Privacy Policy

This Privacy Policy explains how Splat Lab! (“we”) handles information on splatlab.games. It is written for parents and families. It describes how the product works today; it is not a substitute for legal advice.

Built for kids

Splat Lab! is a kids’ creation lab. We designed it so a child can make and play games without a public social profile and without an advertising business model. You can start with an anonymous Lab session and a Lab Key — no email required. If a family chooses to create an account, the account holder signs in with their email and password; children in that family use named profiles and PINs, not their own email addresses. Parents should still stay nearby, because children can share games and talk with Cooper.

What we collect

Depending on how the Service is used, we may store:

• Lab session information. An anonymous or registered account, a session cookie, and sometimes an IP address and browser user agent attached to that session.
• Account holder email. If a family creates an account, we store the holder’s email address and a password hash for sign-in, verification, and password reset. We do not ask children for their own email address or password.
• Family profiles and PINs. When parent mode is on, we store a hashed parent PIN and, for each child profile, a display name and optional hashed child PIN. PINs are stored as hashes, not as the numbers you type.
• Display name and avatar. A chosen lab name and portrait, which can be a playful generated name rather than a child’s real name.
• Lab Keys. A recovery key for My Lab. We show the readable key when it is created. We store a hashed lookup, not the key itself, so we can check a key later without keeping a copy of it.
• Games and media. Game titles, maps, settings, thumbnails, and whether a game is public. Screenshots and videos are saved only for registered account holders (including children playing under that family account).
• Cooper chat. Messages typed in the free-text Cooper box (for entitled accounts) so he can change a game, plus related safety checks. The ten Cooper suggestion chips run on our own systems and do not send chat text to OpenAI.
• Usage analytics. High-level site performance and visit information from our hosting provider.

How we use information

We use this information to:

• Run Lab sessions and remember a workspace with a Lab Key.
• Sign in account holders and manage family profiles and PINs.
• Save, load, and play games.
• Let Cooper help build and change games.
• Screen chat and names so the lab stays about making games.
• Host, secure, debug, and understand how the Service is doing.
• Honor public or link-based sharing choices.

We do not sell personal information, and we do not show third-party ads.

Who we share with

We use other companies to operate the Service. They only get what they need to do that work:

• Hosting and storage. The site, database, and uploaded screenshots and videos are hosted on infrastructure providers (today that includes Vercel and Neon).
• Cooper and safety checks. Free-text Cooper messages and some names from entitled accounts are sent to OpenAI so Cooper can help build games and so we can screen content. Cooper suggestion chips do not use OpenAI.
• Analytics. Vercel Analytics and Speed Insights help us see whether pages are working.

We may also share information if the law requires it, or if we need to protect a child, a family, or the Service.

Cookies and similar technology

We use a session cookie so a browser can stay signed in to a Lab. Our hosting provider may also set cookies or similar tools for analytics and performance. The Service needs the session cookie to remember a workspace; analytics cookies are used to operate and improve the site.

Family accounts and PINs

A registered account holder can turn on parent mode and set a parent PIN. That PIN protects account settings, family changes, and switching from a child profile back to the holder’s Lab. Each child profile can have an optional child PIN — useful when siblings share a device. PINs are stored as hashes. Different family members can use Splat Lab on different devices at the same time; each device keeps its own session and acting profile.

Sharing games and media

A game kept private in My Lab is not listed in the public catalog. If you publish a game, it can appear on splatlab.games for anyone to play. Screenshots and videos can be opened by anyone who has the share link. Think of those links like a photocopied drawing you handed to a friend: we cannot control what happens after someone else has the link.

Children’s privacy

We aim to collect only what the lab needs to save a workspace and make games. Children do not sign in with their own email address or password. The account holder’s email is the family contact for verification and account recovery. Please do not type addresses, phone numbers, school names, or other personal details into Cooper chat, game titles, or shared media. If you believe a child has shared personal information through Splat Lab!, write to us and we will look into it.

Keeping and deleting information

We keep Lab data while an account and its games exist so families can come back and keep building. Signing out everywhere ends sessions. Replacing a Lab Key revokes older keys. Registered account holders can delete child profiles or the whole account from Account settings (a parent PIN is required when parent mode is on). To ask us to delete a workspace or investigate a privacy concern, email privacy@splatlab.games.

Changes

If this policy changes in a meaningful way, we will update the effective date at the top of this page.

Contact

Privacy questions and requests: privacy@splatlab.games.