Privacy Policy

Small Mailbox Interactive, LLC ("Small Mailbox," "we," "us," or "our")
Effective date: October 14, 2026
Last updated: October 14, 2026

1Scope

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit bippitygoblin.com (the "Site"), when you play the Bippity Goblin game on iPhone, iPad, or any other platform where it links to this policy (the "Game"), and when you otherwise interact with us, such as by email. Together, the Site and the Game are the "Services."

This policy does not apply to third-party websites or services that we link to, or to information about our employees, contractors, and job applicants, which is covered by separate notices. The store you get the Game from, such as Apple's App Store, has its own privacy policy, which governs the information that store collects.

2Information We Collect

We designed the Services to collect as little as possible. There are no accounts, no sign-up forms, no newsletter, no purchases, and no contact form.

The Game.

The Game does not collect personal information. It has no accounts, no advertising, no analytics, and no in-app purchases, and it does not connect to the internet while you play. Your progress and settings are saved only on your own device (see Section 7). We never receive them.

If you have chosen, in your device's settings, to share analytics with app developers, Apple may provide us with crash reports and aggregate statistics about the Game, such as how many times it was installed. Apple provides this information in a form that does not identify you, and we use it only to fix problems and improve the Game.

The Site.

Information you provide to us. The only way to give us personal information through the Services is to email us. If you do, we receive your email address, your name if you include it, and the content of your message and any attachments.

Information collected automatically. When you visit the Site, our hosting provider automatically records ordinary server-log data in order to deliver the pages and keep the Site secure:

• Device and connection data, such as your IP address, browser type, operating system, and language settings.
• Request data, such as the pages you request, the referring URL, and the date and time of each request.
• Approximate location derived from your IP address. We do not collect precise geolocation.

We do not run analytics, advertising pixels, or any other third-party script on the Site, and every file it uses, including its typefaces, is served from the Site itself.

Information from other sources. We do not buy or receive personal information about visitors from data brokers, social media platforms, or other third parties.

Sensitive information. We do not intentionally collect sensitive personal information (such as government identification numbers, precise geolocation, health information, biometric information, or information about racial or ethnic origin, religious beliefs, or sexual orientation), and we ask that you not send it to us by email.

3How We Use Information

We use personal information to:

• Provide, operate, maintain, and secure the Services.
• Respond to your emails and communicate with you about your requests.
• Understand, in aggregate, how the Services are used and improve them.
• Detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activity.
• Comply with legal obligations, enforce our terms, and establish, exercise, or defend legal claims.
• Carry out any other purpose disclosed to you at the time of collection, or with your consent.

We do not use personal information to send marketing, and we do not use automated decision-making or profiling that produces legal or similarly significant effects about you.

4How We Disclose Information

We do not sell personal information, for money or otherwise. We disclose personal information only as follows:

• Service providers that perform services on our behalf: Netlify, which hosts the Site and keeps its server logs, and the email service we use to read and send mail. They are permitted to use personal information only to provide services to us.
• Professional advisers, such as lawyers, accountants, and insurers, in the course of the services they provide to us.
• Legal and safety recipients, including courts, regulators, and law enforcement, when we believe in good faith that disclosure is required by law or legal process, or necessary to protect the rights, property, or safety of us, our users, or others.
• Corporate transaction parties, in connection with an actual or proposed merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business or assets, subject to customary confidentiality protections.
• Others, with your consent or at your direction.

5Data Retention

We keep personal information only for as long as reasonably necessary for the purposes described in this policy, including to satisfy legal, accounting, and reporting obligations and to resolve disputes.

• Email correspondence is kept for as long as needed to answer you and handle any follow-up, generally no longer than 24 months after our last exchange, unless we need it longer to resolve a dispute or meet a legal obligation.
• Server and security logs are held by our hosting provider under its own short retention schedule. We do not keep separate copies, other than while investigating a specific security incident.
• Game progress and settings stay on your device for as long as the Game is installed. We never hold a copy.

