Privacy

BIBO Bay is a story world in development. This page explains what happens to the details you share through this website, in plain words.

What the founding-family form collects

The form is for adults. When you join the founding-family list, the website stores:

Your email address, which is required.

Your first name, if you choose to give it.

A broad age range for your child (under 3, 3 to 5, 6 to 8, 9 to 12, or prefer not to say), if you choose to give it.

Your consent: that you ticked the consent box, the version of the wording you agreed to, and when you agreed.

Where the signup came from: the page it was made on, your browser's language setting, and any campaign tags (utm_source, utm_medium, utm_campaign, utm_term, utm_content) in the address of the page you arrived on.

When you signed up, and when the same email address was submitted again.

What we do not collect

We do not ask for your child's name, birthday, photo, school or any other detail about a child. The age range is broad and you can skip it.

We never ask for payment card details. Nothing is sold on this website.

Your IP address is not stored with your signup. To stop the form being flooded, the website keeps a rate-limit count of signup attempts, in 10-minute windows, against a one-way, keyed code made from your network address. That count is not linked to your signup and is used only to enforce the limit.

This website does not use advertising or analytics cookies. It sets two kinds of cookie, neither for visitors: a preview cookie used by the people who edit the website, and session cookies set only when BIBO Bay staff sign in to manage orders. The staff session cookies are httpOnly, so page scripts cannot read them, and they are removed when staff sign out.

Visit statistics

Only when statistics are switched on for this website, it counts visits with PostHog to learn which pages, videos and activities families use, and how they find BIBO Bay. Each page view and each button or link you choose is sent with: the page address (without anything after a question mark except campaign tags), the site or campaign that sent you, your browser, operating system, device type and screen size, your browser's language and time zone, which parts of the page you reach, and how far down each page you scroll and how long you stay. To count visitors without cookies, PostHog combines your network address and browser details with a value that changes every day; it does not keep the address.

It uses no cookies and stores nothing on your device unless you turn statistics off, when your browser remembers that choice. It builds no profile of you and cannot recognise you on a later day. It never records what you type into the form; it notes only that a signup was saved.

A browser that sends Global Privacy Control or Do Not Track is not counted. You can turn statistics off, or on again, under Analytics choices at the foot of every page.

Why we use your details

To send you updates about BIBO Bay, which is what you agree to when you join, and to send you the download link for the free activity pack. Once email sending is set up, you receive one email confirming that you joined, and the BIBO Bay team may receive a short note with your email address, first name and age range so they know someone signed up.

We do not sell your details or share them with advertisers.

Services that handle your details

Supabase hosts the database where signups are stored.

Resend delivers the emails described above.

PostHog receives the visit statistics described above, when they are switched on.

Sentry receives error reports, only when error reporting is switched on for this website: what went wrong and where in the code, the page address without anything after a question mark, your browser type, and the website's own short labels for the problem. Error reports carry no form details and no cookies, and the website does not add your network address to them.

For each email, the database keeps a delivery record: which email it was, whether it was sent, how many attempts were made and when, the email service's message reference, and a short error code if sending failed. It does not keep a copy of the email.

Sanity hosts the website's text and pictures. When a page shows a picture from Sanity, your browser loads it from Sanity's image service. No form details are sent to Sanity.

Like any website, the servers that deliver these pages receive your browser's requests, including its network address, in order to send the pages back.

How long we keep your details

We keep your signup, and its delivery records, for as long as the list exists; nothing deletes it automatically. When you ask to be removed, a member of the BIBO Bay team marks your signup as withdrawn: it is no longer used to email you, and the record that you withdrew, and when, is kept so we can respect your choice. The website does not delete the signup itself. If the same email address is submitted again after you withdrew, the website only notes the date; it does not sign you up again.

How to ask for removal or a copy

Joining the list is not open yet, so there is nothing to remove. When it opens, this page will say how to ask for removal or for a copy of your details.