Tycoon Tycoon

Children's Privacy Notice

Effective: June 20, 2026

This is the direct notice to parents required by the U.S. Children's Online Privacy Protection Act ("COPPA"). It explains, in one place, what personal information we collect from children under 13, how we use it, who we share it with, and the rights you have as a parent or legal guardian. It supplements our full Privacy Policy.

1. Who we are

Tycoon Tycoon is operated by Exponential Enlightenment LLC, an Illinois limited liability company. You can reach us at tycoon@exponentialenlightenment.com. We are the operator responsible for COPPA compliance on this site.

2. What we collect from a child

  • Username chosen by the child (public on leaderboards and shared concepts).
  • Password chosen by the child, stored as a one-way hash. We do not collect an email address from the child.
  • Birth year entered at sign-up. We use it only to decide whether AI-asset features must be locked behind parental approval (under 13) and to count the child's age category in aggregate.
  • Game saves: in-game progress, currencies, settings.
  • Optional free-text: if a child uses the feedback dialog or submits a concept, the text they type. We ask children not to include personal information in free text and we review submissions.
  • Persistent identifiers needed to keep the child signed in and to recognize their device across sessions (authentication cookies/localStorage, account ID).
  • Technical data needed for security and debugging: IP address, browser/OS string, error logs.

We do not collect precise geolocation, contacts, photos, audio, or video from children. We do not enable open chat between children. We do not show third-party behavioral ads to children.

2a. Parent's email (only when a parent grants AI approval)

If a parent or legal guardian chooses to approve AI-asset features on a child's account (see Section 5), we collect that parent's email address. It is associated with the child's account as the recorded approval contact and is used only to (a) keep a record of the approval, (b) honor parental rights requests, and (c) notify the parent of material changes to this notice. We do not use the parent's email for marketing.

3. How we use it

  • To create and run the child's account and save their progress.
  • To keep the Service secure and to detect and fix bugs.
  • To respond to messages from the child or parent.
  • To comply with legal obligations.

Persistent identifiers and IP address are used only for the internal operation of the Service (authentication, security, debugging) as permitted by COPPA's "support for internal operations" exception. We do not use them to build behavioral profiles or to deliver targeted advertising.

4. Who we share it with

We share children's personal information only with the service providers that help us run the Service, under contracts that limit them to that purpose:

  • Hosting and database: Supabase and Cloudflare.
  • AI providers (only for parent-approved AI-asset features): when a parent has approved AI-asset generation on a child's account, prompts and any text the child enters into the brand/logo/business-plan tools are sent to our AI gateway provider and the underlying model providers solely to return the generated asset. These providers are contractually limited to that purpose, do not use child input to train their general models, and do not retain it beyond what is needed to deliver the response.
  • Law enforcement when legally required.

We do not sell children's personal information. We do not disclose it to third parties for their own marketing. Premium AI-asset features (brand kits, logos, business plans) are off by default on accounts where the player's birth year indicates the player is under 13, and they require explicit parental approval before they can be turned on.

5. Parental approval for AI features

Because we do not collect a child's email address, we cannot use email-based parental consent flows. Instead, when an account is registered to a player under 13, AI-asset features are disabled at the server until a parent or legal guardian completes the approval flow on the account's Parental Approval page. The parent provides their own email address and affirmatively acknowledges that they are the child's parent or legal guardian and authorize AI-asset features on the account. We log the parent's email, a timestamp, and the IP address used to grant approval. A parent may revoke approval at any time from the same page, which immediately re-blocks AI-asset features on the server.

This approval is required for AI-asset features that send the child's free-text input to an AI model. It is not required to play the games themselves, save progress, or use any non-AI feature — those work without an approval on file.

6. Your rights as a parent

At any time you may:

  • Review the personal information we have collected from your child (username, birth year, saved game data, feedback submissions, parental-approval record).
  • Ask us to delete it.
  • Refuse to allow further collection or use of your child's information (which may mean we have to close the account).
  • Revoke approval for AI-asset features from the Parental Approval page, or by emailing us.

To make any of these requests, email tycoon@exponentialenlightenment.com and include your child's username. Because we do not store a parent's email by default, we may also ask you to demonstrate access to the account (for example by signing in or sharing a code shown on the account page) before we act on the request. If a parental approval is on file we will additionally verify by matching the email on file. We respond within 30 days.

7. Data retention

We keep a child's personal information only as long as is reasonably necessary to provide the Service. We delete it when the parent or child closes the account, or after 24 months of account inactivity, whichever comes first. Parental-approval records are retained while the account is active and for a reasonable period after, to demonstrate compliance.

8. No condition of participation

We never condition a child's participation in a game on disclosing more personal information than is reasonably necessary to play. AI-asset features are optional; declining parental approval does not block any non-AI gameplay.

9. Changes

If we change our practices in a way that affects information we have already collected from your child, we will post an in-app notice on next sign-in, and — where a parent's email is on file from a previous approval — email it there. Where required by law, we will obtain renewed parental approval before applying the change.

10. Contact

Exponential Enlightenment LLC
Illinois, United States
tycoon@exponentialenlightenment.com

For more information about COPPA and a parent's rights, see the U.S. Federal Trade Commission's resource: ftc.gov/business-guidance/privacy-security/childrens-privacy.