Privacy Policy

Last updated October 10, 2026

This policy covers koilunakids.com and Koiluna Kids: Fifty Futures: the game in the browser and the app for Android. It is sold by PickCipher LLC, doing business as Koiluna Kids, Burlington, North Carolina, United States (support@koilunakids.com).

For parents: children's privacy (COPPA)

In the United States, the Children's Online Privacy Protection Act (COPPA) protects the personal information of children under 13 online. Koiluna Kids: Fifty Futures is made for children of about 7 to 11, so we built it, and this website, so that we do not collect personal information from children:

• The game asks a child for nothing. No name, age, birthday, email address, photo, voice recording, location or contacts. It does not use the camera or the microphone. The three story places on a device are picked by picture (the koi, the dragon and the lantern), not by name.
• The game sends us nothing. There are no accounts for children, no chat, no leaderboards, no sharing with other players, no advertising and no analytics. The game's own rule lets it fetch its own files and nothing else, and this website has no address that would accept anything from it.
• A child's stories stay on the device. Their choices, the futures and clues they found and the puzzles they solved are saved in the browser. We never receive them and cannot see them. A backup file, if a grown-up saves one from the Grown-ups page inside the game, holds one story place and no names, and goes only where the grown-up puts it.
• Only an adult types anything on this website: the buyer's email address, at checkout and to sign in. Buying, signing in and the account page are for adults, and the buyer confirms at checkout that they are 18 or over.
• What a website cannot avoid receiving. When the game is played in the browser, our host (Cloudflare) receives the ordinary request details every website receives, such as an internet address and the kind of browser, in order to deliver the pages, the pictures and the recordings and to protect the site. We use them only for that. We do not use them to identify, follow, profile or contact anyone, and they are not kept with your purchase.

If a child writes to us. Our support address is for grown-ups. If an email reaches us that seems to come from a child, we answer it once, to the address it came from, to say that a parent or guardian should write to us instead. We use that address for nothing else, we do not keep the message or the address once it has been answered, and it is never added to any list.

If you think a child has given us personal information in any other way (for instance by typing an email address into the sign-in page), write to support@koilunakids.com and we will delete it.

A parent's or guardian's requests. You can ask what we hold about you, have it corrected or deleted, and tell us to stop using it: see Your rights and deleting your data. There is nothing held about your child to review or delete, because nothing about your child is collected. To clear the stories saved on a device, use "Start this place again" on the Grown-ups page inside the game, or clear this site's data in the browser.

What we collect from the buyer

• At purchase: your email address, what you bought, the amount (and the tax added to it), the date and time, and a Stripe payment reference. Stripe collects your billing address at checkout to work out the tax; we read its country once, when the purchase is recorded, to check that the game is sold where you live, and we do not keep the address. Card details go directly to Stripe; we never see or store them. Stripe also keeps the record that you ticked the box at checkout (that you are 18 or over and agree to the terms and the refund policy). If you were given the game free (by us directly, or with a pass code you redeemed), we store your email address in the same way, with no payment details.
• Cookies: we set three cookies of our own, all of them needed for the site to work, and no others. When you start a checkout, a cookie ties that checkout to your browser for one day, so that when you come back from Stripe we know the purchase was made in this browser. When you sign in, a secure sign-in cookie keeps you signed in for up to 180 days (only a scrambled form of it is stored on our side); you can be signed in on up to 10 browsers at once. A third cookie lasts two minutes at most: after you make a new license key, it lets your account page show the new key once. None of them is used for advertising or tracking.
• Sign-in links and keys: if you ask for one, we email you a one-time sign-in link that works for 30 minutes. You can make a new license key from your account page at any time; the old one stops working at once.
• When you ask about a refund: we look your purchase up by the email address you bought with, and that look-up is itself recorded (the address looked up, the date and time, and which of us did it). These records, like the rest of the record of what we do to accounts by hand (free access given or taken back, a new key made for someone, a second payment refunded), are deleted after 12 months.
• Protection against abuse: to stop automated sign-in, checkout, license-key and pass-code attempts we keep short-lived counters tied to a scrambled form of an IP address or an email address. They are deleted within a few days. Opening and playing the game adds nothing to them.
• Server logs: our host, Cloudflare, briefly processes technical data such as IP addresses to deliver and protect the site.

