Privacy policy: Professor Oops app and website

Who is responsible

Professor Oops and this website are made by Game Tailors, the Netherlands. Game Tailors is the controller for the little personal data described below, under the EU General Data Protection Regulation (GDPR).

• Company: Game Tailors (alias Orbit Games)

• Address: Schieweg 15Y-40, 2627 AN Delft, the Netherlands

• Chamber of Commerce (KvK): 92437702

• VAT number: NL866044474B01

• Privacy questions: info@gametailors.com

• Phone: +31 6 4227 5919

The iPhone, iPad and Android apps

The apps don't ask for a name, an e-mail address, a birthday or anything else about your child. There are no accounts, no advertising and no third-party trackers or analytics.

What stays on the device. Drawings, the page your child is working on, home-made stencils, settings and whether the full toolbox is unlocked are stored in the app's own storage on the device. They are not sent to us. If your device backs up apps (for example through iCloud or Android's backup), saved drawings may be included in that backup, which is between you and Apple or Google.

Going online. The game itself, with its pictures and sounds, is all in the app. The apps go online for one thing only: the anonymous counts (to send them when they are switched on, and to ask our server whether they start switched on where you are). That is what the Android app's internet permission is for. Like anything sent over the internet, a report comes with the device's internet address, which we use only as described under anonymous counts and internet addresses below.

Professor Oops's voice. Professor Oops, the painter who talks to your child, speaks recorded lines that come with the game. Nothing your child says or does is recorded or sent anywhere: the game never uses the microphone or the camera. A grown-up can turn the voice off in the settings.

Purchases. The one optional purchase is made through the App Store or Google Play, by a grown-up behind the parent gate. Apple or Google handle the payment and tell the app only whether the full toolbox is owned. Their own privacy policies apply to that payment. To offer the right price, the app asks the store which country it's in.

DEPLAY MAX. On DEPLAY Kids tablets, the Android app asks the DEPLAY MAX app on the same tablet whether the family's DEPLAY MAX subscription covers Professor Oops, and keeps that yes or no on the device. The question stays on the tablet; nothing about your child is in it. This only happens on DEPLAY tablets.

Saving pictures. When a grown-up saves a picture (behind the parent gate), the device's own share sheet opens and the grown-up chooses where it goes.

The browser version (play.professoroops.com)

The browser version stores drawings, settings and any unlock in your browser on your device, not with us. It sets no tracking cookies and loads nothing from advertising or analytics services; its fonts, sounds and pictures come from its own address. What it keeps in your browser (drawings, settings, and after a purchase the licence and the restore code) is needed for the game to work, and goes when you clear the site's data. While the anonymous counts are on, their small record is kept there too.

Buying in the browser. If a grown-up buys the full toolbox in the browser, the payment page is run by Stripe. Stripe processes the card or other payment details, the country and the e-mail address for the receipt. We see the purchase in our Stripe account (the e-mail address, the amount, the country and the restore code), but not your full card details. The receipt e-mail contains the restore code.

The game talks to our licence server at play.professoroops.com only for the purchase and for the anonymous counts. For the purchase: to show the price, start the payment, collect the licence, restore it with a code, and check about once a week that the payment still stands (for example, that it wasn't refunded). For that it sends the payment's reference, the licence or the restore code, never anything about your child.

Internet addresses. Like every website, the browser version receives your device's internet (IP) address with each request. We, and Cloudflare for us, use it only to deliver the game, to keep it secure and to limit how many purchase or count requests one address can make per minute. It is never used to contact anyone, to build a profile or to show ads. We have not switched on stored request logs for the game. Whether the browser version sells the full version where you are (in the EU, Norway, Iceland and Liechtenstein) is decided from the country Cloudflare reads from your internet address; that country is not stored.

School and gift codes. A code from a school, a colleague or a friend unlocks the full version without a purchase. When it is used, the game sends the code (and the licence the device already has, if any) to our licence server. For each device that uses a code we keep a random number that stands for nothing but that place on the code (it is also in the device's licence), when the code was used, and when the device last checked in (about once a week, when it is online). We keep no name, e-mail address, internet address or details of the device, and nothing about pupils or children. The codes themselves are kept only as a fingerprint (a hash), not readable. This is kept in a Cloudflare database in the EU, with a daily backup, also in the EU, kept for 90 days.

Anonymous counts (apps and browser)

To see which tools children use and enjoy, which ones nobody finds, and whether the game is played again, the game can count a few things on the device and send the counts to us. It never sends anything that says who your child is, or that tells one device from another.

What is counted on the device. How many times each tool is used (and which kind, such as ketchup or mustard), which colouring pages and time skips are picked, and how many times the game is started and played. To work out the rough figures below, the device also keeps the day the counting started, the last days the game was played and how many times it has been started.

What is sent, at most once a day, at a random moment while the game is played: those counts; whether it is the iPhone or iPad app, the Android app or the browser version; the version of the game; the game's language; whether the full toolbox is unlocked; whether this is the device's first report this week and this month; and three rough figures worked out on the device: how many days since the counting started (0, 1, 2, 3, 4–6, 7, 8–13 … 180 or more), how many days since the game was last played (1, 2–3, 4–7 … 31 or more) and how many times it has been started (1, 2, 3–5, 6–10 … over 100). Nothing else: no name, no account, no device or advertising ID, no random ID, no exact times, nothing your child draws or types. Then the counting starts again from zero.

