Summary: plotkids.com is a studio website written for partners, publishers, press and families. Without your consent it sets no cookies. If you accept the cookie banner, three analytics services load so we can see how the site is used. We collect no data from children, we show no advertising, and we do not sell personal information. Our internal tools connect to Google services with a staff member's own Google account, and the data they reach stays with Google and on that staff member's computer. For full details, read below.
1. Who we are
Plot Kids is operated by Medialab Criação, Produções Cinematográficas e Software LTDA, a company registered in Florianópolis, Santa Catarina, Brazil, trading as "Plot Kids" and, for its games and interactive work, "Plot Interactive" (referred to in this policy as "Plot Kids", "we", "us" or "our").
Privacy contact / Encarregado (LGPD): Leonardo Guedes Bilck
Contact: [email protected]
Website: https://plotkids.com
This policy covers the website plotkids.com, email contact with the studio, and the internal tools described in section 6. Our products have their own policies: Truth and Tales, for example, publishes its own at truthandtales.app/privacy-policy, and each game lists its policy on its store page. Those policies, not this one, govern the data those products handle.
2. Our commitments
- We comply with the Lei Geral de Proteção de Dados (LGPD) in Brazil, and we honour the rights of visitors from the European Economic Area and the United Kingdom under the GDPR and the UK GDPR.
- This website shows no advertising and sets no cookies without your consent.
- We do not sell or rent personal information, and we do not share it with anyone for marketing or advertising.
- We do not collect advertising identifiers, precise location data or biometric data.
- This website is written for adults. We do not knowingly collect personal data from children through it (section 9).
3. What data we collect and why
3.1 When you visit plotkids.com
- Server logs. The site is static and hosted by Cloudflare. Cloudflare processes your IP address and request headers to deliver the pages and protect the site from abuse; Plot Kids keeps no server logs of its own.
- Your cookie choice and language. The site remembers in your browser's local storage whether you accepted or declined analytics, and which language you last read, so the right language opens next time. Both stay in your browser and are never sent to us.
- Analytics, only if you accept the cookie banner. Google Analytics (pages visited, how visitors arrive, country, device type), Microsoft Clarity (clicks, scrolling and recordings of how pages are used, with anything typed into forms masked) and Mixpanel (which calls to action are used, such as a wishlist or store button, with the campaign tags of the visit). We use them to understand which pages and partnerships work and to fix pages that are hard to use. If you decline, none of them load.
- Store and partner links. Links to Steam, Google Play, the App Store, LinkedIn and our other sites carry a tag that tells the destination the visit came from plotkids.com. What those sites collect is governed by their own policies.
3.2 When you write to us
Every contact route on the site opens an email to [email protected]. We receive what you choose to send: your name, email address, company and message. We use it to answer you and, when a conversation leads to a project, to carry out that project. Our email is hosted by Google Workspace.
3.3 Newsletter
If we open a newsletter sign-up, it will run through Brevo with double opt-in: you confirm by email before any message is sent, every message carries an unsubscribe link, and only your email address and the preferences you give are stored.
3.4 Data we do not collect
Through this website we do not collect passwords, payment details, government identifiers, dates of birth, home addresses, phone numbers, photographs, voice recordings, precise or approximate location, contact lists, advertising identifiers or biometric data.
4. How we use personal data and on what basis
- Deliver the website and keep it secure. IP address and request data, processed by Cloudflare. Legitimate interest (LGPD Art. 7, IX; GDPR Art. 6(1)(f)).
- Understand how the site is used. Analytics events after you accept the banner. Consent (LGPD Art. 7, I; GDPR Art. 6(1)(a)), which you can withdraw at any time by clearing your browser data for plotkids.com; the banner then asks again.
- Answer your messages and run projects. The contents of your emails. Legitimate interest and, when a contract follows, contract performance (LGPD Art. 7, V; GDPR Art. 6(1)(b)).
- Send a newsletter, if subscribed. Email address. Consent.
- Operate the studio's own accounts with third-party services (section 6). Contract performance and legitimate interest.
5. Third-party services
We use a small number of service providers for this website and for contact. None of them receive data for advertising to you.
- Cloudflare: hosting and delivery of the website (Cloudflare Pages). Processes connection data worldwide to serve the nearest copy of the site.
- Google: Google Analytics (only after consent; data may be processed in the United States) and Google Workspace for our email.
- Microsoft: Microsoft Clarity (only after consent; recordings with form input masked; data may be processed in the United States or the European Union).
- Mixpanel: product analytics for the calls to action on the site (only after consent; data stored in the United States).
- Brevo: newsletter delivery, if we open a sign-up (data stored in the European Union).
Data processed in the United States is protected by standard contractual clauses and, where the provider is certified, the EU-US Data Privacy Framework. Brazil recognises the European Economic Area as adequate (ANPD Resolution 32/2026).
6. Internal tools that connect to Google services
To run the studio, our team uses software built by Plot Kids that connects to Google services through a staff member's own Google account, with Google's OAuth sign-in. This section is the privacy policy for those tools. They are used only by people authorised by Plot Kids and are not distributed to the public.
6.1 Plot Kids Ads CLI (gads)
A command-line tool that lets our staff read reports and create or change campaigns in the Google Ads accounts the company already manages, for Plot Kids and its brands.
