Privacy Policy

    Last updated: March 2026

    Overview

    MakerPlay ("we", "our", "us") is a game-creation platform designed for children, operated under parent supervision. We are committed to protecting the privacy of children and complying with the Children's Online Privacy Protection Act (COPPA).

    Information We Collect

    From Parents

    • Email address — used for account creation, login, and communication. When you sign in with Apple, Google, or Meta, we receive the verified email (and name, if provided) from that provider.
    • Name — the parent's name for account identification.
    • Payment information — processed securely by Stripe; we do not store card details.

    From Children (via Parent-Created Profiles)

    • Username — a randomly generated public handle chosen by the parent, displayed alongside shared games.
    • Age range — used to tailor content difficulty (e.g. "5-7", "8-10").
    • Coach preference — which AI coach character guides the child.

    We do not collect a child's email address, real full name, phone number, physical address, photo, or any other personally identifiable information.

    How We Use Information

    • To provide and improve the MakerPlay service.
    • To personalise the learning and game-building experience based on age range.
    • To display creator attribution (username) on publicly shared games.
    • To communicate with the parent about their account.

    AI Training Disclosure

    AI and Machine Learning: We do not use any information collected from children, including AI Coach chat logs or game code, to train or improve our AI models or those of our third-party providers. AI interactions are used solely to provide real-time assistance to the child during their session.

    Parental Rights (COPPA)

    As a parent, you have the right to:

    • Review your child's profile information at any time in Settings.
    • Delete your child's profile and all associated games by contacting us.
    • Refuse further collection — you may delete the account at any time.

    Only a parent with an authenticated account can create or modify a child's profile. Children do not have their own login credentials.

    We verify parental identity and consent through a secure payment transaction via Stripe. This ensures that only an authorized adult can enable public sharing features for a child's profile.

    Data Sharing

    We do not sell, rent, or share personal information with third parties for marketing purposes. We may share data with:

    • Service providers (hosting, payment processing, analytics) who need it to operate the service.
    • Legal authorities when required by law.

    We only share child data for integral purposes necessary to operate MakerPlay (e.g., cloud storage and AI processing). We do not disclose child data for non-integral purposes like marketing, profiling, or third-party advertising. If we ever seek to share data for non-integral purposes, we will obtain separate, explicit parental consent first.

    For a complete list of our subprocessors, see our Subprocessors List.

    Data Security

    We use industry-standard security measures including encryption in transit (TLS), encrypted storage, and row-level security policies on our database.

    Automated Data Redaction: To protect child privacy, we utilize automated filtering technology (Regex) to scan and redact common personal identifiers—such as email addresses and phone numbers—from AI interaction logs before they are stored in our database. While no automated system is perfect, this "de-identification" process is designed to ensure that inadvertent sharing of personal details by a child does not result in the permanent storage of that data.

    For users in the European Economic Area (EEA) and the UK, we rely on Standard Contractual Clauses (SCCs) provided by our third-party subprocessors to ensure your data is handled with an equivalent level of protection as required by local law.

    Data Retention

    We retain account data for as long as the account is active. When an account is deleted, all associated data (parent profile, child profiles, projects) is permanently removed.

    Functional Interaction History: We retain the conversation history between your child and the AI Coach for as long as the specific game project is active. This history is technically necessary to provide 'contextual memory,' allowing the AI to understand previous instructions and help your child continue building their game over multiple sessions. If a project is deleted, the associated interaction history is permanently removed from our active database.

    Contact Us

    For questions about this Privacy Policy or to exercise your parental rights, please contact us at privacy@makerplay.ai.