Privacy Policy

SOYTRN — Effective Date: 10/01/2026•  Last Updated: 10/01/2026

1. Introduction

This Privacy Policy explains how the SOYTRN service (“SOYTRN,” the “Service,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use our website, applications, and related services located at [website domain] (collectively, the “Service”).

The Service is operated as a joint venture by Precarious Press LLC, a New York limited liability company, and Lu31 LLC, a New York limited liability company (together, the “Operators”). SOYTRN is a parent-controlled video player that lets a parent or legal guardian curate a whitelist of approved videos from YouTube so that a child sees only the specific videos the parent has approved — with no search, no recommendations, no autoplay, and no algorithmic feed.

Protecting children's privacy is central to how SOYTRN is built. We do not create accounts for children, we do not knowingly collect personal information directly from children, and we do not track children's behavior for advertising. This policy describes exactly what we do and do not collect.

2. Who This Policy Covers

This policy applies to the parent or legal guardian who registers and controls a SOYTRN account (the “Account Holder” or “you”), and it describes the limited information associated with the child profiles that an Account Holder creates. Only adults age 18 or older may register for and operate a SOYTRN account. Children interact with the Service only through a simplified, PIN-locked child player configured by their parent or guardian.

3. Our Commitment to Children's Privacy (COPPA)

SOYTRN is designed to comply with the Children's Online Privacy Protection Act (“COPPA”) and the U.S. Federal Trade Commission's COPPA Rule. Because the Service is directed to children, we take the following approach:

•    No child accounts. Children do not register, log in, or provide any information to us. All authentication is on the parent side only.

•    Minimal child profile data. For each child profile, the Account Holder may enter only a first name (or nickname), an age range, and a selected avatar. This information is stored under the parent's account and is used only to organize the parent's approved video whitelists and to personalize the child player.

•    No behavioral tracking of children. We do not build advertising or behavioral profiles of children, and we do not use third-party advertising trackers, analytics pixels, or similar technologies in the child-facing player.

•    No personal information collected directly from children. We do not ask children for names, contact information, photographs, precise location, or any persistent identifier.

If you believe a child has provided us with personal information without the involvement of a parent or guardian, please contact us at [privacy contact email] and we will delete it promptly.

4. Information We Collect

4.1 Information the Account Holder Provides

•    Account information: your email address, a hashed password (handled by our authentication provider, Supabase), and a display name.

•    Child profile information: for each profile, a first name or nickname, an age range, and an avatar selection.

•    Whitelist and channel data: the specific YouTube videos and channels you approve, together with associated metadata (video title and thumbnail) retrieved from the YouTube Data API.

•    Subscription and billing information: your subscription tier and billing status. Payments are processed by Stripe; we do not receive or store full payment card numbers. See Section 7.

4.2 Information Collected Automatically

•    Account activity and technical data: log data such as IP address, browser type, device type, and timestamps, used to operate, secure, and troubleshoot the Service.

•    Watch history / activity log (Pro tier): if you use a plan that includes an activity log, we record which approved videos were played and when, so you (the parent) can review your child's activity. This log is visible only to you and is associated with the child profile, not with any child account.

•    Cookies and similar technologies: strictly necessary cookies to keep you signed in and to remember your preferences. See Section 8.

5. How We Use Information

We use the information described above to:

  • provide, maintain, and operate the Service, including authenticating the Account Holder and displaying only approved videos in the child player;

  • process subscriptions, billing, and free trials through our payment processor;

  • provide parent-facing features such as the whitelist manager, profile switcher, and (on eligible plans) the activity log and email digest;

  • secure the Service, prevent fraud and abuse, and enforce our Terms & Conditions;

  • communicate with you about your account, transactions, and service-related notices; and

  • comply with our legal obligations.

We do not sell personal information, and we do not use children's information for targeted advertising, profiling, or research and development.

6. Verifiable Parental Consent and Parental Controls

Because child profiles are created and controlled by the Account Holder, the parent or guardian is the one providing and managing all information associated with those profiles. Before an Account Holder can create a child profile, we require the Account Holder to confirm that they are 18 or older and are acting as the child's parent or legal guardian, and we obtain verifiable parental consent using a method reasonably designed to confirm parental involvement, such as [describe method: e.g., email-plus-confirmation, a payment-card transaction at sign-up, or a bot-prevention age gate].