- Google user data it accesses. With the staff member's consent it requests the Google Ads scope
(
https://www.googleapis.com/auth/adwords), to list the Google Ads accounts that Google account can already access, read their campaigns, keywords and performance reports, run keyword research, and create or edit campaigns, ad groups, keywords, ads and budgets; and the basic account identity (OpenID, email address), to show which account is signed in. It requests nothing else and cannot read Gmail, Drive, Calendar or any other Google service. - How the data is used. Only to carry out the command the staff member runs: showing a report in the terminal, checking a campaign plan against Google Ads policies, or sending the changes they asked for to Google Ads. Results appear on screen and, when the staff member chooses, in files saved on their own computer. The data is not used for advertising to anyone, for profiling, for training artificial intelligence or machine learning models, or for any purpose other than operating our Google Ads accounts.
- Where the data is stored. The sign-in credential (an OAuth refresh token) is stored only on the computer where the tool runs, inside the local profile of the signed-in operating-system user, never in a shared folder, a code repository or a server. Google Ads data is fetched on demand and shown in the terminal; the tool keeps no database and sends no Google user data to any Plot Kids server or to any third party. All traffic between the tool and Google uses HTTPS.
- Sharing. Google user data reached through the tool is not sold and not shared with third parties. The only party that receives it is Google itself, through the Google Ads API, when the tool carries out a command.
- Retention and revocation. The stored credential remains on the computer until the staff member signs out of the tool, which deletes it, or revokes access from their Google account at myaccount.google.com/permissions, after which it stops working. Google Ads data itself stays in Google Ads under that service's retention rules.
- Limited Use. The use and transfer to any other app of information received from Google APIs by this tool adheres to the Google API Services User Data Policy, including the Limited Use requirements.
The terms of service of this tool are at plotkids.com/terms-google-ads-cli/.
7. Where data is stored and for how long
- Website analytics are kept by each provider for the period set in our account with them, after which they are deleted or aggregated. Aggregated statistics that can no longer be linked to any person may be kept for as long as they are useful.
- Emails are kept for as long as the conversation or project needs them and as long as Brazilian commercial and tax law requires us to keep business records.
- Newsletter data, if any, is kept until you unsubscribe, then deleted.
- Internal tool credentials are kept on the staff member's computer until they sign out or revoke access (section 6).
8. Your rights
If you are in Brazil, under the LGPD you have the right to confirmation that we process your data; access to it; correction of incomplete or inaccurate data; anonymisation, blocking or deletion of unnecessary data; portability; information about the parties we have shared it with; information about the consequences of refusing consent; and revocation of consent. You may also lodge a complaint with the ANPD (Autoridade Nacional de Proteção de Dados).
If you are in the European Economic Area or the United Kingdom, you have the right to access, rectify and erase your data, to restrict or object to processing based on legitimate interest, to data portability, and to lodge a complaint with your supervisory authority (in the UK, the ICO at ico.org.uk).
If you are in California, note that Plot Kids does not sell personal information as defined by the CCPA.
To exercise any of these rights, write to [email protected]. We answer within 15 days, as the LGPD requires, or within the shorter period your local law sets. We may need to verify your identity before acting on a request.
9. Children
Plot Kids makes content for children, but plotkids.com is written for the adults around them: partners, publishers, broadcasters, press, educators and parents. We do not knowingly collect personal data from children through this website. If you believe a child has sent us personal data, write to [email protected] and we will delete it promptly. Our children's products follow their own, stricter policies, such as the Truth and Tales policy linked in section 1.
10. Cookies and similar technologies
Without your consent the site sets no cookies of its own. It keeps two values in your browser's local storage: your cookie choice and the language you last read. Only if you accept in the cookie banner, Google Analytics, Microsoft Clarity and Mixpanel load and set their own cookies and identifiers, which may be processed in the United States with the safeguards in section 5. To change your choice, clear the site data for plotkids.com in your browser; the banner then asks again on your next visit.
11. Security
- The website is static: it has no database, no user accounts and no server-side code of ours that could hold your data.
- All connections use HTTPS (TLS).
- Access to our analytics, email and hosting accounts is limited to named staff and protected by two-factor authentication.
- Internal tool credentials never leave the staff member's computer (section 6).
No method of storage or transmission is completely secure. If we become aware of a breach affecting personal data, we will notify the people affected and the relevant authorities as applicable law requires.
12. Changes to this policy
When we change this policy, we update the "Last updated" date at the top of this page. If a change affects how the internal tools in section 6 handle Google user data, we update that section before the change ships.
13. Frequently asked questions
Does plotkids.com show advertising or sell data?
No. There is no advertising on the site and we do not sell or rent personal information.
What happens if I decline the cookie banner?
Nothing changes for you: every page works the same, and no analytics service loads.
Does the Plot Kids Ads CLI read my Google account?
Only if you are a Plot Kids staff member and sign in to it yourself. It then reaches the Google Ads accounts your Google account can already access, and nothing else. Everyone else is unaffected: the tool is not distributed outside the company.
How do I ask for my data to be deleted?
Email [email protected]. We answer within 15 days.
14. Contact
Plot Kids (Medialab Criação, Produções Cinematográficas e Software LTDA), Florianópolis, Santa Catarina, Brazil.
Privacy contact: Leonardo Guedes Bilck, [email protected]