Family-testing edition · October 26, 2026
Who operates the service
Tequilla Turner, doing business as Elf Intelligence Agency / E.I.A.
6841 Virginia Pkwy, Ste 103-142, McKinney, TX 75071
(903) 225-6947
mrs.claus@agentelf.shop
What we collect and why
- Parent accounts: email address, account name if provided, authentication and family identifiers, consent choices and confirmation records, support messages, and billing references. We use these to manage the account, verify parent choices, provide support and administer membership.
- Child profiles: first name, age supplied by the parent, protected Agent Code information, family association, the chosen elf, activity completion, rewards, badges and certificates. We use these to authenticate the child and provide their activities and saved progress. Children do not need their own email address.
- Private Elf Mail: letters, subjects and replies, read status and relevant parent notes. These help E.I.A. provide and personalize private correspondence. The responsible parent and authorized E.I.A. owner can review the family's messages. Do not include a child's address, school, phone number or other sensitive details in a letter.
- Technical information: sign-in/session identifiers, necessary browser storage and hosting/security logs, which can include IP address, browser information, request time and errors. These support delivery, account security and troubleshooting.
The Landing Pad Tracker's dated discovery journal stays in browser storage on that device. Mission completion and rewards are saved to the child account. Clearing browser data can erase the local journal; it does not upload a project to E.I.A.
Parent notice and consent
Parent signup email confirmation verifies access to the parent email account. Before a child uses features that collect personal information, the signed-in parent reviews the direct privacy notice and gives permission once through the parental consent form. We email a copy of the accepted notice and agreement, with instructions for withdrawing consent. No second consent click in that email is required. A coupon, saved card or $0 checkout is not proof of parental consent. Membership and consent are checked separately.
You may refuse consent. Your parent account remains available for billing and support, but your child cannot use features requiring their information. We do not condition participation on providing more child information than reasonably necessary. Changes that require new consent will be presented to the parent before the changed collection or use begins.
Who processes information
- Hostinger: website hosting, operational/security logs and the business mailbox used for support and consent emails.
- Supabase: parent authentication, protected application data, child sessions, private messages, activity records and server functions; storage also holds site media and any older project files awaiting deletion.
- Stripe: the parent's checkout, subscription, saved payment method, invoices, cancellation and refunds. E.I.A. receives billing identifiers and status, not full card numbers or card security codes. Child letters and activity records are not needed for Stripe billing.
- jsDelivr: delivery of the Supabase browser software on account pages. Loading this software sends the CDN a normal browser request, including technical request information; E.I.A. does not send it the content of child letters or activity records.
We use providers for their service roles, rather than to publish or advertise children's information. E.I.A. does not sell children's information or use it for targeted advertising. The reviewed Elf Mail application path stores messages in Supabase for private E.I.A. correspondence; it does not call an external generative AI service. We do not authorize providers to use child correspondence to train AI models. Limited information may be disclosed when required by law or to protect security and legal rights.
No project submissions or child publication
The Gazette contains owner-published material. Children cannot upload photos, recordings, projects or stories for publication. A poll can record the child's selected option under the protected account so repeat votes and totals can be managed; it does not publish the child's identity.
Review, correction and withdrawal
Contact the operator above to review or correct your child's information, stop further collection, or request deletion. We verify that requests come from the responsible parent before disclosing or changing child information. Parent Headquarters provides family progress and Elf Mail views, Agent Code controls and child-data deletion.
Use the parent consent page to withdraw permission. Withdrawal ends child sessions and prevents further access requiring consent. It does not automatically cancel billing or issue a refund; use billing controls or contact support for those actions. You can also request deletion of information already collected.
Retention and deletion
Child profiles and linked records are kept while needed to provide the family's active service. A successful membership refund ends paid access immediately and schedules child-data cleanup seven days after the refund. When a membership ends without a refund and is recorded as canceled or inactive, cleanup is scheduled thirty days after the paid period ends. A new active membership recorded before cleanup preserves those records. Turning off renewal preserves access through the paid period.
The cleanup job runs hourly after a deadline. It removes child profiles, progress, codes and sessions, messages and linked notes and votes. Older project files are queued for removal with retries if storage is temporarily unavailable. Child-data deletion through Parent Headquarters takes effect when the request succeeds, without waiting for the seven- or thirty-day deadline.
Deleting child data does not delete the separate parent login or billing records and does not cancel the subscription. Parent account, billing, consent and support records are retained separately for the purposes of account support, consent evidence, accounting, refunds, disputes and legal obligations. These records must not be reused to rebuild a deleted child profile.
Older material copied into Gazette drafts or saved editions can require owner review and separate removal. Previously printed or downloaded copies held by others cannot be erased by website controls. Provider backups and operational logs are separate from the live application; deletion from the live service is not a promise of immediate erasure from every backup or log. Contact us about the scope and status of a deletion request.
Security and policy changes
We use authentication and access restrictions to separate family accounts and restrict owner functions. No online service can guarantee absolute security. We will update this policy when practices change and provide notice and new consent when required. Direct questions to the operator above.