cubiousBack to Cubious

oops & co. · Cubious

Privacy Policy

This draft explains, in plain language, how information submitted through the Cubious Giveaway form is collected, used, stored and shared.

Effective dateAugust 20, 2026

Last updatedAugust 20, 2026

Draft for owner and legal review. This policy has not been reviewed or approved by a lawyer and is not legal advice.

01

Who We Are

Cubious is a family game offered by oops & co. In this policy, “we,” “us” and “our” refer to the business responsible for oopsandco.com and the Cubious Giveaway form.

Legal business name
KindLoop LLC
Business location
Sheridan, Wyoming, USA

02

Adults Only Submission

The Cubious Giveaway form is for a child’s parent or legal guardian to complete as an adult. We do not ask children—including children ages 4–8—to fill out the form themselves or submit information directly to us.

The adult submitting the form must confirm that they are the child’s parent or legal guardian. If we learn that information was submitted directly by a child without the required adult involvement, please contact us so we can review and delete it as appropriate.

03

Information We Collect

When a parent or legal guardian submits a Cubious moment, the form collects and stores:

  • the parent or guardian’s email address;
  • the child’s nickname or first name, if provided (it is required when Instagram sharing permission is selected);
  • the child’s age;
  • the question the parent or guardian asked;
  • the child’s answer as entered by the adult;
  • confirmation that the submitter is the child’s parent or legal guardian;
  • Instagram sharing permission status;
  • Giveaway contact permission status;
  • optional marketing email permission status;
  • the submission date and time; and
  • an internal review status and a one-way duplicate-prevention code created from the submission.

Technical and anti-spam information

The form uses a hidden anti-spam field, field-length limits, server-side validation and a one-entry-per-email rule. The hidden field is checked when the form is submitted but is not saved in the Giveaway database. The current form code does not add IP addresses, browser details or device identifiers to the Giveaway record.

Our hosting and security providers may automatically process standard request information—such as an IP address, browser or device information, request time and security logs—to deliver and protect the website. We do not add this information to a Cubious Giveaway entry or use it for advertising.

04

How We Use Information

We use the information described above only for the purposes that apply to the choices made on the form:

  • to receive and administer Cubious Giveaway entries;
  • to contact a selected entrant using the parent or guardian email;
  • to review, organize and manage submitted questions and answers;
  • to share a selected child’s answer on Instagram only when Instagram sharing permission was given;
  • to send occasional Cubious news, activities and product updates only when the separate marketing option was selected;
  • to prevent duplicate submissions, spam, fraud and misuse; and
  • to prepare combined statistics that do not identify a particular parent or child, such as entry totals, age distribution and permission percentages.

We do not use a Giveaway contact permission as permission to send advertising or a newsletter.

05

Instagram Sharing

We may share a submitted moment on the oops & co. Instagram account only if the parent or legal guardian selected the optional Instagram sharing permission.

A shared post may include the child’s submitted answer, the nickname or first name entered on the form, and the child’s age. The parent or guardian’s email address is not included in the Instagram post. The current permission does not authorize us to publish additional identifying information.

To withdraw Instagram permission before posting, or to ask us to remove a post after it appears, contact cubious@oopsandco.com. We will make reasonable efforts to remove content we control. Copies, screenshots, re-posts or other sharing by Instagram users or third parties may remain outside our control.

06

Giveaway Contact and Marketing

Giveaway contact

The required Giveaway contact permission allows us to use the parent or guardian’s email only to administer the Giveaway and contact them if the submission is selected. It does not provide permission for advertising, product promotions or a newsletter.

Occasional emails

A parent or guardian joins the marketing list only by separately selecting “Occasional emails.” This choice is optional and is stored separately from Giveaway contact permission. A subscriber may unsubscribe at any time by using the unsubscribe method in an email or by contacting cubious@oopsandco.com. We will honor an unsubscribe request within 10 business days.

We currently contact selected entrants manually from cubious@oopsandco.com. The website records optional marketing permission, but we do not currently use an automated email marketing service. If we add one later, we will update this policy before using it.

