The plain-English version.

Who we are

Wobbleville ("we", "us") is a small studio that makes a creative sticker app for kids ages 3–8. The creator account is held by a parent or guardian. The site is available at playwobbleville.com.

What this policy covers

This policy applies to everything we operate under the Wobbleville name, including:

• The website at playwobbleville.com (the parent-held account, the sticker wizard, the dashboard).
• The Wobbleville iOS app (iPad and iPhone), which signs in to the same account and brings in the stickers a parent has created on the web.
• Any future Wobbleville apps we publish on other platforms.

The short version

• We collect the minimum we need to run the app.
• We don't show ads and we don't sell data.
• We don't collect personal information from children.
• You can delete your account and all your data at any time.

What we collect

From the parent who creates the account:

• Email address — for sign-in, receipts, and account recovery.
• Display name — if you choose to set one.
• Payment details — processed by Stripe. We never see your card number; we only store a Stripe customer ID and a record of which token packs you bought.
• Stuff you make — reference photos you upload, prompts you write, and the stickers, frames, and comic pages we generate from them. These are stored in our database and in Supabase Storage on your account.
• Basic usage events — when a generation ran, whether it succeeded, how many tokens it used. Used to debug failures and bill correctly.
• Web analytics — we use Google Analytics on marketing pages (the home page, /parents, /about, etc.) to understand traffic at an aggregate level. Analytics is not loaded inside the signed-in app or the kids' game.

What we don't collect

• We don't collect any personal information directly from children. The game has no sign-up, no chat, no social, and no ads.
• We don't buy data from third parties.
• We don't share data with ad networks.
• We don't track you across other websites or use cross-site advertising cookies.

How we use what we collect

• To sign you in and keep your account secure.
• To generate the stickers, frames, and comic pages you ask for, and to show them back to you.
• To process payments and send receipts.
• To diagnose problems, prevent abuse, and improve generation quality.
• To answer support emails when you write to us.

Children's privacy

Wobbleville is designed so that the creator account is held by a parent or guardian. We do not knowingly collect personal information from children under 13. The kids' experience — the iOS app, the game, and the sticker book — runs on content the parent has already created and contains no chat, no comments, no friend lists, no profile fields, no third-party advertising, and no third-party analytics or behavioural tracking.

If you believe a child has provided us with personal information through some path we didn't intend, contact us through your account and we'll delete it.

Who we share data with

We use a small number of service providers to run the app. We only share what they need to do their job, and they are not allowed to use your data for their own purposes.

• Supabase — hosts our database, auth, and file storage (your account, your projects, and the images you upload or generate).
• Stripe — processes payments. Card details are entered on Stripe's servers, not ours.
• Image generation providers — when you generate a sticker, frame, or comic page, your prompt and any reference image you uploaded are sent to the model provider we use to render the result. We do not allow them to use your inputs to train their models.
• Google Analytics — aggregate traffic on public marketing pages.
• Hosting / CDN — serves the site itself.

We do not sell your data. We will only disclose it if required by law, and we'll push back on anything that looks like a fishing expedition.

The Wobbleville iOS app

The Wobbleville iOS app is the kids'-facing half of Wobbleville. A parent makes stickers on the web, shares the pack with the iPad through a QR code or universal link, and the child plays in their town.

Specifically, the app:

• Does not show advertising of any kind.
• Does not include any analytics, telemetry, or behavioural tracking SDKs. We do not track users across apps or websites, and we do not request the App Tracking Transparency permission.
• Does not include in-app purchases. Token packs are sold only on the web, on the parent account.
• Does not include chat, comments, friend lists, user-generated profiles, or any other social features.
• Does not request the camera, photo library, microphone, location, contacts, or health data. If a future feature ever needs one of these, iOS will ask for permission first and we will update this policy before that feature ships.
• Does not require an in-app sign-in. The app receives sticker packs through parent-shared links; it does not hold an account session for the child.

The only data the app stores on the device is the imported sticker packs and where the child has placed them in their town. There is no analytics database, no event log, and no identifiers tied to the child. Uninstalling the app removes this local data.

Universal links of the form playwobbleville.com/import?... are used to bring a specific sticker pack into the app. The link only references content already in the parent's account; it is not a tracking link.

Cookies

We use a small number of cookies, all of them for things you would expect:

• Auth cookies (Supabase) so you stay signed in.
• Stripe cookies on the checkout page for fraud prevention.
• Analytics cookies (Google Analytics) on marketing pages only.

You can clear cookies from your browser settings any time.

The Wobbleville iOS app does not use cookies, tracking identifiers, or any equivalent mechanism.

Where data is stored

Account data, uploaded images, and generated images are stored with Supabase. Depending on your region, that data may be processed in the United States, the European Union, or Australia.

How long we keep things

• Account data and your generated content: as long as your account exists.
• Receipts and payment records: kept as long as required by tax and accounting law (typically 7 years).
• Server logs and error reports: typically up to 90 days.
• Once you ask us to delete your account, everything except payment records required by law is removed within 7 days.

Your rights

You can, at any time:

• See your data — you already do, in the dashboard.
• Correct your data — update your display name and email from Settings.
• Delete your data — one button in Settings removes your account and all associated content. Server-side deletion completes within 7 days.
• Object or complain — if you're in the EU/UK/Australia and you don't like how we're handling your data, you can complain to your local data protection authority. We'd rather you tell us first so we can fix it.

Security

Data is encrypted in transit (HTTPS) and at rest. We use industry-standard hosting and follow the principle of giving the fewest people the smallest amount of access needed. No system is perfectly secure; if we discover a breach that affects you, we'll tell you.

Changes to this policy

If we change this policy in a way that meaningfully affects you, we'll email the address on your account before the change takes effect. The “last updated” date at the top always reflects the current version.

Managing your data

You can update your account details and delete everything from the Settings page once you're signed in. Deletion is completed server-side within 7 days.