Privacy policy.

1. Who is responsible for your data?

The controller is Backend Developers Ltd, registered in the Republic of Cyprus under company number HE442278, VAT ID CY10442278T.

Registered office: 9A Evripidou Street, 3031 Limassol, Cyprus.

For privacy questions, withdrawals of consent or requests about your information, write to our registered office, marked “Personal data”.

2. What information do we use?

When you visit

GitHub Pages hosts this site. GitHub documents that it logs visitors’ IP addresses for security, including visits made without a GitHub account. Its handling of hosting and security information is explained in the GitHub Privacy Statement.

When you join a list

When you submit a signup form, we use Forminit to receive and store the email address you enter, your confirmation that you are a parent or carer of a child aged 3–7, and your consent to the Kindee email updates described beside the form. The submission also includes the signup page and form location, the consent and parent-declaration wording, the privacy-policy version, and the time of submission.

If you separately allow analytics, the submission can also include the first and most recent campaign labels associated with your visit. Analytics consent is not required to join a list. Forminit receives technical information associated with the submission request, which can include your IP address. Typing in a form does not send its contents; the form sends them when you submit.

When you contact us

We receive the contact details and information you choose to include in your correspondence. Please only send what is needed to deal with your enquiry.

3. Why we use information

• Requested email updates: to manage your waitlist or early-access interest and send the Kindee updates you opted into, based on consent under Article 6(1)(a) GDPR. Providing your email is voluntary, but we need it to send those updates.
• Optional website and campaign measurement: to understand which campaigns bring visitors and how the pages and forms perform, including comparing landing-page layouts, based on your separate analytics consent under Article 6(1)(a) GDPR.
• Enquiries and site security: to answer questions and protect the website, based on our legitimate interests in communicating with visitors and operating a secure service under Article 6(1)(f) GDPR. Where your enquiry concerns steps towards a contract, Article 6(1)(b) may apply.
• Legal duties and necessary records: to fulfil an applicable legal obligation under Article 6(1)(c), or establish or defend legal claims under Article 6(1)(f).

You can browse the site without joining a list or accepting analytics. We do not use these landing pages to make decisions with legal or similarly significant effects through automated processing.

4. Optional analytics and campaign links

With your consent, PostHog processes selected website events to help us understand how our pages and campaigns perform. These include page views, button clicks, menu and FAQ interactions, form starts, submission outcomes and which test layout and illustrative image you see. Events can include the website version, page variant, image label, button or form location, a random session identifier, a random experiment participant identifier and campaign labels.

Campaign labels are the UTM parameters in campaign links: source, medium, campaign, content, term and ID. With analytics consent, we keep the first and most recent campaign within the browser session so we can compare campaigns fairly when visitors move between pages.

Our campaign entry page randomly assigns visitors to one of two landing-page layouts, with an equal chance of each. With analytics consent, we remember your test assignment and a random participant identifier in this browser for up to 30 days. This helps you see the same layout on return visits and lets us compare confirmed signups with the number of participants shown each layout. Without consent, an assignment stays only in the open page’s memory; we do not save it in browser storage or send experiment events to PostHog, and we cannot remember it across visits.

We do not send email addresses, form answers, raw page-query strings or advertising click IDs to PostHog. Session recordings and automatic capture of page interactions are not enabled. PostHog still receives the technical information associated with a network request, which can include an IP address.

Choose “Accept analytics” or “Reject analytics” in Cookie settings. You can reopen those settings below or from any page’s footer. Withdrawal stops future analytics and clears the campaign information, analytics session information and saved experiment assignment held by this site in your browser. It does not automatically delete events already received; contact us if you want to request deletion.

5. Browser storage and retention

• Privacy choice: when you make a choice, a necessary browser preference remembers it for up to 180 days. It is used to respect your choice, not to identify you for advertising.
• Campaign and analytics session data: stored in session storage only after analytics consent, for up to 24 hours or the browser tab’s session, whichever ends first. It is removed on withdrawal. Before consent, campaign labels can remain in page memory but are not sent to analytics or saved in browser storage.
• Landing-page experiment: with analytics consent, local storage remembers the test identifier, assigned layout, a random participant identifier and expiry time for up to 30 days. Return visits do not extend this lifetime. The site removes an expired assignment when checked, and withdrawal removes it sooner.
• Signup information: kept for as long as needed to provide the updates you requested, until you unsubscribe or the relevant programme ends. We stop marketing when you withdraw consent. A limited record may be kept where needed to respect your opt-out, demonstrate consent or handle a legal claim.
• Correspondence: kept for the time needed to resolve your request, with longer retention only where a legal duty or an actual or reasonably anticipated claim requires it.

We retain analytics records for the time needed to evaluate the relevant campaigns and website performance. In deciding how long to keep them, we consider the campaign’s duration, the period needed to compare results, and whether aggregated information can meet the same purpose. Browser-storage expiry does not itself delete information already received by PostHog or Forminit.

GitHub determines retention for the hosting and security information it processes under its own privacy statement. You can also clear this site’s browser storage through your browser settings; doing so removes your saved privacy choice.

Our Cookie policy lists the browser-storage entries, their purposes and their lifetimes.

6. Service providers and international processing

Authorised team members and service providers may handle information where needed for the purposes above. We do not sell your personal data.

• GitHub: website hosting and security. Its services may involve processing outside the European Economic Area, including in the United States. GitHub’s privacy statement explains the safeguards it uses for international transfers.
• Forminit, operated by UXPLUS LTD: receives and stores signup submissions on our behalf. Its Privacy Policy explains its role as a processor of form responses, its service providers and international-transfer safeguards.
• PostHog: processes website and campaign analytics with your consent. See PostHog’s Privacy Policy for information about the provider’s data handling and international-transfer arrangements.

Service-provider hosting, support and subprocessors can involve different countries. Where we arrange a transfer outside the EEA, an applicable adequacy decision or appropriate safeguards, such as the European Commission’s standard contractual clauses, must cover it. You can contact us for information about the providers and safeguards applicable to your data.

We may also share limited information with professional advisers or public authorities where necessary to meet legal duties or protect legal rights.

7. Information about children

These signup forms are for adults. They ask for a parent or carer’s email and a confirmation about the intended age group, not a child’s name, date of birth, photos or recordings. Please do not enter a child’s personal contact details. If you believe a child has provided personal information, contact us so we can address it.

8. Your choices and rights

You can withdraw email consent at any time by writing to our registered office. You can also follow the unsubscribe instructions included in a Kindee email. Analytics consent is managed separately through Cookie settings. Withdrawing consent does not affect processing that was lawful before withdrawal.

Subject to the conditions in applicable data-protection law, you can ask to access, correct or erase your information, restrict its use, obtain portable data, or object to processing based on legitimate interests. You can object to direct marketing at any time.

Send requests to Backend Developers Ltd, “Personal data”, 9A Evripidou Street, 3031 Limassol, Cyprus. We may need enough information to verify your identity safely. We normally respond within one month; if a lawful extension is needed, we will explain it.

You have the right to complain to the Commissioner for Personal Data Protection in Cyprus. Under the GDPR, you may also complain to a supervisory authority in the EU or EEA country where you habitually live or work, or where you believe an infringement occurred.

9. Updates to this policy

We will update this page when the website’s data handling changes. The date above identifies this version. Where a change requires fresh consent, we will ask for it.