Privacy Policy

What do we process, and why?

Play statistics · Improving the activities

We record the activity, stage and progress status, whether play started or finished, counts of actions, checks and help use, active time, request times, language, screen-size category, estimated country and bot category. A random number connects one play session. It changes on reload or restart and is not linked across visits or games.

Page delivery and security · Running the site

Our hosting provider, Cloudflare, processes IP addresses and request and browser information to deliver pages and protect the service. Our analytics database does not store IP addresses or raw browser information. Request limiting uses IP addresses temporarily in running server memory. Daily totals of page requests, countries and bot categories are recorded separately.

Caregiver inbox · Answering questions

With the adult sender’s agreement, we store the topic, selected game, message, receipt number, a hash of the secret code, reply, status and submission/update times. We do not ask for a name or email, accept attachments or link enquiries to play statistics. Please do not include a child’s personal information in the free-text message.

Our analytics database does not store answer content, free-text responses, persistent visitor identifiers or device fingerprints. Country is estimated from the network, not a nationality or precise location. An unfinished game with no activity for 30 minutes is counted as a suspected stop, not a confirmed decision to quit.

Retention and deletion

• Play statistics: reports cover the last 30 days. Older records are deleted when the next collection request triggers cleanup. A running server instance runs cleanup at most once an hour, so deletion can be delayed when there are no collection requests.
• Inbox: accessible for 30 days from submission. Expired records are removed when an inbox request triggers cleanup, at most once per hour per server instance. Deletion may be delayed without requests, but expired records cannot be viewed by the sender or operator. Senders can delete their enquiry earlier using their two codes, or ask the operator to delete it.
• Browser preference: kept until you change it or clear the site's browser data. Clearing it resets your choice.

Electronic records are deleted from the database. Cloudflare has separate policies for security records and backups; these are not deleted by the statistics or inbox cleanup.

Hosting, external services and protection

We use Pages, Workers and D1 provided by Cloudflare, Inc., a US company, to host the site, analytics and inbox databases. Page, statistics and inbox requests are transmitted over the internet to Cloudflare infrastructure and may be processed outside your country, including in the United States. See Cloudflare's Privacy Policy for its processing and retention practices.

LogiCorgi does not set advertising or analytics cookies. It stores one statistics preference in browser storage. Hosting security features may use Cloudflare security cookies. We do not load fonts from external font services.

We use encrypted connections and require operator login for analytics reports. Access is restricted to the designated operator, and individual play records are not publicly displayed. Only the operator and a sender with both codes can read an enquiry; there is no public listing. We store a hash of the secret code, not the code itself, and do not automatically save it in browser storage. Keep your codes somewhere safe. Following an external link also involves that provider’s processing.

Caregiver enquiries and privacy rights

Service and privacy contact: the LogiCorgi operator
Open the caregiver inbox

Users and caregivers may ask to review, correct or delete information, or stop its processing. If a message contains a child's personal information, or you believe information has been collected improperly, please contact us. We will review the request, delete unnecessary information and explain the outcome.

Play records are not linked to a name or email, so we may be unable to identify an individual child’s record. Lost inbox codes cannot be recovered because we have no way to identify the sender. We do not ask for a child's ID or photo when it is unnecessary to handle a request.

The current games do not require children to enter personal information or create public profiles. Before introducing accounts, paid services, advertising or other changes affecting information processing, we will update this policy and provide the necessary notices and procedures.