Last updated: July 2026
Lucy's Dresshouse ("the App") is a children's educational game designed for children ages 3–7. We are committed to protecting children's privacy and complying with the Children's Online Privacy Protection Act (COPPA).
The App collects the following data, which is stored locally on your device:
All game data is stored in your browser's localStorage by default. This means data stays on your device and is not transmitted to any server unless you explicitly enable the optional cloud sync feature (see below).
Character voices and narration are pre-generated audio files bundled with the App and played locally. No question text, story dialogue, or child audio is sent to any third-party voice service while the App runs:
The App includes pre-generated background music files that are bundled with the App and played locally. No data is transmitted to generate or play music.
If you choose to create an account and enable cloud sync, your child's profile and progress data (the categories described in "What Data We Collect" above) will be stored on Supabase servers (hosted in the US) to allow cross-device play. This feature is entirely opt-in and disabled by default, and no child data is uploaded until parental consent is verified (see "Verifiable Parental Consent" below). Cloud sync requires a parent email address and password. You can delete your account and all associated cloud data at any time through Settings → Account → Delete Account.
If you purchase a premium subscription, payment is processed by Stripe, Inc. Card details are collected by Stripe's hosted checkout and are nevertransmitted to or stored by the App. We receive only a customer ID, your subscription status, and billing metadata needed to grant premium access. Stripe's privacy policy is available at stripe.com/privacy.
We use Resend to send transactional emails, including parental consent verification, weekly progress digests (opt-in), and account-related notifications. Only the parent email address and the specific email content are shared — the weekly digest includes your child's first name and progress statistics, sent only to the verified parent address. Resend does not use this data for marketing. Children's email addresses are never collected.
The App is hosted on Vercel. Vercel processes standard web-server request metadata (IP address, user agent, timestamp) to deliver the App. This data is used only for infrastructure operation and is not tied to a child's profile or used for advertising.
We use Sentry to detect and diagnose technical errors so we can fix them. Sentry receives error reports (such as the type of error and the screen it occurred on) and, when an error happens, a short diagnostic recording of the interface state. We have disabled the automatic collection of personal information, and these reports are used solely to keep the App working — never for advertising or profiling.
We collect two kinds of anonymous, aggregate analytics to make the product better. Neither contains personal data, neither uses cookies, and neither can identify you or your child. Performance measurements (how quickly pages load and respond) are collected across the App so we can keep it fast on real devices. Visit statistics (page views and how visitors found us) are collected only on our public website pages — the homepage and informational pages that parents browse — and never inside the child's app experience. Visitors are counted with a short-lived anonymous hash that cannot be used to track anyone across websites or over time. This data is processed by Vercel, our hosting provider, is never used for advertising or profiling, and is never combined with any account or child data.
The App does not contain any advertising. We do not use third-party advertising trackers, analytics cookies, cross-site or cross-app tracking, or any technology that builds an advertising profile of your child. We do not sell, rent, or share any data with third parties for marketing purposes.
The App does personalize the learning experience inside the App: it adapts question difficulty to your child's progress and leans activities toward themes your child picks (their "favorites"). Like all game data, this personalization data stays on your device unless you enable cloud sync, is never used for advertising, is never shared with or sold to anyone, and is deleted along with everything else when you delete your data.
The App uses browser localStorage to save game progress and settings. We do not use tracking cookies, advertising cookies, or any third-party cookies. If you enable cloud sync, Supabase may set a session cookie to maintain your login. This cookie is strictly functional and is not used for tracking or advertising.
When you create an account to enable cloud sync, we use the FTC-approved "Email Plus" method to obtain verifiable parental consent:
Parents can re-enable cloud sync at any time from the Settings page, which restarts the consent verification process. Without cloud sync, all data stays on the device only.
Parents can delete all of their child's data at any time from the Parent Dashboard → Delete All Data. This permanently removes all game data from the device, including progress, outfits, achievements, learning preferences, and settings. This action cannot be undone.
If you have enabled cloud sync, you can delete your account and all cloud data through Settings → Account → Delete Account.
You can also export your child's data before deleting it using the "Download All Data" button on the Parent Dashboard.
Local data persists on your device until you choose to delete it or clear your browser data.
Cloud sync data (if enabled) is kept only while your account is active. When you delete your account, delete your child's data, or revoke consent, we remove it from our active systems immediately and purge it from our encrypted backups within 30 days, after which it can no longer be recovered. We do not retain a separate copy for any other purpose.
If an account is created but parental consent is never verified, any cloud-stored child data is automatically deleted after 30 days and the child profile is reset to contain no personal information.
If we make material changes to this privacy policy, we will update the consent gate to require re-acceptance. The "Last updated" date at the top of this page reflects the most recent revision.
If you have questions about this privacy policy or your child's data, please contact us at: hello@lucysdresshouse.com