Privacy policy

Data controller

Blueprint (SparkFuture), Portugal — avidadeas@gmail.com.

What we collect and why (GDPR art. 6)

• No account needed: mission progress, drawings and Lab items stay in your browser only.
• Account (email): to sign you in — contract.
• Museum posts: nickname, caption and artwork you choose to publish — consent; delete any time.
• Payments: handled by Stripe; we keep your plan status, customer ID and amounts — contract and legal tax duties (kept 10 years under Portuguese tax law).
• Read-aloud: mission text is sent to an AI voice service to create audio; nothing personal is sent.

Children

We don't ask children for personal information, show no ads and use no tracking cookies. Under Portuguese law, children under 13 need a parent's consent to create an account.

Processors

Hosting and database (Lovable Cloud, EU/US with Standard Contractual Clauses), Stripe (payments). We never sell data.

Cookies

Only strictly necessary storage for sign-in and saving progress. No analytics or advertising cookies, so no cookie banner is needed.

Your rights

Access, correction, deletion, portability, objection and withdrawing consent — email us and we reply within one month. You may also complain to the CNPD (cnpd.pt).