1. Data controller
The controller for data handled directly by Tiny Wild Lab is Dr. Béres Marcell, individual entrepreneur, 6725 Szeged, Lékai utca 6., Hungary, tax number 92495865-1-26. Privacy requests can be sent to hello@tinywildlab.com.
Lemon Squeezy separately acts as Merchant of Record and processes checkout and payment data under its own privacy terms.
2. Data we process and why
| Activity | Data | Purpose and legal basis | Typical retention |
|---|---|---|---|
| Newsletter | Email address, consent record, subscription status | Unlock the requested sampler and send occasional news, offers and free activities; consent | Until unsubscribe, plus a minimal suppression record where needed |
| Orders and support | Name, email, order and product details, correspondence | Deliver and support the purchase; contract performance and legal obligations | For the support relationship and any legally required accounting, consumer-protection or claims period |
| Website analytics | Page views, referrer, browser, device type and approximate location; no advertising profile | Understand and improve the website; legitimate interest | Up to 6 months on the current Umami Cloud plan |
| Direct messages | Email address and information included in your message | Answer requests; contract steps or legitimate interest | As long as needed to resolve and document the request |
| Security | Technical logs, IP address, request metadata | Prevent abuse and protect the service; legitimate interest | Short operational periods unless an incident requires longer |
3. Service providers and recipients
We use a small number of providers to operate the service:
- Lemon Squeezy for checkout, payment, tax calculation, order delivery, receipts, refunds, fraud prevention and chargebacks;
- Resend for newsletter subscriptions and email delivery;
- Umami Cloud, configured in the EU region, for privacy-focused website analytics; and
- hosting, security and infrastructure providers used to serve the website.
Providers receive only the data necessary for their role and process it under their contractual and legal responsibilities. Some providers may process data outside the European Economic Area. Where required, transfers rely on an applicable adequacy mechanism or contractual safeguards.
4. Cookies and analytics
The Tiny Wild Lab website uses Umami for aggregate analytics. Umami’s tracker is designed without cookies, cross-site tracking or automatic collection of names or email addresses. The tracker is also configured to respect an available browser Do Not Track signal. The main website does not use advertising cookies.
If you arrive through a campaign link, the site may keep the campaign labels in session storage for the current browser tab. This lets us connect an on-site sign-up or checkout visit to the referring campaign without storing your name or email in those labels. The session data ends when the tab session is closed.
External services opened from this site—such as the Lemon Squeezy checkout—may use their own strictly necessary or other cookies under their own notices.
5. Newsletter choices
The Firefly Explorer Sampler is offered to adults who choose to join the explorer list. The form requests consent before the download is unlocked. Every marketing email includes an unsubscribe option, and you can also request removal by emailing us. Withdrawing consent does not affect service emails needed to complete or support an order.
6. Children’s privacy
The learning materials are for children, but the website, checkout and newsletter forms are directed to parents, guardians, teachers and other adults. We do not knowingly ask children to submit personal data. If you believe a child has sent us personal data, contact us so we can review and delete it where appropriate.
7. Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction or portability of your personal data, object to processing based on legitimate interests, and withdraw consent at any time without affecting earlier lawful processing. We normally respond within one month.
To exercise a right, email hello@tinywildlab.com. We may need to verify your identity. You may also complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) at naih.hu, or to the supervisory authority in your country of residence.
8. Changes to this policy
We will update this page when our products, providers or legal obligations change. Material changes affecting newsletter subscribers may also be communicated by email where appropriate.