When information is no longer needed, we delete it or de-identify it. Where deletion is not technically feasible (for example, in backups), we isolate the information and delete it on the ordinary backup rotation.

6Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (HTTPS) for every page and access to our hosting and email accounts limited to the people who run the studio. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we learn of a security incident affecting your personal information, we will notify you as required by applicable law.

7Cookies and Local Storage

We do not set cookies on the Site, and we do not use pixels, fingerprinting, or any analytics or advertising technology. The Site does not store anything in your browser.

Game saves. The Game saves your progress (where you are, your level, your powers, and the like), your saved journal pages, and your settings in files on your own device, so they are still there when you come back. This information never leaves your device: it is not sent to us or to anyone else, and we cannot see it. It contains no personal information. You can clear a saved page from the Game's Journal, and deleting the Game removes all of it.

Do Not Track and Global Privacy Control. Because we do not track visitors or share information for advertising, there is nothing for these browser signals to switch off. Your visit is treated the same whether or not your browser sends them.

8Targeted Advertising, Sales, and Sharing

We do not sell personal information, "share" it for cross-context behavioral advertising, or process it for targeted advertising, and we have not done so in the preceding 12 months. We do not knowingly sell or share the personal information of anyone under 16.

9Your Choices

• Email. You are never required to email us. If you have written to us and want your message deleted, just say so and we will delete it, subject to Section 5.
• Marketing. We do not send marketing email or text messages.
• Game saves. See Section 7.

10Your Privacy Rights

Depending on where you live, you may have some or all of the following rights, subject to legal exceptions:

• Access / Know. Confirm whether we process your personal information and obtain a copy, including the categories of information, sources, purposes, and recipients.
• Correction. Correct inaccurate personal information.
• Deletion. Delete personal information we hold about you.
• Portability. Receive your information in a portable, readily usable format.
• Opt out of sales, sharing, targeted advertising, and certain profiling. We do none of these.
• Non-discrimination. We will not discriminate against you for exercising your rights.

How to submit a request. Email hello@smallmailboxinteractive.com. Because the only personal information we hold is email correspondence, we will usually verify your request by replying to the address the information came from, and may ask for more information if needed. We respond within the time required by applicable law (generally 45 days, which may be extended where permitted).

Authorized agents. You may use an authorized agent to submit a request. We may require proof of the agent's authority and ask you to verify your identity directly, unless the agent holds a valid power of attorney.

Appeals. If we decline your request, you may appeal by replying to our decision with "Appeal" in the subject line. We will respond within the time required by law. If you are dissatisfied with the outcome, you may contact your state attorney general.

California "Shine the Light." We do not disclose personal information to third parties for their own direct marketing purposes.

11Children's Privacy

Bippity Goblin is made for players aged 7 and up, so some of our players are children. That is why the Game is built to collect no data at all.

The Game collects no personal information from any player, of any age. It has no accounts, no chat, no advertising, no analytics, no purchases, and no way for a player to send information to us or to anyone else. The only information it keeps is the save data on your own device described in Section 7.

Because the Game collects nothing, there is nothing for a parent to review or delete from it, and no parental consent is needed to play. Deleting the Game removes everything it saved.

We do not knowingly collect personal information from children under 13 through the Services. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, for example because a child emailed us, we will delete it promptly. If you believe a child has provided us personal information, contact us at hello@smallmailboxinteractive.com.

12Third-Party Links

The Services may link to third-party websites and services, such as the App Store, where the Game is sold, and the studio's own site at smallmailboxinteractive.com. Those third parties' privacy practices are governed by their own policies, and we are not responsible for them.

13Changes to This Policy

We may update this policy from time to time. We will post the updated policy here with a new "Last updated" date and, where changes are material, provide additional notice (such as a notice on the Services) before they take effect. We will not apply a material change retroactively to information collected under a prior version without your consent where consent is required by law.

14Contact Us

If you have a disability and need this policy in an alternative format, contact us at the email above.