We've written this in plain language rather than legalese, but it covers what the law requires. For the friendlier version of how we look after your child, see Trust & safety.
| Data controller | Pedro Javier Criado Serrano |
|---|---|
| Activity | PequeMissions — educational practice app for children aged 3 to 8, currently in a pre-launch validation phase |
| Contact | hola@ |
| Website | https:// |
We are not required to appoint a Data Protection Officer and have not done so: we do not process data on a large scale or handle special categories of data.
| What | Why | Legal basis | How long |
|---|---|---|---|
| Your email address and, if you fill them in, your child's school year, whether you'd pay and your comment (waiting list) | To notify you once when we launch, and to understand what families need | Your consent (Art. 6(1)(a) GDPR), given via the form checkbox | Until launch or until you unsubscribe; 24 months maximum |
| The adult's email address, only if you choose to link it to your family (it is optional). It is verified with a 6-digit code we send to that address. If you link it with the app in English, we also store that language, only to write that email in English | To recover the parents' access if you forget the PIN, and to prove the family is yours (no passwords). It is stored by Supabase's account system in the European Union, apart from your child's data: the family is only tied to an internal identifier | Performance of the service you request when linking it (Art. 6(1)(b) GDPR) | While the account exists; deleted when you delete the family in the app, or by writing to hola@pequemisiones.com |
| Family code (such as NUBE-K7M2-Q4RT), profile alias (the name or nickname you choose), year/level, chosen world and activated games, whether their school is bilingual (yes or no only: never which one), exercises completed, results, badges and minutes of use. We recommend a nickname. The name you give your family (“Our house”) does not travel here: it stays on your devices. | So missions sent by the adult reach the child's device, so the adult can follow their progress, and so the child's card is the same on every family device | Performance of the service requested by the adult (Art. 6(1)(b) GDPR) | While you use the app; deleted when you delete the family in the app or on request, and automatically after 24 months of inactivity |
| That an adult accepted this policy: the family code, the date and the version accepted. Nothing else: not who you are, not your email, not the name you give your family, nothing about your child | To be able to demonstrate that consent was given by the holder of parental responsibility, as the law requires, without having to identify anyone | Legal obligation to be able to demonstrate consent (Art. 7(1) GDPR) | Deleted with the family; and on its own after 24 months if there was never any data behind it |
| Which campaign you came from, only if you arrived through one of our links that carries it (an ad, a leaflet, an email): the site, the campaign and the ad, with the names we give them (for example “facebook”, “october”, “video-katy”). It travels in the link, nothing is stored on your device, and it is recorded once with the family code, when the family is created. Nothing about who you are or about your child | To know which campaigns bring families who stay and which don't: per campaign, how many families are created, how many play and how many go Pro. Always as overall figures: we never look at a particular family | Legitimate interest in knowing which ads work (Art. 6(1)(f) GDPR). You can object by writing to us, and we'll delete it | With the family: deleted when the family is deleted, or after 24 months of inactivity |
| Your family's Pro plan, if you subscribe: the family code, which plan it is, until when it is paid, how many children it covers and the identifiers Stripe gives the customer and the subscription. Never the card number, which does not reach us, nor the email or name you give on the payment page: Stripe keeps those | To know whether the family is Pro so we can open everything up, and to handle a refund, a cancellation or a complaint | Performance of the subscription contract (Art. 6(1)(b) GDPR) and legal obligation to keep sales records (Art. 6(1)(c) GDPR) | For as long as the subscription lasts and then for the years required by tax and consumer rules (as a rule, 4 years from the last charge) |
| Message text written by the adult in a mission | To read it aloud to the child and check it is appropriate before they hear it | Legitimate interest in protecting the child (Art. 6(1)(f) GDPR) | With the mission; removed when completed missions are deleted. Its voice isn’t stored: it is made when it’s played and forgotten when the app closes |
