Privacy Policy
Effective September 30, 2026
The short version. Notelings is built so students can play without giving us any personal information. The free games have no accounts, no ads, and no trackers. A player's name, avatar, photo, and progress stay in that device's browser and are never sent to us. The only personal information we ever receive is a parent or adult's name and email when they buy Premium, and that comes from PayPal.
Who we are
Notelings is run by New Classical Design ("we", "us"). You can reach us at hello@notelings.app or at 5808 McGee St, Kansas City MO 64113.
What stays on your device
When you play, Notelings saves things like your progress, stars, badges, rank, chosen avatar, optional display name, and an optional photo in your browser's local storage. We do not receive this information. You can erase it at any time with "Reset my progress" on the site or by clearing your browser's site data. If you upload a photo for your avatar, it is resized and kept only on your device.
What we collect when someone buys Premium
Payments are handled by PayPal. We never see or store card numbers or PayPal passwords. After a purchase, PayPal sends us:
- the buyer's name and email address,
- the PayPal order and payment IDs, the amount, and the date.
We store this in our database to confirm the purchase, unlock Premium, send a receipt and restore links by email, handle refunds and support requests, and keep the records that tax and accounting rules require. We do not use it for marketing and we never sell it.
Children
Notelings is made for learners of all ages, including children. We do not knowingly collect personal information from children under 13. There are no child accounts, and the free games do not ask for an email, a real name, or a location. Premium should be bought by a parent or other adult. If you believe a child has given us personal information, for example in an email to our support address, contact us and we will delete it.
A parent can ask us at any time to show, correct, or delete any information we hold connected to a purchase.
Who else handles information
- Cloudflare hosts the website and our payment server and database. Like any web host, it processes technical details such as IP addresses in its logs for security and operations.
- PayPal processes payments under its own privacy policy.
- Resend delivers the purchase and restore-link emails we send, so it receives the recipient's email address and the message.
Our fonts are hosted on our own site, so your browser does not contact a font provider. We do not use advertising or analytics services.
Cookies and local storage
We do not set advertising or tracking cookies. We use your browser's local storage to keep your game data and, for buyers, a signed unlock code that proves Premium. Cloudflare may use strictly necessary security measures when serving the site.
How long we keep information
Purchase records are kept for as long as needed for tax, accounting, and legal reasons, and then deleted. Restore-link codes expire after 30 minutes and are stored only as a one-way hash. Information on your own device stays there until you delete it.
Keeping information safe
We limit what we collect, keep payment details with PayPal, sign unlock codes cryptographically, store secrets outside the website's code, and use encrypted connections. No system is perfectly secure, but we work to protect what we hold.
Your choices and rights
You can delete your on-device data yourself, and you can email us to ask about or delete your purchase record, subject to records we must legally keep. Depending on where you live (for example the EU, UK, or California), you may have additional rights such as access, correction, and deletion. Contact us and we will help.
Changes
If we change this policy in a meaningful way, we will update the date above and, for significant changes, say so on the site.