The short version: Cubemas has no ads, no chat and no tracking inside the game. Kids only ever type a name for their buddy. We collect as little as we can, and we never sell anything.
Who is responsible
Cubemas is made by Cleverly v/ Mikkel Andersen (organisation number 923 880 054), Rastafaret 12, 1476 Rasta, Norway. We are the data controller for the information described here. Questions or requests: hello@cubemas.com.
Inside the game
- No analytics, ads or trackers run in the game at play.cubemas.com.
- The only thing a child types is a name for their buddy. Please choose a made-up name rather than their real one.
- Without an account, progress is saved only in the browser on your device. Nothing is sent to us.
- Read-aloud uses the voice built into your device. No text is sent to us.
- Photos of the island stay on your device and are only saved or shared when a grown-up chooses to.
Grown-up accounts
If a grown-up creates an account, we store:
- Sign-in details: your email address, and your name and profile picture if you sign in with Google or Apple.
- Your children's islands: which doors are open, golden bells found, the buddy's name, type and hat, and calendar settings. We don't ask for children's real names, ages or birthdays.
- Linked devices: a short label such as "iPad", when it was last used, and a scrambled (hashed) version of the device's secret key, so a child's tablet can open their island without logging in.
- Link codes: the 6-digit codes you create to link a device. They expire after a short time.
- To stop people guessing codes, we briefly keep a random ID for a device after a wrong code. It's deleted automatically.
We use this to provide what you asked for: saving the islands and opening them on your family's devices (GDPR article 6(1)(b), performing our agreement with you).
Payments
Purchases are made through Paddle, our reseller and merchant of record. Paddle collects your payment and billing details under its own privacy notice. We never see or store your card details. From Paddle we receive the order number, amount, country and your email address, and we keep a record of which calendars were unlocked so the right islands open, refunds work, and we can meet bookkeeping rules (GDPR article 6(1)(b) and (c)).
This website
This website (cubemas.com) may use Google Analytics to count visits and see which pages help parents find Cubemas, but only if you say yes in the cookie banner (GDPR article 6(1)(a), consent). If you say no, no analytics cookies are set. You can change your mind any time with "Cookie settings" at the bottom of the page.
Who helps us
We use a few trusted services to run Cubemas. They only process data on our behalf, for the purposes above:
- Clerk (sign-in and grown-up accounts), United States
- Convex (database for saved islands), United States
- Paddle (payments, as merchant of record), United Kingdom
- Netlify (hosting the website and game), United States
- Cloudflare (domain and forwarding email sent to hello@cubemas.com), United States
- Google Analytics (website visits, only with your consent), United States
When data goes to a country outside the EU/EEA, it's protected by the EU–US Data Privacy Framework, an adequacy decision (for the United Kingdom) or the European Commission's standard contractual clauses.
How long we keep it
- Account and island data: for as long as your account exists. When you ask us to delete your account, we delete it within 30 days.
- Purchase records: as long as Norwegian bookkeeping law requires (currently 5 years).
- Emails you send us: as long as needed to help you, and no longer than 2 years.
Children
Cubemas is made for children, so we work hard not to collect personal information from them. Children can't create accounts or buy anything; a grown-up does that. We don't knowingly collect personal information from children. If you think your child has given us something personal, write to us and we'll delete it.
Your rights
You can ask to see, correct, download or delete your data, object to how we use it, or withdraw consent at any time. Email hello@cubemas.com and we'll answer within 30 days. If you're unhappy with how we handle your data, you can complain to the Norwegian Data Protection Authority (Datatilsynet) or the data protection authority where you live.
Changes
If we change how we handle data, we'll update this page and the date above.