| Exercise wording when the child asks for a hint (generated by the app; contains no personal data) and the hint returned | To give a hint about the method, and so the adult can see it in their panel | Performance of the service (Art. 6(1)(b) GDPR) | 12 months |
| App errors: which engine, which screen, the error message, browser and OS type and screen size (no family code, no nickname, no page address) | To find out something is broken and fix it | Legitimate interest in keeping the app working (Art. 6(1)(f) GDPR) | 90 days; deleted automatically |
| Visits to the public website (home page, printable sheets, News, Trust, this page and the ads and “thank you” pages; never inside the app): which page is opened, how long you stay on it and how far down you scroll, which website or campaign you came from, which buttons and links are tapped, and the browser, device, operating system, language, time zone and screen size. No cookies and nothing stored on your device. The IP address is only used on the spot to work out an identifier that changes every day; it is not stored | To know how many people visit us, which pages are useful to them and which path they take through the website, so we can improve it. We see the path of an anonymous visit during that day, never who it is | Legitimate interest in measuring our website’s audience (Art. 6(1)(f) GDPR) | 12 months. The daily identifier can no longer be linked to anyone once the key used to calculate it is deleted, when that day's visits have been processed |
| Ads on Facebook and Instagram, only on two pages (the ads page, pequemisiones.com/en/start/, and the “thank you” page after paying, pequemisiones.com/en/thanks/) and only if you accept in their notice: the identifier in Meta's cookies, the page you open, whether you tap “Set up our family” and, on the “thank you” page, the plan paid for and its amount. As with any website you visit, Meta also receives your IP address and browser type. Never your email, your name, the family code or anything about your child | To know which ads bring families to us and which don't, to show PequeMissions again to people who have already visited those pages, and to let Meta show our ads to people who might be interested. Meta may also use it, on its own account, to choose which ads it shows you | Your consent (Art. 6(1)(a) GDPR and Art. 22.2 of Spain's LSSI), which you give or withdraw in the notice on those pages | Meta's cookies, 90 days; your choice, 12 months. Whatever Meta keeps, under its own policy |
| Ads on TikTok, on those same two pages and only if you accept in the same notice: the identifiers in TikTok's cookies, the page you open, whether you stay on it for a while, which buttons you tap (TikTok itself collects the button's text) and, on the “thank you” page, the plan paid for and its amount. As with any website you visit, TikTok also receives your IP address and browser type. Never your email, your name, the family code or anything about your child | To know which ads bring families to us and which don't, to show PequeMissions again to people who have already visited those pages, and to let TikTok show our ads to people who might be interested. TikTok may also use it, on its own account, to choose and personalise the ads and content it shows you, and for the security and improvement of its services | Your consent (Art. 6(1)(a) GDPR and Art. 22.2 of Spain's LSSI), which you give or withdraw in the notice on those pages | TikTok's cookies, up to 13 months; your choice, 12 months. TikTok may keep what it receives for up to 18 months |
| How those two pages are used, with Contentsquare and only if you accept in the same notice, separately from the ads: a recording of your visit (clicks, scrolling, mouse or finger movements and the page as you see it), how long you spend on it, which website you came from, the type of device, browser and screen, and a random identifier stored in its cookies. Contentsquare uses your IP address to work out the city and filter out bots, and deletes it after 3 days. Never what you type into a field, your email, your name, the family code or anything about your child | To see where people get stuck or what isn't clear, so we can improve those pages. It is not used for ads | Your consent (Art. 6(1)(a) GDPR and Art. 22.2 of Spain's LSSI), which you give or withdraw in the notice on those pages | Contentsquare's cookies, up to 13 months; your choice, 12 months. Recordings and the rest, 13 months at most |
Data we never ask for: surnames, date of birth, photos, voice recordings, location, phone contacts or school details. Your child has no account and no password.
