OWLBRYTE ACADEMY

Privacy Policy

Last updated: July 10, 2026

Owlbryte Academy is built for families, and we treat children's privacy with particular care. This policy explains what we collect, why, and the choices you have. The short version: we collect the minimum needed to run the academy, we never sell data, and we never show advertising.

1. What we collect

From parents: your email address, the name you give us, purchase records, and — only if you join the referral program — the PayPal address you want rewards sent to.

About children: child profiles are created by parents and contain only what the parent enters: a first name (or nickname), an age, an optional fun "wizard handle", and a 4-digit PIN (stored only as a secure hash). As a child learns, we record course progress: which parts of a lesson were watched, practice sessions, challenge scores, streaks, and diplomas earned. We do not collect a child's email, phone number, address, photos, or precise location, and children cannot enter free-form text that is shown publicly.

2. Children's privacy (COPPA)

Owlbryte's websites and checkout are directed to parents; children use the learning portal under a parent-created profile. We rely on the parent's creation and management of the account as consent for the limited child data described above. We never contact children, never show them advertising, and never make a child's information public without a parent's explicit approval — a diploma appears in the public Great Hall only after a parent approves it and chooses the display style (first name, initial, handle, or anonymous), and the parent can withdraw it at any time. Parents can review or delete their child's information whenever they wish (see "Your choices").

3. How we use information

To operate the academy: signing you in (passwordless email links), tracking course progress so diplomas mean something, sending transactional email (sign-in links, receipts, diploma alerts), processing purchases and refunds, running the referral program, and keeping the service safe. We do not use your data for third-party advertising, and we do not sell it to anyone.

4. Service providers

We share only what each provider needs to do its job: Stripe (payments — we never see your card number), Bunny.net (video streaming), Resend (transactional email), and Google Cloud (hosting and database). Each processes data on our behalf under their own security commitments.

5. Cookies

We use a small number of first-party cookies: one to keep you signed in, and one to remember a referral code for 30 days so your friend's discount applies. No advertising or cross-site tracking cookies.

6. Your choices

You can review your family's information from your dashboard. To export, correct, or permanently delete your account and all child data, email aus@owlbryte.com from your account email — we complete deletions within 30 days. Transactional emails are required to run the service; we don't send marketing email without your consent, and any marketing email includes an unsubscribe link.

7. Security and retention

Data is encrypted in transit, PINs are stored as salted hashes, sign-in links expire after 30 minutes and work once, and payment details never touch our servers. We keep account data while your account is active and purchase records as required for tax and accounting.

8. Changes and contact

If we make material changes we'll post them here with a new date and, where appropriate, email account holders. Owlbryte Academy · aus@owlbryte.com