Privacy Policy

Draft — pending legal review. Last updated: [date].

Who runs this site

[legal operator name] operates supernal.family. You can reach us at privacy@supernal.family, by phone at [phone], or by mail at [full physical postal address]. (A postal address and contact method are required by the Children's Online Privacy Protection Act, 16 CFR §312.4(d)(1).)

Who this site is for

supernal.family publishes educational songs and stories enjoyed by children and families. We design the site to be safe for kids, and we do not knowingly collect personal information from children under 13. Accounts, comments, and any future newsletter are intended only for adults — parents, teachers, and other grown-ups.

What we collect, and why

• Aggregate usage analytics (Google Analytics). To understand which songs and pages are popular. Analytics stays off until you accept it in our cookie banner. Advertising features, ad personalization, and Google Signals are disabled, we run in restricted data processing mode, and IPs are anonymized. We do not build advertising profiles or use this to identify or contact anyone.
• Song reports. If you flag a song, we store the song's identifier and the reason. Please don't include personal information; notes that contain contact info are rejected.
• Song likes. Anonymous count only — no identity, no IP, no device identifier.
• Accounts (adults only). If you sign in, we store your email, an optional name, and a record that you confirmed you are 18+. We never store a date of birth.
• Comments (adults only). Tied to your adult account, reviewed by a person before they appear, and may not contain links, emails, phone numbers, or contact handles.

Who we share data with

We do not sell or share personal information (including any belonging to minors, as defined under California law). We use a few service providers who process data only to run the site on our behalf:

• Google Analytics — aggregate, privacy-restricted usage analytics.
• Supabase — account, comment, like, and report storage (database and authentication).
• Vercel — website hosting and delivery.
• Cloudflare R2 — storage and delivery of audio and image files.

How long we keep data

We keep account information and comments while your account is active and delete them on request or when you close your account. Aggregate analytics are retained by Google for [confirm GA4 retention, e.g. 14 months]. Anonymous likes and song reports are kept as long as they are useful for improving the site.

Parents' rights

If you believe a child under 13 has given us personal information, contact privacy@supernal.family. You have the right to review that information, to delete it, and to refuse any further collection of it (16 CFR §312.6). We will verify your request and respond promptly.

Your privacy choices

You can ask us to access or delete information associated with your account by emailing privacy@supernal.family. California residents have additional rights to know, delete, and correct; because we do not sell or share personal information, there is nothing to opt out of.

Cookies

The only cookies we use are first-party analytics cookies, and we do not set them until you accept analytics in the cookie banner. You can change your choice anytime via “Cookie settings” in the footer.

Visitors outside the US

Our service providers are based in the United States; if you visit from elsewhere, your information is processed in the US under appropriate safeguards.

Changes

We'll update this page if our practices change and revise the date above.