Privacy notice
Complete before launch: replace the bracketed controller name, contact email, country, analytics retention period and privacy-request process. This starter explains the implemented data flow but is not a substitute for legal review.
No public accounts at present
The current public website does not offer account creation or sign-in. Children and grown-ups can watch videos and play the learning games without giving an email address. Favourites are labelled Coming Soon and are not currently stored for public visitors.
Information needed to operate the service
The server stores video catalogue information, playlist and display ordering chosen by the administrator, upload records, and optional first-party analytics described below. Administrator access is private and is not offered to children or ordinary visitors.
Video storage and delivery
Original video files and poster images may be stored in Cloudflare R2. When adaptive delivery is enabled, a separate copy is processed and delivered by Cloudflare Stream as segmented HLS/DASH video with multiple quality levels. The player may change quality automatically according to the viewer’s device and connection. When Stream is unavailable or has not been enabled for a video, the website uses the R2 MP4 versions as a compatibility fallback.
R2 and Stream credentials remain private on the server and are never sent to the browser. As with ordinary web hosting and content delivery, Cloudflare and the hosting provider may receive connection information needed to transmit the requested page or video, such as IP address, request time, device/network headers and the requested media URL. Before launch, identify Cloudflare and the cluster hosting provider in the final processor list and confirm the final legal basis and retention wording with a qualified privacy adviser.
First-party usage analytics
The website includes an optional, self-hosted analytics system. It begins only after a grown-up selects Allow analytics when the consent requirement is enabled. It does not use Google Analytics, advertising pixels or third-party tracking scripts, and analytics events are not linked to a public user account. A grown-up can stop future analytics collection from Parent tools at any time.
When allowed, the system may record page visits, referring website, broad device and browser information, screen size, language, time zone, country when supplied by the network, buttons clicked, video starts, watch duration, playback milestones, completions and learning-game starts or completions.
By default, IP addresses are masked for display and converted to a one-way keyed hash for approximate unique-visitor counting. Full IP storage is disabled unless the site operator explicitly enables it. Analytics records are automatically deleted after the configured retention period, which defaults to 90 days. State the final legal basis, retention period and consent process here after privacy review: [ADD FINAL ANALYTICS TERMS].
Hosting and processors
The catalogue, administrator settings and analytics database is operated inside the Liliana’s Wonderland cluster. Before launch, list the hosting provider, cluster region, Cloudflare R2, email provider (when one is added), backup location and any other processors in the final privacy policy.
Retention and privacy requests
State the final analytics retention period and provide a contact process for privacy questions or deletion requests here: [ADD RETENTION AND PRIVACY-REQUEST PROCESS].
Contact
Data controller: [ADD LEGAL NAME]
Privacy email: [ADD CONTACT EMAIL]
Country: [ADD COUNTRY]