At any time, the Account Holder may review the information in a child profile, edit or delete it, and delete the profile entirely from the parent dashboard. Deleting a profile removes the associated whitelist and activity log for that profile in accordance with Section 9.

7. Third-Party Service Providers

We rely on a small number of trusted service providers to operate SOYTRN. These providers process information only as needed to provide their services to us and are bound by their own privacy commitments:

  • Supabase — authentication, database, and storage. Stores account credentials (as hashes), profile data, and whitelists.

  • Stripe — subscription billing and payment processing. Stripe collects and processes payment information directly; see the Stripe Privacy Policy.

  • [Netlify / Vercel] — website and application hosting.

  • Google / YouTube — video search, metadata, and playback via the YouTube API Services and the YouTube embedded player. See Section 8.

8. YouTube API Services and Google

SOYTRN uses YouTube API Services to let parents search for videos and channels, retrieve video metadata and thumbnails, and play approved videos through the official YouTube embedded (iframe) player. By using SOYTRN, you acknowledge and agree to the following:

SOYTRN plays videos only through the standard YouTube player. We do not download video content, we do not block or interfere with advertising or branding shown in the YouTube player, and we store only permitted metadata (such as titles and thumbnails), which links back to YouTube. Video availability is controlled by YouTube and the content's owners and may change or be removed at any time.

9. Data Retention and Deletion

We retain account and profile information for as long as your account is active and as needed to provide the Service. We do not retain personal information indefinitely.

  • Account deletion. You may delete your account at any time from your account settings or by contacting us at [privacy contact email]. When you delete your account, we delete or de-identify the associated account and child-profile information, whitelists, and activity logs, except where we are required to retain limited records (for example, billing records) to comply with law.

  • Deletion timeframe. Where we are required to delete data received through YouTube API Services — including when you request deletion or when authorization can no longer be verified — we delete that data within 30 days.

  • Backups. Residual copies may persist in secure backups for a limited period before they are overwritten in the ordinary course.

10. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect information, including encryption of data in transit over HTTPS (enforced across the Service), hashed passwords, and server-side storage of API keys and secrets (never exposed in client-side code). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your Privacy Rights

11.1 Parents and Guardians

As the Account Holder, you may review, update, or delete the personal information associated with your account and your child profiles at any time, and you may refuse to permit further collection or use of a child profile's information by deleting that profile or your account.

11.2 New York Residents (Child Data Protection Act)

Under the New York Child Data Protection Act, we process the data of users we know to be under 13 in accordance with COPPA, and we do not process the personal data of minors aged 13–17 except where permitted by law or with the required consent. We do not use minors' data for targeted advertising or sale.

11.3 California Residents (CCPA/CPRA)

If you are a California resident, you may have the right to know what personal information we collect, to request access to or deletion of your personal information, and to opt out of the sale or sharing of personal information. We do not sell or share personal information, and we do not use it for cross-context behavioral advertising. We will not discriminate against you for exercising these rights. To exercise a right, contact us at [privacy contact email].

11.4 EU/UK Residents (GDPR)

If you are in the European Economic Area or the United Kingdom, you have rights to access, rectify, erase, restrict, and port your personal data, and to object to certain processing. Our legal bases for processing include performance of our contract with you, your consent (including cookie consent), our legitimate interests in operating and securing the Service, and compliance with legal obligations. You may lodge a complaint with your local data protection authority.

12. Cookies and Consent

We use strictly necessary cookies to authenticate the Account Holder and remember preferences. We do not use advertising or cross-site tracking cookies in the child player. For visitors in regions that require it (such as the EU/UK), we present a cookie consent banner and obtain consent before setting any non-essential cookies.

13. International Data Transfers

We and our service providers may process and store information in the United States and other countries. Where required, we implement appropriate safeguards for cross-border transfers of personal data.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last Updated” date above and, where appropriate or legally required, provide additional notice or obtain renewed consent. Your continued use of the Service after an update constitutes acceptance of the revised policy.

15. Contact Us

If you have questions or requests regarding this Privacy Policy or your information, contact us at:

SOYTRN — c/o Precarious Press LLC and Lu31 LLC

Email: hello@SOYTRN.com

 

©2026 Precarious Press LLC and Lu31 LLC. SOYTRN is not affiliated with, endorsed by, or sponsored by YouTube or Google LLC. “YouTube” is a trademark of Google LLC.