PequeMissions is designed for children aged 3 to 8, but the account holder is always an adult. Processing the data of a child below the applicable age of digital consent (14 in Spain, 13–16 depending on the country) requires the consent of the holder of parental responsibility. Therefore:
We don't sell data, don't share it for commercial purposes and don't show advertising. To make the website and the app work we rely on these providers, acting as data processors that only process the data on our instructions, under their data processing terms:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database and server functions | European Union (Ireland) |
| Anthropic | Checking messages before the child hears them, and generating the helper's hints | United States |
| Google Cloud (Text-to-Speech) | Giving a natural voice to the app’s sentences and to the family’s message, without storing the latter | European Union; if a voice isn’t available there, United States |
| GitHub Pages | Website hosting | United States |
| Stripe (Stripe Payments Europe, Ltd.) | Charging for the Pro plan and sending you receipts. For your card, your email and fraud prevention, Stripe is a controller in its own right, under its privacy policy | European Union (Ireland) |
| PostHog (PostHog, Inc.) | Counting visits to the public website and seeing which path they take, without cookies (never inside the app) | European Union (servers in Germany) |
| Contentsquare (Contentsquare SAS, France) | Seeing how the ads page and the “thank you” page are used, only if you accept (never inside the app) | European Union (Ireland) |
Our backups are encrypted on our own computer before they leave it, and are stored in Google Drive (Google, United States). Google only holds the encrypted file: without the password, which only we have, it cannot read anything in it.
We're upfront about this because it's the right thing to do, and because European AI rules require it:
Almost all of this website uses no analytics, advertising or third-party cookies: not the home page, the printable sheets, News, Trust or this page. No Google Analytics, no profiling.
Two pages are different: the ads page and the “thank you” page. You reach the ads page (pequemisiones.com/en/start/) from our ads on Facebook, Instagram and TikTok, and the “thank you” page (pequemisiones.com/en/thanks/) after paying for the plan. On them, a notice asks whether you accept the Meta and TikTok pixels, to measure the ads, and Contentsquare, to see how the page is used, with two identical buttons: “Reject” and “Accept”. With “Choose one by one” you can accept just one of the two: each is decided separately. Nothing from Meta, TikTok or Contentsquare loads until you accept; if you reject or don't answer, it never does, and the page works just the same. This is what is stored in your browser if you accept:
| Cookie or data | Whose | What for | How long |
|---|---|---|---|
| pm_cookies (browser local storage) | Ours | Remembering what you accepted or rejected (the ads on one side and Contentsquare on the other), so we don't ask on every visit. It is also stored if you reject | 12 months; then we ask again |
| _fbp | Meta, on our domain | Recognising your browser when you come back to those two pages | 90 days |
| _fbc | Meta, on our domain | Remembering that you arrived from a Meta ad (only if you did) | 90 days |
| Meta's own, on its domains (facebook.com) | Meta | If you're logged in to Facebook or Instagram in that browser, Meta may link the visit to your account | As set out in its cookie policy |
| _ttp | TikTok, on our domain | Recognising your browser when you come back to those two pages | Up to 13 months |
| _tt_enable_cookie | TikTok, on our domain | Checking that your browser accepts TikTok's cookies | Up to 13 months |
| ttcsid and ttcsid_ followed by the pixel number | TikTok, on our domain | Grouping what happens during a single visit | Up to 13 months |
| ttclid | TikTok, on our domain | Remembering that you arrived from a TikTok ad (only if you did) | Up to 13 months |
| tt_adInfo, tt_appInfo, tt_sessionId and tt_pixel_session_index (browser session storage) | TikTok | Remembering the visit while the tab is open | Until you close the tab |
| TikTok's own, on its domains (tiktok.com) | TikTok | If you're logged in to TikTok in that browser, TikTok may link the visit to your account | As set out in its cookie policy |
| _cs_id | Contentsquare, on our domain | Recognising your browser when you come back to those two pages | 13 months |
| _cs_s | Contentsquare, on our domain | Grouping what you do during a single visit | 30 minutes from the last thing you do |
| Others starting with _cs_ (cookies and browser local storage, such as _cs_c or _cs_cu) | Contentsquare, on our domain | Technical settings for the recording and the visit | Up to 13 months; those in local storage, until you withdraw your consent or clear your browser data |
Changing your mind is as easy as deciding: on those two pages, the “🍪 Cookie settings” button in the footer opens the notice again, and you can withdraw both consents or just one. If you withdraw the one for the ads, the pixels stop measuring (TikTok receives one last notice that you have withdrawn it); if you withdraw the one for Contentsquare, it stops recording at once. The page reloads and we delete Meta's cookies (_fbp and _fbc), TikTok's (_ttp, _tt_enable_cookie, ttcsid and ttclid) and Contentsquare's (those starting with _cs_) from our domain; the ones Meta and TikTok keep on their own domains are deleted from your browser settings or your Meta or TikTok account.
