Tiny Tots Play

Privacy, in plain words.

Effective 15 November 2026 · Parent Club notice version 2026-11-15-v1

Tiny Tots Play is operated by Indrani Dutta as proprietor. Contact us about this website, your signup or privacy at tinytotsplay0612@gmail.com or +91 88263 03438.

The free book is yours to enjoy

You can download the colouring book without filling in a form. Joining the Parent Club is optional. This website currently offers free downloads and does not take orders or payments.

A club for adults

The signup form is for people aged 18 or over using their own contact details. Please do not enter a child’s name, email, phone number, date of birth, school or other personal information. An adult should supervise children’s use of the activities. We do not knowingly collect children’s information through this form; contact us if it has been submitted so we can remove it.

What we collect and why

• Your first name and email address to manage your signup and identify your request.
• Your city and state or region, if you choose to provide them, to help us understand our adult audience and plan relevant resources. We do not ask for your street address or precise location.
• Your mobile number only when you choose WhatsApp updates.
• Your chosen communication preferences, adult confirmation, the wording and version of the consent notice, signup source, and creation and update times so we can record and respect your choices.

For each channel you actively select, you agree to receive Tiny Tots Play activity ideas, free resources, product news and offers. Email and WhatsApp choices are separate and start unticked. Providing an email without selecting email updates does not give permission for email marketing.

How your data is handled

Signup records are stored in the website’s private database, with access restricted to the proprietor and authorized site administrator. ChatGPT Sites and Cloudflare provide website hosting and database services and process data to operate the site. Their infrastructure may process data outside India. We do not sell your signup data.

Signup requests are initially unverified. When email sending is enabled, people who select email updates receive a confirmation link that expires after 24 hours; confirming sends a welcome email with the free book. Google Apps Script and Google Mail process the recipient email, first name and private links to deliver these messages. We store confirmation and sending status. We do not read your inbox or use tracking pixels in these emails. Delivery may be delayed or unavailable; the book remains downloadable on the website. WhatsApp automation is not connected. We will update this notice if we add messaging providers or materially change how we use your details.

Your choices and deletion

After joining, you receive a private management link. Save it securely: anyone with that link can view or change that signup’s preferences or delete it. You can untick either channel, stop both, or delete the signup entirely. If you have submitted more than once, each private link manages that particular signup.

If you lose the link or want all records associated with your contact details removed, email us. We may ask for reasonable confirmation that the details belong to you before acting. We retain signup records while you remain enrolled, unless you delete them or request removal. Changing both preferences to off stops permission for promotional updates; deleting the signup removes the record from our live database. Service-provider backups or essential security logs may expire separately under their retention processes.

Website security and other services

Our form uses a short-lived, salted hash of a connection address to limit abuse, rather than storing the raw address with your signup. These rate-limit entries expire after at most two hours and are cleaned up on subsequent form requests. Hosting providers may process routine connection and security logs.

We do not use advertising pixels. We record first-party anonymous activity counts on public landing, resource and video pages: page views, recent activity, PDF-link clicks and clicks to YouTube, Instagram and Kindle. A random browser-tab identifier expires after 30 minutes of inactivity; the server hashes it with a daily salt context. We keep events for up to 90 days and remove expired events on subsequent activity or dashboard requests. We store only broad source and device categories, public page paths, event types and times. We do not attach signup details, raw IP addresses or full referring URLs to these events. We honor Global Privacy Control and Do Not Track. You can also turn off these counts on this browser using the control below; that preference is saved locally. Direct PDF opens, actual file saving, printing and external subscriptions cannot be measured by these counts. The public form does not require a tracking cookie. Administrator sign-in uses ChatGPT authentication. Links to Instagram, YouTube and Amazon take you to services governed by their own privacy practices; their content is not embedded in the signup form. Video watch pages embed YouTube using its privacy-enhanced player, which connects to YouTube to display and play the video. Video thumbnails are served by YouTube. Those requests may disclose your IP address and device/browser information to Google. YouTube’s privacy practices apply to the player. No autoplay is enabled.

Optional Google Analytics

Adults may opt in using Privacy choices. Until you choose this, we do not load Google Analytics. If enabled, Google receives technical information such as your connection address, browser/device information and activity on the public pages, and uses analytics cookies to distinguish browsers and sessions. We send public page paths without query strings or fragments, broad source labels, and selected events such as PDF-link clicks and successful signup counts. We do not send names, email addresses, phone numbers, private management links or form contents. Advertising storage, ad personalization and Google signals are disabled. Google may process data outside India. See Google’s privacy policy. Your choice lasts up to 90 days on this browser and can be withdrawn here. Withdrawing stops future collection; it does not erase reports already collected. Our own activity counts and Google reports can differ because they use different measurement methods and consent choices.

Contact us

For a correction, withdrawal, deletion request or concern, email tinytotsplay0612@gmail.com with the subject “Parent Club privacy”. Please do not send identity documents or information about children unless specifically needed and agreed through a suitable private process.