Privacy Policy

Effective date: September 29, 2026

Last updated: October 27, 2026

This Privacy Policy explains how Tickle Tum Inc. handles information on www.tickletumkids.com (the "Site"). We wrote it for parents and guardians. If you are a child, please ask a grown-up to read this with you.

1. Who we are

The Site is run by Tickle Tum Inc., a Pennsylvania corporation. We make the Tickle Tum, Tickle Tum Kids, and Tickle Tum TV preschool learning videos. Tickle Tum Inc. is the only operator of the Site, and we answer every privacy question about it.

How to reach us about privacy:

• Company: Tickle Tum Inc.

• Mailing address: 1 E Broad St, Ste 130-1134, Bethlehem, PA 18018-5934

• Phone: (267) 227-4165

• Email: tickletumkids@gmail.com

2. This Site is made for young children

The Site is aimed at young children. For that reason we treat every visitor as a child and give every visitor the protections of the U.S. Children's Online Privacy Protection Act (COPPA).

We do not knowingly collect personal information from children. The Site has no sign-up, no accounts or log-ins, no contact forms, no newsletter sign-up, no chat, no comments, no contests, no uploads, and no games that ask for information. Nothing on the Site asks a child to type in or share anything about themselves, and nothing lets a child post information publicly.

Please do not submit personal information through the Site. No one, child or adult, is meant to.

3. What we collect, and what we don't

We do not collect names, home addresses, email addresses, phone numbers, usernames, photos, videos, or voice recordings of children, precise location, government-issued ID numbers (such as Social Security or passport numbers), biometric information (such as fingerprints, face or voice prints), or any other information that identifies a child.

What is collected automatically: Like every website, the Site can't load without some basic technical information passing between your device and the servers that deliver it. When someone visits, our website host (Wix) and its security and content-delivery providers automatically receive:

the device's IP address;

basic browser and device information (for example, browser type, screen size, and language setting);

• the pages requested and the date and time; and

the small cookies and similar browser storage described in Section 4.

Under COPPA, an IP address or a cookie ID can count as a "persistent identifier." These are used only for the internal operations described in Section 4. They are never combined with any other information to identify a child, and they are never used to contact a child, show ads, or build a profile.

4. Cookies and persistent identifiers

We use only the cookies needed to deliver, run, and protect the Site. We do not use advertising, marketing, retargeting, or social-media tracking cookies or pixels. We have not added Google Analytics, Meta (Facebook/Instagram) Pixel, TikTok Pixel, or any similar tool.

Wix also automatically sends technical performance and error information (for example, page-load times and error reports) to its own monitoring services, including Wix’s internal statistics systems and Sentry, an error-reporting service Wix uses. This information is used only to keep the Site running and fix problems, is not used for advertising or profiles, and is not combined with any information that identifies a child.

The Site is built on Wix, and Wix automatically places the following strictly necessary items:

XSRF-TOKEN: Set by Wix. What it does: Security: blocks forged requests to the Site. How long it lasts: Until you close your browser.

hs: Set by Wix. What it does: Security. How long it lasts: Until you close your browser.

svSession: Set by Wix. What it does: Security, stability, and core Site functions. How long it lasts: About 12 months.

bSession: Set by Wix. What it does: Measures whether the system is working well. How long it lasts: Up to 24 hours.

server-session-bind: Set by Wix. What it does: Protects the Site's internal connections. How long it lasts: Until you close your browser.

ssr-caching: Set by Wix. What it does: Helps pages load quickly. How long it lasts: Very short (seconds to 24 hours).

sec-fetch-unsupported: Set by Wix. What it does: Tells the Site when a browser can't use certain security features. How long it lasts: Until you close your browser.

__cf_bm: Set by Cloudflare (Wix's network provider). What it does: Bot and attack protection. How long it lasts: About 30 minutes.

fedops.logger.sessionId (browser storage): Set by Wix. What it does: Records technical errors so they can be fixed. How long it lasts: Up to 12 months.

mpaSessionId (browser storage): Set by Wix. What it does: Keeps page navigation working during a visit. How long it lasts: Until you close the tab.

The specific internal operations these identifiers support:

1. Delivering the Site: loading pages and videos, network communication, and caching;

2. Keeping the Site and visitors secure: stopping fraud, forged requests, bots, and attacks;

3. Keeping the Site working: finding and fixing errors, measuring performance, and producing aggregated counts (for example, the total number of page views) that don't identify anyone.

How we make sure these identifiers aren't misused. They are not used or shared to contact any child, for behavioral (interest-based) advertising, to build a profile of anyone, or for any other purpose. We do this in the following ways:

• There are no accounts, forms, or sign-ups, so there is nothing to link an identifier to a name or contact detail.

• No advertising, marketing, retargeting, social-media, or third-party analytics tools are installed, and no custom tracking code has been added.

• We do not export, look up, or use individual visitors' identifiers. At most, we look at aggregated statistics about whether the Site is working.

• We use Wix only as our website host and service provider.

• We check the Site at least once a year, and after every design change, to make sure no new tracking tools have been added.

Your choices. You can clear or block cookies in your browser settings at any time. Some parts of the Site may not work properly if you block the security cookies.

5. Other companies involved with the Site

• Wix.com hosts the Site and provides the tools we used to build it. Wix and its infrastructure providers (including Cloudflare for content delivery and security) process the technical information in Sections 3 and 4 on our behalf so the Site can run. We do not allow them to use it for advertising.

