This policy covers adults — parents, teachers and anyone reading this site. Children are covered separately and more strictly, because the protection for a child is that we hold nothing at all.
Buzzing Bees Playland, LLC · 203 West 111th Street #5B, New York, NY 10026 · hello@bbplayland.com · Effective 19 October 2026
Built safe by design — true on every build
- No ads, no trackers, no third-party scripts, no pixels, on any page of this site or the app.
- We hold the least we can: a teacher’s work email and role, a parent’s email if they ask for early access, and our web server’s own log for 90 days.
- Anything a person writes is scrubbed of names and personal details on our own servers before it leaves them, and if that scrubbing fails nothing is sent.
- Ask and we delete it, from every table, and the deletion is itself verified and logged.
Who we are, and what this covers
Buzzing Bees Playland, LLC, a New York company that trades as bbplayland, at 203 West 111th Street #5B, New York, NY 10026, runs the website at bbplayland.com, the Archie app, the teacher portal and the family view. This policy covers what we hold about the adults who use them and the people who visit the site. For children, the child privacy notice is the document; it is not a summary of this one, and its rules are stricter.
What we hold about you
If you are a teacher: the email address of the school account you sign in with, which school or district you belong to, and your role. The email address is encrypted where it is stored. You sign in through the Google account your school gave you, so we never see a password and there is none for us to lose. What you write in the portal — a planning note, a label for a child — is held for you and scrubbed of personal details before any of it leaves our servers.
If you are a parent: if you asked for early access, the email address you gave and which page of this site you gave it on — nothing about your child. If you write to us, your message. When family sign-up opens, a parent who sets up a family home signs in with Google, as a teacher does, and we hold the same as for a teacher.
If you visit this site: our web server’s own log, described in clause 4. Nothing else; there is no account for a visitor and nothing is stored in your browser beyond what a page needs while you are on it.
What we use it for
To run the service you asked for: to sign a teacher in, to show a parent their child’s progress, to reply when you write to us, and to tell the early-access list when family sign-up opens. To keep the site and the app running and safe. And to count how many people reach a page — how many times the flyer’s QR code was scanned, for example.
We do not sell anything we hold, we do not share it for advertising, we do not build profiles of anyone, and we do not use what anyone writes to train any model. We send no marketing email to a parent who did not ask for it, and every email we send says how to stop.
What this site does, and does not, do in your browser
There is no analytics service on this site. Not anonymised analytics, not cookieless analytics, nothing that runs in your browser to watch what you do. There are no advertising trackers, no session recording, no chat widget, and no fonts, scripts or images loaded from anybody else’s servers. This is checked automatically against the built site before it can be published, so it is a property of the site rather than an intention.
What there is, as on nearly every website, is our web server’s own log. Each request leaves a line in it: the network address it came from, the time, the full address asked for, whether it worked and how large the reply was, the page that linked to it, and the description your browser gives of itself — its name, version and the kind of device. The log is kept in our own Amazon Web Services account for 90 days and then deleted. We use it to keep the site running and to count visits to a page; that count is the only measurement we take.
This site sets no cookies, so there is no cookie banner: there is nothing to consent to. Signed-in surfaces use a session token rather than a tracking cookie. It identifies the session and nothing else, and it is discarded when the session ends.
Who holds data for us
Three companies, each as a service provider that may use what it holds only to provide its service to us. Amazon Web Services hosts the site, the app and the database, in a single United States region. Google provides our email and documents, and the sign-in a teacher or parent uses. Anthropic receives Archie’s hint requests, in the state the child privacy notice describes: with every name, identifier and contact detail removed on our own servers first, and never anything that says who a person is.
That scrubbing does not distinguish between an adult’s personal information and a child’s. If a teacher types a colleague’s name into a note, it is replaced before any of the note leaves our servers, exactly as a pupil’s name would be. If the scrubbing fails or runs out of time, nothing is sent.
No one else receives anything about you. We would disclose what we hold only if the law required it, and we would tell you if we were allowed to.
How long we keep it
What clause 2 lists is kept while you use the service and until you ask us to remove it. An early-access email is kept until family sign-up has opened and you have been told, or until you ask. Copies of the database made for recovery are kept for 7 days, so what is removed is gone from them within a week. The web server’s log is kept for 90 days.
The request records described in the child privacy notice hold no name and none of the words; they are the evidence that the rules were followed, and they are kept for that reason. They are not kept forever: the records and their archive copies are deleted after three years.
What you can ask for
To see what we hold about you, to have it corrected, and to have it deleted. Deletion is removal of rows, not a flag that hides them. Write to hello@bbplayland.com, or pilots@bbplayland.com if your family is testing Archie with us. We answer within 30 days, usually much sooner, and we never charge for it.
How deletion works: a learner is erased from every table that references them in one operation, and the erasure itself is logged with a count and no identifier. The test suite enumerates those tables from the database catalogue, so a new table cannot be forgotten. A child’s record is opened by the adult who hands them a card — a teacher, or a parent in a family home — and either can ask for it to be erased.
How it is protected
Everything is encrypted where it is stored and while it travels. The database has no public address and its network has no route to the internet in either direction. Each school and each family is separated from every other inside the database itself, not only in our code, and the application connects as a role that cannot cross that line. Only the people who run the service can reach production, each with their own credentials, and every change to the system is reviewed and tested before it ships. If we ever learned that your information had been reached by someone who should not have reached it, we would tell you without unreasonable delay and say what happened.
Changes, and the law this is written under
This policy is effective from 19 October 2026, and the current version is always at bbplayland.com/privacy. If we change what we collect or what we do with it, we change this page first, and tell everyone with an account by email at least thirty days before the change takes effect. We are a New York company, and this policy is written under the laws of the State of New York and the United States.