Privacy notice
Last updated: 2026-09-01
This notice explains what happens to the personal data you give us on this website: your email address if you join the Playnitive waitlist, your name, email address and message if you use the contact form, and your name, email address and shipping address if you pre-order a Playnitive. It covers the website only. The product itself will have its own separate privacy notice before launch.
Who is responsible
The data controller is Playnitive Kft. (company registration number 01-09-456341, tax number 33048116-2-43, registered by Fővárosi Törvényszék Cégbírósága). Full company details, including the registered seat, are on the contact page. You can reach us at [email protected] for anything relating to your data.
What we collect
For the waitlist: only your email address, the language version of the site you signed up on, and the date and time you gave consent. For the contact form: your name, your email address, the topic you picked and the message you wrote. For a pre-order: your name, your email address, the shipping address you enter at checkout, the amount, the currency and a payment reference. Your card details never reach us, which is explained under Paying for a pre-order below. Shortly before a pre-order ships we also ask you, by email, for your child's first name, so that it can be printed on the adoption certificate that comes in the box. That one is optional: say no, or ignore the email, and the certificate is printed without a name. We do not collect your address unless you are having something delivered to it, and that first name is the only thing we ever ask about a child. Your IP address is used momentarily to limit abuse of the forms and is never stored. Separately from all of this, we count anonymous usage of the site itself, which is described under Website analytics below.
Why we use it
To email you about the Playnitive launch and product news if you asked for that, and to answer the message you sent us. If you pre-order: to reserve your Playnitive, to invoice the remainder and deliver it, to refund you if you change your mind, to print the adoption certificate that goes in the box if you gave us a name for it, and to keep the accounting record the law requires of us. Nothing else. We do not profile you, we do not build advertising audiences, and we will never sell or share your details with advertisers. The anonymous usage counts described under Website analytics are kept separate and cannot be linked back to you.
Legal basis
For the waitlist and the contact form: your consent, under Article 6(1)(a) GDPR. You gave it by ticking the box on the signup or contact form, and you can withdraw it at any time. For a pre-order: performance of a contract, under Article 6(1)(b) GDPR, because a toy cannot be reserved or delivered without knowing who it is for and where it goes, together with our legal obligation under Article 6(1)(c) GDPR to keep the accounting record that follows from the payment. For your child's first name on the certificate: your consent again, under Article 6(1)(a) GDPR, which is why it is asked for separately, why it is optional, and why the certificate is printed without it if you would rather not.
How long we keep it
Waitlist signups: until you unsubscribe, or until 24 months after the product launch, whichever comes first. Contact form messages: until the matter is closed and for up to 24 months afterwards, so we can follow up on a previous conversation. Pre-orders: the order record is kept for as long as Hungarian accounting law requires, which is eight years from the end of the year the transaction falls in. That period is a legal obligation, so it is the one thing we cannot delete earlier on request. Your child's first name is not part of that record: it is deleted once the certificate has been printed and the order has shipped. After these periods your data is deleted.
Who else sees it
Our email provider, which stores and delivers the messages on our behalf; our hosting provider; PostHog, which counts anonymous website usage as described below; and, if you pre-order, Stripe, which takes the payment. All four work for us under a data processing agreement. The first three process data within the European Union. Stripe is described in its own section below, because payment data does not follow quite the same rules. Nobody else.
Paying for a pre-order
The payment page you are sent to is Stripe's, not ours. Your card number, its expiry date and its security code are typed into Stripe and never reach our servers, our email or our systems in any form. What comes back to us is your name, your email address, the shipping address you entered, the amount, the currency and a payment reference, and that is what our order record contains. Stripe here is Stripe Payments Europe, Limited, in Ireland. It acts as our processor for taking the payment, and as a data controller in its own right for the fraud prevention and anti-money-laundering checks the law requires of it, which is why it also has its own privacy policy. Stripe may transfer some data to its group companies outside the European Union under the European Commission's standard contractual clauses. If you ask for a refund, we ask Stripe to send the money back to the card you paid with, and that is the only reason we would touch the payment again.
Your rights
You can ask us for a copy of your data, correct it, delete it, or withdraw consent. Just reply to any email from us, or write to [email protected]. We will act within 30 days. The one exception is the accounting record behind a pre-order, which we are required by law to keep for the period described above; everything else about that order can still be corrected or removed. You also have the right to complain to the Hungarian data protection authority (NAIH).
Website analytics
We use PostHog to count how the site is used: which pages are opened, which questions in the FAQ and the troubleshooting guide are read, and whether a form was submitted. It runs in cookieless mode, so it stores nothing on your device and sets no cookie, which is why this site has no cookie banner. It never receives your email address, your name or anything you typed into a form: only that a submission happened, and which topic you picked. PostHog processes the data on servers in the European Union on our behalf, under a data processing agreement. The legal basis is our legitimate interest under Article 6(1)(f) GDPR in understanding what people find unclear about a product for children, and you can switch it off by turning on Do Not Track in your browser, which we honour.