What we keep. Our server adds each report straight into daily totals (such as “the crayon was used 1,200 times on 3 May”) and doesn't keep the report itself. For the browser version, the country Cloudflare reads from the internet address is added as a total of its own, never together with anything else; reports from the apps get no country. The totals are kept in a database in the EU (Cloudflare D1): by day for 25 months, then by month. They can't be traced back to a device or a child, so there is no family's part of them to look up or delete.

Switching it on or off. In the grown-ups' area, under Settings: “Help improve the app (anonymous counts)”. Switched off, nothing is counted or sent, and what the device kept for the counting is deleted at once. Where the law asks for consent first (the United Kingdom, the Channel Islands and the Isle of Man, and the countries of the EU and the EEA except the Netherlands, France and Italy), or where the country can't be told, it starts switched off and only counts once a grown-up switches it on; elsewhere it starts switched on. To know which applies, the game asks our server the first time it starts (and once a month after that); the server reads the country from the internet address and doesn't store it. On the device the counting keeps its record for at most 13 months, then starts afresh.

Why we may. The counts help us make the game better. Our legal basis is our legitimate interest (GDPR art. 6(1)(f)), weighed with children's interests: no identifier, totals only, no profiles, no advertising, and a switch to turn it off. Where it starts switched off, the counting on the device happens only with your consent, given by switching it on.

This website (professoroops.com)

This website uses no tracking cookies and no analytics, and shows no ads. It loads no fonts or scripts from other companies.

Like any website, the servers that deliver these pages may keep technical logs, which can include your IP address, for security and to keep the site running. The website is hosted with Google Firebase Hosting, which keeps IP addresses for a few months to detect abuse.

What we use, why, and for how long

• Web purchase (e-mail address, country, amount, restore code, payment reference): to sell and deliver the full toolbox and send the receipt; legal basis: the contract (GDPR art. 6(1)(b)). Kept for 7 years, because Dutch tax law requires us to keep our sales records that long.

• Withdrawal (your name, if you give it, and when you withdrew): to refund the purchase and to show we did; legal basis: our legal duty to take the withdrawal (art. 6(1)(c)). Kept with the payment record, as above.

• Licence, restore and weekly check (payment reference, licence, restore code, IP address): to deliver what was bought and to stop a refunded licence; legal basis: the contract. Not stored by us beyond the payment record above.

• Codes (the code's fingerprint, a random number per device, when it was used and when the device last checked in): to give a code the places it has and to end it when it ends or is withdrawn; legal basis: the agreement with whoever gave the code and our legitimate interest in codes that can't be passed round without limit (art. 6(1)(b) and (f)). Kept while the code exists, and deleted at the latest two years after it ended or was withdrawn; the daily backups are kept 90 days.

• Anonymous counts (the counts and rough figures described above, and the internet address for the moment a report arrives): to make the game better; legal basis: our legitimate interest (art. 6(1)(f)), and where the counts start switched off, your consent to the counting on the device. On the device at most 13 months; daily totals 25 months, then monthly totals.

• Security and rate limits (IP address): to keep the game and the payment safe; legal basis: our legitimate interest in a secure service (art. 6(1)(f)). Held only for the minute the limit counts, plus whatever Cloudflare keeps for its own security.

• E-mails you send us (your e-mail address and what you write): to answer you; legal basis: our legitimate interest in answering, or the contract. Deleted when they are no longer needed, at the latest two years after the last contact, unless they are part of the sales records.

Who else is involved

• Stripe (Stripe Payments Europe Ltd. and Stripe, LLC) processes web payments for us. For fraud prevention and its own legal duties, Stripe decides itself how it uses the data; its privacy policy applies to that.

• Cloudflare delivers the browser version and runs our licence server and the database of anonymous counts (kept in the EU).

• Google Firebase Hosting delivers the website.

• Apple and Google sell the apps and the in-app purchase under their own privacy policies.

Stripe, Cloudflare and Google may process data in the United States. They are certified under the EU-US Data Privacy Framework (and its UK and Swiss extensions), and the EU's standard contractual clauses apply as a fallback.

Children

Professor Oops is made for children aged about 4 to 10. We do not knowingly collect personal information from children, in the app, in the browser version or on this website. Anything a child makes stays on the device. Purchases, settings and links out of the app sit behind a parent gate meant for grown-ups. Apart from the internet address that every device sends to every website, which we use only as described above, and the anonymous counts, which say what was used and not who used it, the game collects nothing from a child.

Your rights

Under the GDPR you can ask us what personal data we hold about you, ask us to correct or delete it, object to or restrict its use, and ask for a copy. Because the app and the website collect next to nothing, there is usually nothing to return. The anonymous counts can't be linked to anyone, so there is nothing of yours in them to return or delete; switching them off deletes what the device kept for them. For a web purchase, we can look up what Stripe holds for us. For a child under 16, a parent can make these requests.

E-mail info@gametailors.com. We answer within one month. If you're not happy with our answer, you can complain to a data protection authority. In the Netherlands that is the Autoriteit Persoonsgegevens; in the United Kingdom, the ICO.

Changes to this policy

If the app or the website starts handling data differently, we'll update this page before the change takes effect and change the date below.

Last updated: 25 October 2026.