Your information
Privacy, in plain language.
Privacy notice draft · 27 October 2026
What this companion collects
The public activities do not send or store your choices. We do not ask for children’s names, profiles, school information or personal experiences.
Optional update requests use an adult email address and explicit consent. Contact enquiries use a reply email, optional adult name, topic, message and separate consent. Do not include sensitive information about a child.
Email processing
When enabled in production, Brevo processes confirmation requests and transactional contact email. Update subscriptions use double opt-in. Consent purpose is occasional practical workshop updates; every mailing must include an unsubscribe link.
In mock mode, the server validates the form but sends no email and creates no subscription. Submitted data is not deliberately logged or stored by this application.
Cookies and security
A short-lived HttpOnly cookie protects private presenter access. A separate encrypted, one-day cookie can verify an email confirmation with the provider in the same browser. Neither is used for advertising.
The security store temporarily retains hashed request-origin buckets for 15-minute abuse limits, and revoked session identifiers until expiry. Hosting and email providers may retain operational logs under their policies. The owner must confirm processor retention and international transfer terms.
Analytics and your choices
This microsite includes no analytics scripts, advertising cookies or activity tracking. Your browser contacts external resource sites only when you follow their links.
Owner review required
- Identify the responsible controller and privacy contact.
- Confirm applicable jurisdiction, lawful bases and access/deletion rights.
- Set enquiry and subscriber retention and deletion procedures.
- Review Vercel, Brevo and security-store processing terms and transfers.
- Confirm unsubscribe and consent-evidence handling before enabling live email.
For general privacy feedback, use the contact page when configured. A verified direct privacy contact will be added following owner review.