07

Service Providers and Disclosures

We use service providers only where needed to operate, secure and manage the website and Giveaway:

  • OpenAI Sites supports website publishing, hosting operations and protected administrator access.
  • Cloudflare provides website delivery and the D1 database used to store Giveaway submissions.
  • Google Workspace and Gmail provide the business email service we use to receive privacy requests and contact selected entrants. Google may process email content, sender and recipient addresses, timestamps, delivery data and security information as needed to provide and protect that service.
  • Instagram (Meta) receives selected content only when we post it after the parent or guardian has given Instagram sharing permission. Visiting Instagram is also subject to Meta’s own privacy practices.
  • Amazon is linked only as an external purchase destination. This website does not send Giveaway form entries to Amazon.

We may also disclose information when reasonably necessary to comply with law, respond to a valid legal request, protect the safety and rights of families or others, investigate misuse, or secure the website. We do not sell Giveaway submissions.

08

Data Retention and Deletion

We keep information only for as long as it is reasonably needed for the purpose for which it was collected. The Giveaway form is not permission to keep a child’s information indefinitely. Our current retention schedule is set out below.

InformationReasonRetention period
Giveaway entry and contact informationRun the Giveaway, review entries and contact a selected entrantDeleted within 90 days after the relevant Giveaway is completed and the prize is delivered, unless the entry is selected for an Instagram post or must be kept briefly for a legal or fraud-prevention reason.
Instagram permission and published contentDocument permission and manage requested removalKept while the post remains published. If the parent asks us to remove it, we will remove content we control and delete the related permission record within 90 days, unless a short additional period is legally required.
Marketing email and permission recordSend optional emails and honor unsubscribe requestsKept until the parent unsubscribes. We will stop marketing emails within 10 business days and may keep only the minimum suppression record needed to honor that choice.
Security and request logsDeliver and protect the website and investigate misuseHandled under the hosting and security providers’ operational schedules. We do not copy these logs into the Giveaway database or keep a separate owner-managed log archive.

When information is no longer needed, we will delete or de-identify it using reasonable measures, unless a longer period is required for a legal, safety, fraud-prevention or recordkeeping reason.

09

Parent and Guardian Rights

A parent or legal guardian may ask us to:

  • confirm whether we hold their submission;
  • review or receive a copy of the information they submitted;
  • correct inaccurate information;
  • withdraw Instagram or marketing permission;
  • stop future use or collection of the child’s information;
  • delete the child’s information and Giveaway submission;
  • request removal of an Instagram post we control; or
  • unsubscribe from optional marketing emails.

How to make a request

  1. Email cubious@oopsandco.com with the request.
  2. Include the parent or guardian email used for the submission and enough information to locate it, such as the child’s nickname or first name and age. Please do not send unnecessary identity documents.
  3. We will ask the requester to reply from the same email address used for the submission and confirm limited details already provided on the form, such as the child’s nickname or first name and age. We will not request a government ID unless it is reasonably necessary to resolve a genuine identity concern.
  4. We aim to respond within 30 days. Marketing unsubscribe requests will be honored within 10 business days.

10

Security

We use reasonable safeguards designed for the information handled by this form. These include server-side validation, input-length limits, prepared database queries, duplicate-submission controls, a protected administrator area, restricted administrator access and HTTPS on the production website.

No website, database or transmission method can be guaranteed completely secure. We do not promise absolute security, but we will review and improve safeguards as the form and its service providers change.

11

Cookies and Analytics

The current public website code does not install advertising pixels, behavioral analytics or an analytics service, and it does not intentionally set cookies for Giveaway participants. The protected administrator sign-in and the website’s hosting or security systems may use essential cookies or similar technology needed for authentication, delivery and protection.

Our August 20, 2026 review of the public production website found no third-party analytics, advertising pixels or external tracking scripts. If analytics, advertising tools or additional cookies are added later, we will update this policy before those tools are used.

13

Changes to This Policy

We may update this policy when the Giveaway, website, service providers or legal requirements change. We will post the revised policy on this page and update the “Last updated” date. If a change materially affects how previously submitted child information is used or shared, we will seek any additional parent or guardian permission required before applying that change.

14

Contact Us

Questions, privacy requests and deletion requests may be sent to:

KindLoop LLC
Sheridan, Wyoming, USA
Email: cubious@oopsandco.com
Cubious homeCurious is how you know.© 2026 oops & co.