Privacy Policy

Small Mailbox Interactive, LLC ("Small Mailbox," "we," "us," or "our")
Effective date: September 15, 2026
Last updated: September 15, 2026

1. Scope

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit smallmailboxinteractive.com or any other website, application, or online service that links to this policy (together, the "Services"), and when you otherwise interact with us, such as by email.

This policy does not apply to third-party websites or services that we link to, or to information about our employees, contractors, and job applicants, which is covered by separate notices. Games we publish on other platforms, such as app stores or storefronts, may have their own privacy notices; where they do, those notices govern.

2. Information We Collect

We designed this site to collect as little as possible. There are no accounts, no sign-up forms, no newsletter, no purchases, and no contact form.

Information you provide to us. The only way to give us personal information through the Services is to email us. If you do, we receive your email address, your name if you include it, and the content of your message and any attachments.

Information collected automatically. When you visit, our hosting provider automatically records ordinary server-log data in order to deliver the pages and keep the site secure:

• Device and connection data, such as your IP address, browser type, operating system, and language settings.
• Request data, such as the pages you request, the referring URL, and the date and time of each request.
• Approximate location derived from your IP address. We do not collect precise geolocation.

We do not run analytics, advertising pixels, or any other third-party script on the site. Section 7 explains how the mailbox game stores your inventory in your own browser.

Information from other sources. We do not buy or receive personal information about visitors from data brokers, social media platforms, or other third parties.

Sensitive information. We do not intentionally collect sensitive personal information (such as government identification numbers, precise geolocation, health information, biometric information, or information about racial or ethnic origin, religious beliefs, or sexual orientation), and we ask that you not send it to us by email.

3. How We Use Information

We use personal information to:

• Provide, operate, maintain, and secure the Services.
• Respond to your emails and communicate with you about your requests.
• Understand, in aggregate, how the site is used and improve it.
• Detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activity.
• Comply with legal obligations, enforce our terms, and establish, exercise, or defend legal claims.
• Carry out any other purpose disclosed to you at the time of collection, or with your consent.

We do not use personal information to send marketing, and we do not use automated decision-making or profiling that produces legal or similarly significant effects about you.

4. How We Disclose Information

We do not sell personal information, for money or otherwise. We disclose personal information only as follows:

• Service providers that perform services on our behalf: Netlify, which hosts the site and keeps its server logs, and the email service we use to read and send mail. They are permitted to use personal information only to provide services to us.
• Professional advisers, such as lawyers, accountants, and insurers, in the course of the services they provide to us.
• Legal and safety recipients, including courts, regulators, and law enforcement, when we believe in good faith that disclosure is required by law or legal process, or necessary to protect the rights, property, or safety of us, our users, or others.
• Corporate transaction parties, in connection with an actual or proposed merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business or assets, subject to customary confidentiality protections.
• Others, with your consent or at your direction.

5. Data Retention

We keep personal information only for as long as reasonably necessary for the purposes described in this policy, including to satisfy legal, accounting, and reporting obligations and to resolve disputes.

• Email correspondence is kept for as long as needed to answer you and handle any follow-up, generally no longer than 24 months after our last exchange, unless we need it longer to resolve a dispute or meet a legal obligation.
• Server and security logs are held by our hosting provider under its own short retention schedule. We do not keep separate copies, other than while investigating a specific security incident.

When information is no longer needed, we delete it or de-identify it. Where deletion is not technically feasible (for example, in backups), we isolate the information and delete it on the ordinary backup rotation.

6. Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (HTTPS) for every page and access to our hosting and email accounts limited to the people who run the studio. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we learn of a security incident affecting your personal information, we will notify you as required by applicable law.

7. Cookies and Local Storage

We do not set cookies on the Services, and we do not use pixels, fingerprinting, or any analytics or advertising technology.

Local storage. The mailbox on our home page is a small game. Whatever you collect from the mailbox, the holes you dig, the potions you pour out, and the spot where the key is buried are saved in your own browser using local storage so they are still there when you come back. This information never leaves your device: it is not sent to us or to anyone else, and we cannot see it. It contains no personal information. The "Empty pockets" link on the home page clears it, and so does clearing your browser's site data.

Do Not Track and Global Privacy Control. Because we do not track visitors or share information for advertising, there is nothing for these browser signals to switch off. Your visit is treated the same whether or not your browser sends them.

8. Targeted Advertising, Sales, and Sharing

We do not sell personal information, "share" it for cross-context behavioral advertising, or process it for targeted advertising, and we have not done so in the preceding 12 months. We do not knowingly sell or share the personal information of anyone under 16.

9. Your Choices

• Email. You are never required to email us. If you have written to us and want your message deleted, just say so and we will delete it, subject to Section 5.
• Marketing. We do not send marketing email or text messages.
• Local storage. See Section 7.

10. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights, subject to legal exceptions:

• Access / Know. Confirm whether we process your personal information and obtain a copy, including the categories of information, sources, purposes, and recipients.
• Correction. Correct inaccurate personal information.
• Deletion. Delete personal information we hold about you.
• Portability. Receive your information in a portable, readily usable format.
• Opt out of sales, sharing, targeted advertising, and certain profiling. We do none of these.
• Non-discrimination. We will not discriminate against you for exercising your rights.

How to submit a request. Email hello@smallmailboxinteractive.com. Because the only personal information we hold is email correspondence, we will usually verify your request by replying to the address the information came from, and may ask for more information if needed. We respond within the time required by applicable law (generally 45 days, which may be extended where permitted).

Authorized agents. You may use an authorized agent to submit a request. We may require proof of the agent's authority and ask you to verify your identity directly, unless the agent holds a valid power of attorney.

Appeals. If we decline your request, you may appeal by replying to our decision with "Appeal" in the subject line. We will respond within the time required by law. If you are dissatisfied with the outcome, you may contact your state attorney general.

California "Shine the Light." We do not disclose personal information to third parties for their own direct marketing purposes.

11. Children's Privacy

The Services are intended for a general audience and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete it promptly. If you believe a child has provided us personal information, contact us at hello@smallmailboxinteractive.com.

12. Third-Party Links

The Services may link to third-party websites and services, such as storefronts where our games are sold. Those third parties' privacy practices are governed by their own policies, and we are not responsible for them.

13. Changes to This Policy

We may update this policy from time to time. We will post the updated policy here with a new "Last updated" date and, where changes are material, provide additional notice (such as a notice on the Services) before they take effect. We will not apply a material change retroactively to information collected under a prior version without your consent where consent is required by law.

14. Contact Us

Small Mailbox Interactive, LLC
1509 Waukegan Road, Ste 1039
Glenview, IL 60025
United States
Email: hello@smallmailboxinteractive.com

If you have a disability and need this policy in an alternative format, contact us at the email above.