dashboard. localStorage data stays on your device and can be cleared via browser settings or Parent Dashboard.

11. Changes to This Policy

We may update this Privacy Policy occasionally. Changes will be posted on this page with an updated date. Continued use of Brain Play after changes constitutes acceptance of the updated policy.