Effective from 23 August 2026

Privacy Notice

Controller

First Element, s.r.o.
Hodálová 471/1, 841 04 Bratislava - Karlova Ves, Slovensko
IČO: 50254961, DIČ: 2120243983, IČ DPH: SK2120243983
Zapísaná v Obchodnom registri Okresného súdu Bratislava I, oddiel Sro, vložka č. 110287/B
Kontakt: hello@mamaaa.eu

Data and purposes

The selected age, energy preference and activity history are stored only in the device's local storage. We do not ask for the child's name, contact details or an account. To evaluate a recommendation, we store an anonymous identifier for one attempt, the test variant, age band from 4 to 7, situation, requested and delivered energy and the technical selection result. Voluntary feedback also stores the answer, perceived fit, selected reason and time to response. The identifier does not link the child or family across separate attempts. We do not collect free text.

Optional family account

If you voluntarily create an account, we store an adult's email address, a secure password hash, the time of adult confirmation, the privacy-notice version, a 30-day sign-in session and a limited progress record. We never store the password in readable form. Progress includes completed moments, up to 30 favourites, 60 recent history entries, identifiers of up to 100 completed games, mastered situations, unlocked rewards and the 26 most recent completed weekly challenges. We do not store the child's name or age. You can delete cloud progress or the whole account from the account page; local device data remains. If you forget the password, hello@mamaaa.eu can help with access or deletion after verifying the request. We retain an active account until you delete it or request deletion; expired sessions are removed periodically.

Technical operation and retention

Cloudflare provides hosting and R2 object storage for feedback. To limit abuse, we create a daily one-way hash of the IP address. We keep feedback and related technical records only during active product evaluation, regularly review whether they are still needed and delete them when they are no longer necessary. Anonymous aggregates may be retained.

Analytics and marketing

Google Analytics 4 loads only after analytics consent. With the same consent, we store the technical LCP, INP, CLS, FCP and TTFB metrics in Cloudflare R2 together with device class, page path and an internal or external traffic classification. We do not attach a cookie ID, UTM tags, user agent, raw IP address or visitor identifier; only a daily one-way IP hash is used to limit abuse. Meta Pixel loads only after separate marketing consent. Meta may receive page views and events about situation selection, activity views and feedback. We do not send the child's name or age. The choice can be changed at any time through Cookie settings.

Email updates

If you sign up voluntarily, we process your email address, language, consent time, consent-text version and a one-way hash of the IP address. Make transfers these details to a separate MAMAAA list in Ecomail. Subscription is completed only after you confirm the link in the email. These details are not sent to Google Analytics or the Meta Pixel. We delete the contact after unsubscribing or after 24 months without activity.

Payment and paid access

MAMAAA Pass is offered for a one-time price of €8.90 including tax. Stripe processes the payment. We provide a secure recovery code; only a one-way hash of the payment email is stored for recovery support. With analytics consent, we may associate non-personal UTM source and campaign tags, the landing path, language and offer placement with a payment through a random reference. The reference contains no email address or other personal details. We do not store full card details.

Legal bases, recipients and rights

Necessary operation, contract performance and security rely on contract and legitimate interests. Analytics and marketing rely on consent. Recipients may include Cloudflare, Stripe, Link, Make, Ecomail, Google and Meta; transfers outside the EEA use safeguards required by law. You have rights of access, correction, deletion, restriction, objection, portability and complaint.