Privacy policy

The short version

We collect almost nothing, and only what you type into a form yourself.

You can read every page on this site without giving us anything at all. There is no account, no login, no newsletter you must join, and nothing you have to fill in to read an activity. We only hold personal information if you choose to send it — by using the contact form or by subscribing to the newsletter.

We do not sell or share your personal information. We do not knowingly collect anything from or about a child.

What is running on this site today

Written plainly, because most privacy policies describe what a site might do rather than what it does:

• Advertising: not running yet. We intend to add it, and this page explains what that will mean before it happens.
• Analytics: running, and only with your permission. We use Google Analytics to count visits and see which activities people find useful. It stays switched off until you say yes on the bar at the foot of the page, and if you say no, or simply never answer, no analytics cookie is ever set.
• Cookies: the ones the site needs to work — a session cookie and a form-security token — plus Google Analytics cookies, but those only after you agree. No advertising cookies are set today.
• What we do hold: contact form messages, newsletter subscriptions, and a count of the words people type into our search box.

You can change your answer at any time using the Cookie choices link in the footer. Saying no does not limit anything on this site.

If any of that changes, this page changes first.

Who is responsible for your data

Bright Play Days is the data controller for the information described here.

You can reach us about anything on this page — including a request to see, correct or delete your data — through the contact form, or by writing to hello@brightplaydays.com.

What we collect

Information you give us

• Newsletter: your email address and the date you confirmed it.
• Contact form: your name, email address, the topic you chose and your message.

Information collected automatically

• Standard technical information every website receives: the page requested, the date and time, referring page, browser and device type, and an abbreviated network address. Our host records this to keep the site running and secure.
• The words typed into our search box, counted in aggregate so we can see what people looked for and could not find. These are stored as search terms only — not attached to you, your address or your session.
• Analytics and advertising identifiers, only once those services are enabled, which they are not today. They are described in the two sections below and in our cookie policy.

What we deliberately do not collect

This is a site for adults about activities for children. We do not ask for, and do not want:

• A child's name, birthday, photograph, school, or location
• Accounts, profiles or logins for children
• Anything you enter into the free tools on this site — those calculations run in your own browser and are never sent to us

Analytics

We use Google Analytics to understand which pages are useful and where the site is confusing. It is configured with IP anonymisation. We use it to see patterns across all visitors, not to identify you, and we do not combine it with your email address.

It does not run until you allow it. Everyone who arrives here is asked, wherever they are in the world, and until you answer — or if you answer no — Google Analytics sets no cookie and stores nothing on your device. You can change your mind at any time using the Cookie choices link in the footer.

You can opt out of Google Analytics entirely using Google's browser add-on.

Advertising

We intend to show advertising on this site to keep the content free. When advertising is live:

• Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this or other websites.
• Google's use of advertising cookies enables it and its partners to serve ads based on your visit to this and other sites.
• You can opt out of personalised advertising by visiting Google Ads Settings, or opt out of third-party vendors' use of cookies for personalised advertising at aboutads.info/choices and youronlinechoices.eu.
• You are asked for consent before any non-essential advertising or analytics cookie is set. Everyone is asked, wherever they are — not only visitors in the UK, EEA or Switzerland — and you can change or withdraw that choice at any time from the Cookie choices link in the footer.

Advertising is never targeted at children, and we do not permit ad partners to build profiles of children through this site.

Why we are allowed to hold it

Where UK or EU data protection law applies, our lawful bases are:

• Consent — the newsletter, and any non-essential analytics or advertising cookie. You can withdraw it at any time.
• Legitimate interests — replying to a message you sent us, keeping the site secure and working, and understanding in aggregate how it is used.
• Legal obligation — where we are required to keep or produce records.

How long we keep it

• Newsletter: until you unsubscribe, then removed.
• Contact messages: while we deal with them and for up to 24 months afterwards, then removed.
• Server and security logs: a short rolling period, typically no more than 30 days.
• Analytics: according to the retention period configured in that service, which is set to the shortest option available.

Sharing

We do not sell or rent personal data, and we do not share it for cross-context behavioural advertising in exchange for money.

Data is processed on our behalf by the companies that host the site, deliver our email, and — where enabled — provide analytics and advertising. They are permitted to use it only to provide that service to us.

International transfers

Some of these providers operate outside the UK and EEA, including in the United States. Where data is transferred, it is done under the safeguards those laws require, such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses.

Your rights

Depending on where you live, you may have the right to:

• Ask what personal data we hold about you and get a copy of it
• Have inaccurate data corrected
• Have your data deleted
• Restrict or object to how we use it, including direct marketing
• Receive your data in a portable format
• Withdraw consent at any time, without affecting what was done beforehand
• Complain to your data protection regulator — in the UK, the Information Commissioner's Office at ico.org.uk

To exercise any of these, use the contact form. We will respond within one month.

If you are in California, the CCPA and CPRA give you the right to know what personal information is collected about you, to have it deleted, to correct it, to opt out of its sale or sharing, and not to be treated differently for exercising any of those rights.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined by that law. Because we do not, there is no "Do Not Sell or Share My Personal Information" link on this site — there is nothing for it to switch off. If that ever changes, the link will appear in the footer and this paragraph will be rewritten.

In the last twelve months we have collected these categories of personal information: identifiers (your name and email address, if you sent them) and internet activity (pages requested, and search terms). We collect no financial, biometric, geolocation, or sensitive personal information at all.

You can exercise any California right through the contact form, and you may use an authorised agent to do so.

Children's privacy

This site is written for and directed at adults — parents, carers and teachers. It is not directed at children, and we do not knowingly collect personal information from anyone under 13 (or under 16 where local law sets that age).

If you believe a child has given us personal information, contact us and we will delete it promptly.

Security

The site is served over HTTPS, forms are protected against cross-site request forgery, and administrative access is restricted and logged. No system is perfectly secure, but we do not store payment details or any child's data, which keeps the consequences of any incident limited.

Changes

If this policy changes, the updated date on this page changes with it. If a change materially affects how we use your data, we will say so on the site.