Privacy Policy

Last updated November 14, 2026

This is a plain-language summary drafted for Playmat; have it reviewed before relying on it. Details still to fill in: contactEmail, governingState.

Playmat is built to know as little as possible. It stores what it needs to run your account, and only the session data you choose to keep, under a nickname you pick.

What we collect

  • Your account: your name, email address and a scrambled (hashed) version of your password. We never store your actual password.
  • Your subscription: the amount you pay, your level and whether your subscription is active, as reported by Stripe. Stripe handles your card; we never see or store card numbers.
  • Your plans (Plus and Clinic): the letters and shapes in your practice sets, the games and levels in your playlists, the names you give them, and the emails of colleagues you add to a Clinic plan.
  • Your caseload (if you use it): a nickname or code you choose for each child, an optional age band, a color and a picture; the goals you pick; and the session data you record (dates, trial tallies, prompt levels, notes, and any game summaries you save). Playmat refuses emails, phone numbers, dates, street addresses, long ID numbers and links in these fields, and warns about anything that looks like a full name. On a Clinic plan, children you share are visible to your clinic colleagues.
  • Session plans and home programs: the activities, instructions and titles you write. A home program link contains a long random key; we store only a scrambled (hashed) form of it, plus when it expires and whether you turned it off.
  • Usage counts: how many times each game was started on each day, across all accounts. The count isn't linked to you, a device or a child. To limit abuse we also keep a per-account count of reports for a few days, then delete it.
  • On your device only: your setup choices (level, number of turns, start side, sound), each game's level and adaptations, and your favourite games are saved in your browser's local storage. They never reach our servers.

What we don't collect

  • No child names, birthdays, schools, diagnoses, photos or contact details. Use a nickname or code on your caseload, and please keep names out of set, playlist, plan and home program titles too.
  • No automatic scores. End-of-game summaries exist only in the browser's memory while the game is open, unless you tap Save to caseload.
  • Nothing from families. A home program link opens with no account, and the games it plays send nothing back to us.
  • No analytics, no advertising trackers and no third-party cookies.

Cookies

We use one essential cookie to keep you signed in. We don't use cookies for tracking or advertising.

Who helps us run Playmat

  • Stripe processes payments and stores your card details under its own privacy policy.
  • Our hosting provider runs the server and stores the database.

We don't sell or rent your information, and we don't share it for advertising.

How long we keep it

We keep your account information while your account exists. You can delete your account at any time from your Account page, or ask us to do it. Deleting your account removes your name, email, password hash, practice sets, playlists, Clinic colleague list, caseload and all its session data, session plans and home program links (which stop working), and cancels your subscription. Saved game summaries that aren't attached to a child are deleted automatically after 30 days. Stripe keeps payment records as financial law requires.

Children's privacy

Playmat is a service for adults. Children play the games only during a session supervised by an adult, on that adult's device and account. We don't knowingly collect personal information from children under 13. If you believe a child's information has been entered, contact us and we'll delete it.

Playmat isn't designed to hold health or education records. The caseload is for de-identified working notes: don't enter information that identifies a child anywhere in the service, and keep the official record in your own documentation system.

Security

Connections to Playmat are encrypted, passwords are hashed, and payment details stay with Stripe. No system is perfectly secure, so use a strong password that you don't use anywhere else.

Your choices and requests

To see, correct or delete the information we hold about you, email <SUPPORT EMAIL>. We'll answer within 30 days. Playmat is a product of Cerebrellic.

Forgot your password? Email us from your account email address. We'll check it matches and send you a one-time reset link or a temporary password to change after you sign in. We never ask for your old password.

Changes

If we change this policy in a meaningful way, we'll tell you before it takes effect. See also our Terms of Service.