What we do not collect

Anything about a child. The stories and the progress in the game. What is played, when, or for how long. Your name, your street address, your phone number. We run no analytics, show no advertising, and load no script, font, picture or other file from any other company: our pages' own security rule would stop one from loading.

How we use it

To deliver what you bought, sign you in, send your receipt and sign-in links, handle refunds and support, and prevent fraud. We write only to the buyer, and only about the purchase and signing in: there is no newsletter and no marketing email. We don't sell, rent or share personal information.

Who processes it for us

• Stripe: payments (stripe.com/privacy)
• Cloudflare: hosting, our database, and sending receipts and sign-in links (cloudflare.com/privacypolicy). We do not use Cloudflare Web Analytics or any analytics script.

Where your data is processed

Your data is processed in the United States, by us and by the two companies named above. Cloudflare also handles requests at its data centers around the world, including the one nearest you, to deliver and protect the site.

The Android app: “Koiluna Kids: Fifty Futures” for Android

This section is the privacy policy of the app Koiluna Kids: Fifty Futures for Android, published on Google Play by PickCipher LLC.

Koiluna Kids: Fifty Futures for Android collects nothing, asks for no permissions and does not use the internet.

• The app collects nothing. No personal information, from a child or from anyone else: no name, age, email address, photo, voice, location, contacts, device identifiers or advertising identifiers. We receive nothing from the app at all.
• It asks for no permissions. Not the internet, not the camera, the microphone, your location, your contacts, your photos or your files.
• It does not use the internet. The whole story, the pictures and the voices are inside the app. It never sends or receives anything, and it has no links out.
• No accounts, no advertising, no analytics, no tracking, no chat, no sharing with other players, and nothing to buy inside the app. No software from any advertising or analytics company is in it.
• The stories stay on the device, in the app's own storage: three story places, picked by picture. The app keeps them out of the phone's cloud backup and device-to-device transfer. Removing the app removes them. A backup file, if a grown-up chooses to save one from the Grown-ups page inside the app, holds one story place and no names, and goes only where the grown-up puts it.
• Buying the app is between you and Google Play, which handles any payment under its own privacy policy. We do not receive your name, your address or your payment details.

Because the app collects nothing, there is nothing about your child for us to show you, correct or delete. Questions about the app: support@koilunakids.com.

There is no iPhone or iPad app. If one is ever released, what applies to it will be set out here first.

How long we keep it

Purchase records are kept as long as needed for your access and for tax and accounting law. The record of look-ups and of other things we do to accounts by hand is deleted after 12 months. Sign-in sessions expire after 180 days, sign-in links after 30 minutes, the checkout cookie after one day, and the counters against abuse within a few days.

Do Not Track and Global Privacy Control

This site does not track visitors across websites and uses no analytics or advertising cookies, so there is nothing for a "Do Not Track" or "Global Privacy Control" signal from your browser to switch off: the site behaves the same, with or without the signal, for every visitor.

Your rights and deleting your data

You can ask to see the personal data we hold about you, to have it corrected or deleted, or to receive a copy of it. To have your data deleted, email support@koilunakids.com from the address you bought with; we answer within 30 days. Deleting your purchase record ends your access on this website (we keep only what tax and accounting law requires us to keep). We do not sell personal data, including under California's definition of selling or sharing.

Changes to this policy

When we change this policy, the new version is posted on this page with a new date at the top. If a change is material (what we collect, why we use it, or who processes it for us), we also email everyone who has bought the game, at the address they bought with, before the change takes effect. We will not begin collecting personal information from children.

Contact

PickCipher LLC, Burlington, North Carolina, United States · support@koilunakids.com