English · Slovenčina
Privacy notice
LangsCraft (formerly Pixel Pitch) · Version 2026-12-01 · Last updated: 1 December 2026
- LangsCraft is a language app for children. Only adults (18+) create accounts: a parent, legal guardian or teacher.
- Children never sign up and never give an email. We keep only what the app needs: a first name or nickname, age (optional), avatar, choices in lessons and learning progress.
- No ads, no tracking or analytics cookies, no selling of data, no chats or contact with other users.
- Parents can see, download, correct and delete all data in the app at any time (Parents area).
For children – in simple words
- 👩 A grown-up made your player. You never need an email.
- 📝 We keep only your first name, your age and how you play.
- 🏠 We never ask for your full name, your address, your school or a photo.
- 🎤 The microphone listens only when you tap it. We never keep your voice.
- 🚫 No ads. No chats with strangers. Nobody else sees your games.
- 🗑️ Your grown-up can see or delete everything at any time.
- 💬 Not sure about something? Ask your grown-up!
1. Who is responsible (the controller)
LangsCraft is run by Jozef Jakabovic - Nextime67, sole trader, Višnová 1000/20, 900 43 Hamuliakovo, Slovakia, IČO 57989095 (“we”). Contact for all privacy questions: privacy@nextime67.com.
2. Children’s data and parental consent
LangsCraft is made for children, so we follow the special rules for children in the GDPR (Article 8 and Recital 38):
- Only adults create accounts. In Slovakia a child can agree to an online service on their own only from the age of 16 (in other EU countries from 13 to 16). LangsCraft does not rely on children’s own consent: every account belongs to an adult, who confirms when signing up that they are 18 or older and the parent or legal guardian of the children who will play (or a teacher with the parents’ permission), and who gives consent for the children’s data. We save the date of this consent and the version of this notice.
- The adult adds the children. Children only choose their player and play. They cannot type messages, upload pictures or contact anybody.
- As little as possible. We ask for a first name or nickname (please no surnames), an optional age and an avatar. We never ask for addresses, schools, photos, phone numbers, location or children’s emails.
- Withdrawing consent is possible at any time: remove the player (Parents → player → Remove) or delete the account. The data is then deleted.
- If you think a child has given us personal data without a parent or guardian, write to us and we delete it.
Teachers and schools
If a teacher uses LangsCraft for a class, the school decides about the pupils’ data and is the controller; we process the data on the school’s behalf (Article 28 GDPR). The school is responsible for informing parents and, where needed, getting their consent. Ask us for a data processing agreement: privacy@nextime67.com.
3. What we store
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Account: the adult’s email, when the account was created, the consent record, sign-in sessions of each device | Sign-in with an email code, keeping progress on all devices of the account | Contract (Art. 6(1)(b)); consent record: legal obligation to prove consent (Art. 7(1)) |
| Players (children): first name or nickname, age (optional), avatar, shirt colour, chosen world, language and level, progress, coins, mistakes counter | Running the lessons and games for the child | Consent of the parent or legal guardian (Art. 6(1)(a) and Art. 8); for schools: the school’s instructions |
| Choices in lessons, for example favourite toy, birthday month (only the month), dream job, how the child feels today in the feelings lesson | Only to build personal sentences in the lessons (“My favourite toy is my teddy.”). Never analysed or shared. | Consent of the parent or legal guardian |
| Test results, prize requests and finished block pictures (score, answers, date; the chosen picture and message) | Showing progress in the Parents area and emailing results, prize requests and finished pictures to the adult | Contract; consent of the parent or legal guardian |
| Settings: the Parents code (a 6-digit code emailed to the adult; devices keep only a hash of it), email for results, what the children call you, prize list, mistake limit | The Parents area and the prize shop | Contract |
| How you heard about LangsCraft (optional, asked once when the account is set up): one answer such as “a parents’ group online” and, if you want, the name of the group, blog or person | Counting where families find us – the owner sees only how many accounts gave each answer, never who | Legitimate interest (Art. 6(1)(f)); you can leave it empty |
| Your answer to “One question for you” (only if you reply to that email – we ask every family once, after the tenth lesson of a level) | Making the app better; your words are shown on our website only if you write that we may, signed only with the first name and town you choose – never children’s names | Legitimate interest (Art. 6(1)(f)); showing your words: your consent (Art. 6(1)(a)), which you can withdraw by email at any time |
| School confirmation and invoices (only for schools that ask for them): the school’s name, country, website, your role, the number of pupils, a note; for an invoice: the school’s name, billing address, email, VAT or tax number and order number | Checking that an account is used by a school (up to 60 pupils instead of 6); issuing the invoice | Legitimate interest (Art. 6(1)(f)); contract (Art. 6(1)(b)) |
| Purchases: which language was unlocked, when, the amount | Unlocking paid languages; accounting | Contract; legal obligation (Art. 6(1)(c)) |
| Security data: IP address (to limit sign-in codes), short server logs | Protecting accounts against misuse | Legitimate interest (Art. 6(1)(f)) |
We do not store voice recordings, photos, surnames, addresses, location, contacts or advertising IDs. There is no profiling, no automated decision-making and no advertising.
