Skip to content
Chima

Privacy notice

What we collect, why we collect it, how long we keep it, and how you get rid of it. Plain words, no tricks.

This notice is effective from 10 September 2026 (last updated the same day). The data controller for this site is Dobeu Tech Solutions LLC, a limited liability company registered in New Jersey, USA. Privacy questions, data requests and appeals: info@dobeu.net. General support: support@dobeu.net. We handle everything by email and do not publish a street address; we will give our registered address on request to a regulator or in response to a formal legal notice.

The short version

  • You can read the free chapters without an account and without being tracked.
  • Analytics are off until you switch them on. Analytics never load on Little Chima pages, even if you said yes. Fonts on this site are served from our own files.
  • We do not sell your personal information, share it for cross-context advertising, or use it for targeted advertising.
  • You can download everything we hold, or delete your account, from settings.

What we collect and why

Account details. Your email address, display name and date of birth, given at sign-up. The email identifies your account and lets you reset your password. The date of birth is used once, to work out whether you get a teen or adult account — see age rules. Kept while your account exists.

Age-gate attempts. When you try to create an account, we store a salted hash of the email or device you used, whether the check passed, and a 24-hour cool-off if it failed or if you then typed a different birthdate. A failed attempt does not keep the birthdate. A passed check keeps the birthdate only long enough to create the account.

Reading data. Which chapters you opened, how far through you got, and your bookmarks — so you can pick up where you left off. Only you and our database can see it. Kept while your account exists.

Community content. The feed, messages, community profiles and reader marketplace are not available in this version of Chima. Dormant community data from earlier development or testing may remain stored and inaccessible while needed for safety, dispute, or legal reasons. We do not describe that stored data as an active feature or invite you to post, message, list or buy.

Reports. When you report something, we store what was reported, the reason and any note, plus the reporter's account id so moderators can follow up. Community reporting is unavailable in this version, but earlier report records may remain for 12 months after closure so repeat behaviour is visible. The person reported is not told who reported them.

Basket. Kept in your own browser, not on our servers, until you check out.

Orders. What you bought, the amount, the date, and the shipping name and address you gave at checkout. Adults only; the server re-checks your age band before taking payment. Kept while your account exists. After you delete, we keep a de-linked record of the order id, amount and date for tax, chargeback and accounting — your account id is stripped from it.

Contact messages. Name, email and the message you typed, emailed to us so we can reply. We don't keep a separate copy in the site database.

Analytics — only if you agree. Mixpanel records coarse product events (an account was created, a chapter was opened, a listing was clicked) against a random id. Datadog records errors and page performance, with all on-screen text masked and session replay switched off. Neither receives your email, your name, your reading text, your posts or your messages. Kept by those providers. Vendor-side event retention is configured outside this site and must be verified in each provider console or API; this source code does not prove that setting. Turn analytics off at any time in settings or from the cookie link at the bottom of any page.

The free game

Game progress and brass buttons stay on your device unless you are signed in, in which case your button history, upgrades and share code are kept on your account and deleted with it. If a friend joins through your share link we record that the two accounts are linked, so each reward is given only once. Game reminders are opt-in: if you turn them on we keep a notification token for your device, the topics you picked and when you last played, with no name, email or account. Turning reminders off deletes that record. We send at most one reminder a week, delivered through Google Firebase Cloud Messaging.

How long we keep it

This is the written retention policy. We keep each kind of data only as long as the purpose above needs it, then delete or de-link it.

