miniplay
Privacy notice
Last updated October 27, 2026
miniplay is made for children in preschool and early primary school, so it keeps as little as it can. This notice is written for the grown-up who looks after them.
Who we are
miniplay is operated by Carajillo Solutions LLC, a Texas limited liability company. Contact: privacy@caraji.io, Carajillo Solutions LLC, 13423 Blanco Rd, San Antonio, Texas 78216.
What stays on the device
Children never sign in. What a child does — their progress in each game, the acorns they find and the outfit they pick — is saved on the device they play on, and nothing about the child is on our servers until a grown-up signs in on that device.
What we keep once a Parent signs in
The Parent’s email address and when it was first used. For each child’s Player on a device the Parent has signed in on: a random identifier nobody could guess, the acorn balance, the items bought, the outfit worn, and a record of each acorn grant or purchase with the game it came from and the day. No name, photo, age, voice or location of a child is asked for or kept. We also keep the sign-in emails, codes and links we sent (the codes and links only as scrambled hashes that expire; the email and time of each attempt stay in our records) and the sessions of signed-in devices until they expire or you sign out.
Payments
Pro is paid through Stripe, which handles the card and is the payment processor. We never see or store card numbers. When a Parent subscribes, we keep Stripe’s customer and subscription identifiers, the Parent’s email, the price chosen, the subscription’s state (active, payment failing or cancelled) and the date its paid period ends; we also keep the identifier of each Stripe notification we have handled, so none is applied twice. A Pro that was given to an email by hand, or that comes from a NumFox plan, is recorded with that email and the date it lasts until. If you have a NumFox plan, miniplay sends only the signed-in Parent’s email to NumFox to learn whether Pro applies.
Anonymous play statistics
To learn which games are played, each game reports that it was opened and, when closed, how many seconds the session lasted, with the game and the day. These counts carry no identifier of any person or device, are not linked to a Parent or Player, and are deleted after 13 months.
No ads, no tracking
miniplay shows no ads, sells nothing and shares nothing for marketing. It uses no third-party analytics, trackers or advertising cookies. It uses only cookies and storage needed to work: the language, the signed-in Parent’s session, the device’s Pro copy and the game progress kept on the device.
Why we use it
To run the games, keep a child’s progress safe across a family’s devices, sign Parents in, take payments and give Pro, understand which games are played, keep the service secure and answer support requests.
Who helps us
Stripe (United States) for payments; Brevo (France) for sign-in emails; DigitalOcean (United States) for hosting; Cloudflare (R2) for encrypted backups of our databases; NumFox (Carajillo Solutions LLC) for a Pro plan check by email. Each gets only what it needs and may not use it for anything else.
Where data is stored
Our servers are in the United States. If you are in Mexico, by using miniplay you agree to your data being transferred there. We protect it with encryption in transit and access controls.
How long we keep it
Play statistics: 13 months. Sign-in codes and links: they expire within minutes, but the record of each attempt is kept while the service runs. A Parent’s email and the Players linked to it: until you ask us to delete them. Payment records held by Stripe: as the tax law requires.
Your rights as a parent
You may ask to see, correct or delete the information we hold about you and your children’s Players, and you can stop at any time by signing out and clearing the app’s data on a device. Write to privacy@caraji.io; we acknowledge requests within 5 business days and answer within 30 days. We do not condition play on giving more information than needed.
Children’s privacy law
We collect no personal information from children themselves. What we hold is gathered through a Parent who signs in, in line with the US Children’s Online Privacy Protection Act (COPPA). You can reach us about your data at privacy@caraji.io.
Changes
We tell Parents by email at least 30 days before a material change; smaller changes are shown here with the date above. Questions: privacy@caraji.io.
Questions? Write to privacy@caraji.io or to Carajillo Solutions LLC, 13423 Blanco Rd, San Antonio, Texas 78216.