Privacy Policy
Last updated: August 13, 2026
This Privacy Policy explains how Ga-loo(“we”, “us”) collects and uses your information. We are committed to protecting your data in compliance with GDPR and applicable laws.
Zero child data — by design
We never request or store any child’s name or personal information. Worksheet parameters are limited to the target sound, age band, and a neutral theme (e.g. “dinosaurs”). There is no field for a child’s identity anywhere in the Service. This closes HIPAA / FERPA / COPPA concerns architecturally — there is no child data to protect.
1. Information We Collect
- Account data: your email address and a securely hashed password. We do not store your password in plaintext.
- Generated content: the worksheets you create and their generation parameters (sound, position, age band, theme) — never any child data.
- Usage and analytics data: pages viewed, referrer, browser type, interactions, approximate session duration, scroll depth, and IP address, collected automatically for analytics, security, and performance.
- Session Replay: a visual reconstruction of how visitors navigate and interact with the Service. Every form input is masked, and network request and response bodies are disabled, so email addresses, passwords, and other entered form values are not included in recordings.
2. Payment Processing
Payments are handled by Dodo Payments (Merchant of Record). We do not store or collect your credit card details. All payment data is processed directly by Dodo Payments in accordance with their Privacy Policy.
3. Use of Information
We use your data only to:
- Provide and maintain the Service.
- Understand navigation, content engagement, and registration conversion.
- Communicate with you regarding updates and support.
- Ensure security and prevent fraud.
We do not sell your personal data to third parties.
4. Storage
Generated worksheets and images are stored on Cloudflare R2 and served through expiring private links. Account data is stored in our PostgreSQL database. Analytics and masked Session Replay data are processed by PostHog Cloud in the United States. You can request deletion at any time.
5. Cookies
We use essential cookiesto keep you logged in. We also use PostHog analytics cookies and browser storage to distinguish browsers and sessions, understand how public pages are used, and connect a visitor’s journey to an account after successful authentication. You can restrict or delete these through your browser settings, although doing so may reduce analytics accuracy.
PostHog provides product analytics and Session Replay. We do not sell analytics data, and we do not intentionally send form values, email addresses, or passwords to PostHog. You can read the PostHog Privacy Policy.
6. Your Rights
You have the right to access, correct, or delete your data at any time. You can request full account and data deletion by contacting support.
Contact Us
If you have any questions, please contact us at support@ga-loo.com.