Privacy: buying things and the parent dashboard

LekkerPets collects as little as it can. This part explains what changes when someone buys something or uses the parent dashboard. The person responsible for this information is STANDER Games (hello@lekkerpets.com).

PayPal handles the money

Payments are made with PayPal. You give your payment details to PayPal, not to us, and PayPal's own privacy notice covers them. We never see or store card or bank details. PayPal tells us that a payment went through, the amount, its transaction ID and status, and later any refund or cancellation.

What we keep about a purchase

• Which account it was for, what was bought (and the choices made, such as which pet), the price, the date and its status (paid, refunded).
• PayPal's order and transaction IDs, so we can match refunds and answer questions.
• The email address the receipt went to (the player's, or the parent's when a parent paid).
• For the LekkerPets Pass: the plan, its PayPal subscription ID and until when it is paid.
• That the box was ticked at checkout confirming that things are delivered straight away and that opened or used items can't be refunded for a change of mind, with the date and time.
• For a child's request a parent paid for: that it came from a request, which parent approved it, and the monthly spending limit at that moment.
• Refund history: each refund, its date and the rule in our refund policy it was given under (our error, a fault in parent approval, or a change of mind).
• Chargeback flags: a note on the account when a payment was reversed through PayPal or a bank, which pauses new purchases on that account until it is sorted out.

We keep these records to prevent misuse (for example repeated change-of-mind refunds) and to handle questions and disputes fairly.

We use this to deliver what was bought, send receipts, keep the Pass running, handle refunds and keep our accounts, as tax law requires.

How long we keep it

Payment records are kept for as long as tax and accounting law requires (5 years, as South African tax law requires). If an account is deleted, its pets, items and save are deleted at once, and its payment records are kept without the email address or any link to the player. The checkout confirmation, refund history, chargeback flags and the parent action log are kept for the same 5 years as payment records (if the player's account is deleted, the parent's log stays without the link to the player). Unanswered purchase requests expire after 7 days. Abandoned checkouts are deleted after 30 days.

Players under 18 and their parents

• A player under 18 cannot pay. Asking to buy something sends their parent (the email that approved their account) the request: the player's email, what they asked for and its price.
• The parent dashboard is reached with a one-time code sent to the parent's email. It uses its own cookie to keep the parent signed in for a day, and a second cookie to protect its forms. It shows the parent the player's account, pets and level, purchases and requests, and lets them set a spending limit, switch requests and sharing on or off, manage the Family Pass and delete the player's account.
• We keep a log of every parent action, with its date and time: requests approved or declined, spending limit changes, requests or sharing switched on or off, Family Pass changes and account deletion. It shows the parent their own activity and lets us answer questions about a purchase.
• We store the parent's email, their settings for each player and which players are linked to a Family Pass. Sign-in codes are stored only in scrambled (hashed) form and expire after 15 minutes.

Your choices

You can ask what we hold about you, ask us to correct it, or delete the account at any time (in the game, or in the parent dashboard for a child's account). Write to hello@lekkerpets.com. If you are unhappy with how we handle your information, you may also complain to the data protection authority the Information Regulator (South Africa), inforeg.org.za.