Privacy Policy

This Privacy Policy explains how Bluux LLC ("Bluux," "we," "our," or "us") handles information when you use the Bluux website, web application, child profiles, cloud project storage, and related services.

Bluux is a separate product of Bluux LLC. It was built in part from BSD-3-Clause-licensed ScratchJr source code, but it is not the original ScratchJr project and is not affiliated with, sponsored by, or endorsed by MIT, the MIT Media Lab, Tufts University, Playful Invention Company, or the original ScratchJr contributors.

When an adult creates a Bluux account, we may process information such as:

• email address;
• password hash and account-security data;
• account identifiers, timestamps, and session/authentication data;
• parent or guardian certifications and similar account-eligibility confirmations you submit in the signup flow; and
• email-delivery records related to account verification and password resets.

Bluux child profiles are intended to use only minimal information, such as:

• a nickname or first name chosen by the supervising adult;
• a preset avatar selection; and
• profile metadata such as creation date, last activity, and project count.

Do not put a child's full name, contact information, or other unnecessary personal information into a profile, project title, or project content.

Bluux may store projects and related metadata locally in your browser and, for cloud-enabled accounts, in Bluux-hosted storage. Saved project data may include project JSON, thumbnails, timestamps, profile/account identifiers, and any content placed into the project by the user, such as drawings, sounds, photos, recordings, and text.

Anyone using the same device or account may be able to access locally saved or cloud-synced projects associated with that browser session or account unless you sign out and protect the device appropriately.

We use information to operate Bluux, including to create and secure accounts, authenticate users, send verification and password-reset emails, create and manage child profiles, save and restore projects, support cloud sync, detect abuse, maintain service integrity, and provide customer support.

We may use service providers to host and operate Bluux, including Microsoft Azure services for hosting, databases, storage, and transactional email delivery. If a school or district chooses supported single sign-on options, account data may also be exchanged with that identity provider.

If optional bug reporting is enabled, bug reports may be sent through Bluux services to GitHub along with limited diagnostic details such as browser, viewport, page URL, and the problem description you submit. We do not intentionally include project content in bug reports.

We do not sell children's personal information. We do not use child profile data for targeted advertising.

Bluux accounts are intended to be created by adults, not by children directly. Adults may then create child profiles under that account. We design child profiles to use limited information and instruct adults not to include unnecessary personal information in child profiles or project content.

If you are a parent or legal guardian and want to review, correct, delete, or stop further use of personal information associated with your child, contact us at bluuxllc@outlook.com. We will work with you consistent with applicable law and our ability to verify the request.

Bluux uses browser storage technologies such as localStorage, sessionStorage, cookies, and IndexedDB to keep you signed in, remember settings, and store project data. If you use recording or camera features, your browser will ask for permission. If granted, that media may become part of the project you create.

We use reasonable administrative, technical, and organizational measures to protect account, profile, and project data. No system is perfectly secure, so you should also protect your devices and account credentials.

We retain information for as long as reasonably necessary to operate Bluux, comply with legal obligations, resolve disputes, and protect the service. Projects and account records you delete may remain in protected systems for a limited period before final removal. Optional bug reports submitted to GitHub remain in the repository's issue tracker until removed there.

Bluux cloud services are currently operated from infrastructure in the United States. If you use cloud-enabled features, your information may be processed in the United States.

We may update this policy to reflect changes to Bluux, our data practices, or legal requirements. We will post the revised version here and update the "Last updated" date.

For questions about this policy, please contact: bluuxllc@outlook.com.

Last updated: April 2, 2026