4. The speaking check (microphone)
Some pages let a child say a sentence and check it. This uses the speech recognition built into the browser. In Chrome (for example on Android) the spoken sentence is sent to Google’s speech service to be turned into text; LangsCraft compares that text on the device and never receives, records or keeps any audio. The microphone only listens after the child taps the microphone button, for one sentence. A parent can switch the speaking check off on each device (Parents → Privacy) or block the microphone in the phone’s settings – the lessons still work: the child hears the sentence, says it out loud, and the page goes on by itself.
5. On the device
The app saves progress and the sign-in on the device (browser storage) so it also works offline. These are needed for the app to work; we use no tracking or analytics cookies. The only exception is the payment window: when an adult pays, it opens a page of ours that loads Paddle’s payment script, and Paddle may store its own data on the device while paying (see Paddle’s privacy notice). Children never see this page.
6. Who processes data for us
- Cloudflare – hosting, database and security (server).
- Resend – sending sign-in codes, results, prize requests and finished pictures to the adult’s email.
- Paddle – payments for paid languages. Paddle is the seller of record: it takes the payment, collects the VAT or sales tax, and sends the receipt. We never see card numbers. We send Paddle only the price, the language and an internal account number – no name, no email address and nothing about the children. The adult types their own email address and billing country into Paddle’s payment window; Paddle handles that data under its own privacy notice. For schools that pay by invoice we send Paddle the school’s name, billing address, billing email and VAT or tax number (Paddle issues the invoice and receives the bank transfer).
- Google – speech recognition in Chrome, only when the speaking check is used (see 4).
Some of these companies can process data outside the EU (for example in the USA). They are bound by the EU–US Data Privacy Framework or by the EU Standard Contractual Clauses. We do not sell or give data to anybody else.
7. How long we keep data
- Account and players: as long as the account exists. Removing a player deletes that child’s data, including their results and prize requests; deleting the account deletes all players, progress, results, sessions and the school confirmation details.
- Sign-in codes: 15 minutes.
- Server security logs: a few days.
- Purchase records: as long as tax and accounting law requires, without the email address after the account is deleted.
8. Your rights
You have the right to access your data and the children’s data, to correct it, to delete it, to restrict or object to its processing, to get it in a machine-readable form (portability) and to withdraw consent at any time. Most of this works directly in the app:
- See and correct: Parents area (players, settings).
- Download everything: Parents → Privacy → “Download our data”.
- Delete: Parents → player → Remove, or Parents → Account → Delete account.
Children’s rights are usually exercised by their parent or legal guardian, but children can also ask us. For anything else write to privacy@nextime67.com; we answer within one month.
You can also complain to the data protection authority. In Slovakia: Úrad na ochranu osobných údajov Slovenskej republiky, Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.
9. Security
All connections are encrypted (HTTPS). Sign-in codes are stored only as hashes and expire after 15 minutes. The Parents area is locked with a 6-digit code that is sent only to the adult’s email, so children cannot change settings or delete data. If a data breach ever puts your data at risk, we inform you and the authority as the law requires.
10. Changes
If we change this notice, the new version gets a new date and important changes are shown in the app or sent by email.