  • Account, reading data, bookmarks, entitlements and tracking choices: while your account exists. Deleted when you delete your account from settings.
  • Dormant community data: inaccessible in this version; deleted or de-linked when no longer needed for safety, dispute, or legal reasons.
  • Reports: 12 months after the report is closed.
  • Basket: on this device only, until you check out or clear it.
  • Orders: while your account exists. After deletion, the order record stays for as long as tax, chargeback and accounting law require, with your account id stripped so it no longer points at you.
  • Age-gate failures: salted hash, outcome and cool-off deadline only. Purged seven days after the 24-hour cool-off ends.
  • Analytics: client-side analytics identifiers target a 14-day persistence window. Vendor-side event retention is configured outside this site and requires separate provider console or API evidence; the client setting does not prove vendor deletion timing.
  • Contact messages: in our support inbox, for as long as we need them to finish helping you.
  • Proof of deletion: a salted hash and what each processor said when we asked it to erase its copy. No email, name or account id. Kept so we can show the request was carried out.

Who else sees it

Our hosting and database provider stores the site and its data. Mixpanel and Datadog receive analytics events, and only after you consent. Google receives your sign-in request if you choose “Continue with Google”. If you buy something, our payment processor (Stripe, through Lovable's payments connector) sees the card details and the order; we never store your full card number. Our email provider delivers contact-form messages. If you choose “Allow all”, Google AdSense shows non-personalised ads between page sections and sees your browser's request for those ads (address, device and the page you're on); it is told every visitor may be under the age of consent. Ads never appear on Little Chima. That's the whole list.

We do not sell, share, or targeted-advertise

We do not sell your personal information. We do not share it for cross-context advertising. We do not use it for targeted advertising. The only ads are non-personalised Google ads, shown only if you allow marketing; they are chosen by the page, not by a profile of you. Google may use a cookie to limit how often an ad repeats and to stop fraud. We don't build a profile of you to advertise on this site or anywhere else. Because we don't sell or share in those ways, there is no “Do Not Sell or Share” switch to flip — there is nothing to opt out of.

Legal basis

We process account, reading and order data to give you the service you asked for (contract). We may retain dormant community, report and moderation records for safety, dispute handling and applicable legal obligations. We keep de-linked order records after an account is deleted because tax, chargeback and accounting law require it (legal obligation). We process analytics only with your consent, which you can withdraw at any moment without losing access to anything.

Your rights

You can get a copy of your data, correct it, delete it, or object to how we use it. Two buttons in settings do most of this instantly: “Download my data” and “Delete my account”. Downloading gives you a JSON copy of everything we hold about you. Deleting removes your active profile, reading history, bookmarks and entitlements. Dormant community content is deleted or de-linked unless it still has to be retained for the safety, dispute or legal reasons above. Order records are de-linked, not destroyed, for the tax and accounting reasons above. Anything else, email info@dobeu.net and we'll answer within 30 days.

If we refuse a request: how to appeal

If we refuse a rights request, or only partly grant it, you can appeal. Email info@dobeu.net with the word “appeal” and the request you want looked at again. A different person will review it. We will answer the appeal within 30 days. If you still disagree, you can complain to your data protection regulator — in the UK, the ICO; in the EU, your national authority; in the United States, your state attorney general. We will tell you which of those applies when we answer.

Young readers

Accounts are for 13 and over. We don't knowingly hold data about anyone younger; if we learn we have, we delete it. Teen accounts have marketing email off by default and analytics kept to the minimum. A parent or guardian can email us to have a teen's account and content removed. Little Chima is a separate, account-free corner: no analytics, no ads, and fonts are served from this site. Like every page, it is served by our web host, Lovable, which counts page visits (the page address, country, browser type and a visit identifier) to keep the site running; we do not use that for advertising.

Changes

If we make a material change — anything that affects what we collect, why, how long we keep it, who sees it, or your rights — we will post the new notice on this page with a new effective date and email account holders before it takes effect. We will not apply a material change retroactively. If you don't accept a change, you can download your data and delete your account before the new date.

Where this notice applies

This notice is issued by Dobeu Tech Solutions LLC, a limited liability company registered in New Jersey, USA and is governed by the laws of the State of New Jersey, USA, alongside the privacy rights you hold under the law of your own country. Email info@dobeu.net and we'll answer within 30 days.