To know how many people visit the public website (the home page, the printable sheets, News, Trust, this page and the two above) and which path they take through it, we use PostHog, set up to respect privacy: it uses no cookies and stores nothing on your device, doesn't follow you across other websites, doesn't store your IP address, doesn't record your screen, and its data is hosted in the European Union. Each visit is an identifier that changes every day: it shows us how many visits there are, which pages are opened, which website or campaign people came from and which buttons and links are tapped, but not who you are or whether you come back another day. If you'd rather your visit wasn't counted, any content blocker in your browser prevents it and the website works just the same.
Inside the app, where your child plays, there is none of this: no PostHog, no Meta or TikTok pixels, no Contentsquare and no other visit counter.
The app does use your browser's local storage to remember profiles, gems and settings (including the app language) on your own device. This is strictly necessary for the app to work and doesn't require consent. You can clear it by clearing your browsing data (you'll lose local profiles).
The fonts are hosted on our own domain: they aren't fetched from Google or anywhere else. In the syllables game for younger children, the "Record yourself" button asks for microphone permission: the recording lasts two seconds, plays back on the device itself and is never sent anywhere; the microphone is closed when it finishes.
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability at any time, and withdraw your consent where that is the legal basis. Write to hola@pequemisiones.com telling us what you need and, if relevant, your family code. We reply within one month at most.
You don't need to write to us to delete everything. In the app, Parents' area → 🏠 Family → “🗑️ Delete my family” immediately deletes everything about your family from our server (profiles, missions, progress, gems, rewards, drawings, paired devices and the account email) and leaves the device as if it had just been installed. For security, only the family's adult device, or whoever signs in with the account email, can do it: the family code is not enough. If you have neither, write to us and we'll delete it ourselves.
Backups can't be edited one by one, but they expire on their own: our provider's last 7 days and ours, 5 weeks. Five weeks after the deletion, nothing about your family is left in any backup.
If you believe we haven't handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es), C/ Jorge Juan 6, 28001 Madrid, or to the supervisory authority in your own country.
Data travels encrypted (HTTPS) and the database enforces row-level access rules: without the family code, nothing belonging to that family can be read or modified. Even so, no system is infallible; if a security breach affected your data we would inform you and notify the supervisory authority within 72 hours, as the GDPR requires.
Site owner: Pedro Javier Criado Serrano · Contact: hola@pequemisiones.com (Art. 10 of Spanish Law 34/2002, LSSI-CE). PequeMissions is an independent project: any mention of the ABN methodology is a descriptive reference to the "open calculation based on numbers" method and implies no affiliation with its authors or publishers.
Intellectual property. © 2026 Pedro Javier Criado Serrano. PequeMissions is the English name of PequeMisiones. The texts, exercises, illustrations, design and code of this website and the app belong to their owner, except as noted below. They may not be copied, distributed or transformed without written permission; you are welcome to use the app, link to it and quote it with attribution.
If we change anything significant we'll update the date above and, where it affects you directly, tell you by email. The current version is always on this page.