• YouTube. Our videos are hosted on YouTube, which is owned by Google. The Site does not embed YouTube players. Buttons such as "Watch on YouTube" are plain links. Tapping one leaves our Site and opens YouTube, where Google's privacy policy and YouTube's own rules apply instead of this policy. Our YouTube channel is marked "made for kids," and YouTube limits data collection and turns off personalized ads on content marked that way. We don't control what YouTube does.

• Social media links. The Site may include links to our pages on YouTube, Instagram, TikTok, and Facebook for parents. These are plain links. The Site doesn't load those companies' tracking pixels, "like" buttons, or feeds. Clicking a link takes you off our Site, and that company's privacy policy then applies. Most social networks don't allow children under 13 to have accounts.

• Amazon. Our Books section links to Amazon so parents can find Tickle Tum books. These are plain links (not affiliate links). Amazon’s privacy policy applies once you leave our Site.

We do not share, sell, rent, or trade personal information with anyone.

6. No ads, no selling, no sharing

The Site shows no advertising.

We do not use behavioral or interest-based advertising, retargeting, or profiling.

We do not sell or "share" personal information, and we do not disclose it to third parties. Because we don't collect personal information from children, we don't ask parents to consent to any collection, use, or disclosure. If that ever changes, we will ask for separate consent before disclosing anything to a third party (see Section 12).

7. How long information is kept (our data retention policy)

We keep a written data retention policy. Here is what it says:

Information: Strictly necessary cookies and browser storage (Section 4).

Why we have it: To deliver, secure, and maintain the Site.

Why we need to keep it: So the Site works and stays secure.

When it is deleted: They expire on their own as listed in Section 4, or when you clear them.

Information: Technical logs (IP address, browser info, pages requested) kept by Wix and its infrastructure providers.

Why we have it: Security, stopping abuse, fixing errors.

Why we need to keep it: To detect and investigate attacks and problems.

When it is deleted: On Wix's and its providers' standard schedules, and only as long as reasonably needed for those purposes.

Information: Emails and messages from parents or other adults.

Why we have it: To answer your question or carry out your request.

Why we need to keep it: To finish handling your request.

When it is deleted: Within 90 days after your request is resolved, unless the law requires us to keep it longer.

Information: A short record that a parent privacy request was handled (date, type of request, what we did; no child information).

Why we have it: To show we handled the request properly.

Why we need to keep it: Legal compliance.

When it is deleted: After 2 years.

Information: Any child's personal information we receive by mistake (Section 8).

Why we have it: None. We don't want it.

Why we need to keep it: None.

When it is deleted: Promptly after we discover it, and no later than 7 days.

We never keep children's personal information indefinitely. When we delete information, we do it securely so it can't be recovered in the normal course of business.

8. If we learn we have a child's information

If we find out that we have received personal information from a child (for example, a child emails us or a message includes a child's photo), we will delete it promptly and securely, as described in Section 7. We will not use it or share it. If a child emails us, we may send one reply (for example, asking a parent to contact us) and will then delete the child's email address and message. We won't use them to contact the child again.

If you believe your child has sent us personal information, please contact us (see Section 10) and we will find it and delete it.

9. Emails from parents and other adults

If you email, write to, or call us, we use your name and contact details only to reply to you and to carry out your request. We don't add you to any mailing list, and we don't sell or share your details. We delete your message according to our retention policy in Section 7.

10. Your rights as a parent, and how to use them

COPPA gives parents the right to:

• review any personal information we have collected from their child;

• have it deleted; and

refuse to allow any further collection or use of their child's information.

Because the Site doesn't collect personal information from children, in most cases we won't have anything tied to your child. Cookie IDs on your child's device aren't linked to a name, so we usually can't match them to a particular person. You can delete them yourself at any time by clearing cookies and site data in your browser, and doing so stops that identifier from being used.

To make a request or ask a question:

1. Email tickletumkids@gmail.com with the subject line "Parent Privacy Request,"

2. Call (267) 227-4165, or

3. Write to Tickle Tum Inc., 1 E Broad St, Ste 130-1134, Bethlehem, PA 18018-5934.

Tell us what you'd like us to do and give us any details that will help us find the information, such as the date and the email address a message came from. Before sharing any information with you, we'll take reasonable steps to confirm that you are the child's parent or guardian, without making the process burdensome. We will respond within 30 days.

11. Keeping information secure

We keep a written information security program that fits our small size and the very limited information we handle. Under it, we name a person responsible for security, review risks at least once a year, limit who can access our Site account and email inbox, protect those accounts with strong passwords and two-step login, and check that the service providers we use protect information appropriately. No system is perfectly secure, but collecting as little as possible is one of the best protections.

12. Changes to this policy

If we change this policy, we will post the new version on this page and update the "Last updated" date at the top. If we make a significant change, we will also put a notice on the Site's home page for a reasonable time.

We will not start collecting personal information from children without first changing this policy, giving parents direct notice, and getting verifiable parental consent as COPPA requires. That includes separate consent before any disclosure to third parties.

13. Questions and complaints

If you have any questions about this policy or how we handle information, please contact us using the details in Section 1. You can also learn more about children's online privacy from the U.S. Federal Trade Commission at https://www.ftc.gov/business-guidance/privacy-security/childrens-privacy.

14. California and other U.S. state privacy rights

Residents of California and other states with consumer privacy laws (such as Colorado, Connecticut, Virginia, and Utah) may have rights to know, access, correct, or delete personal information, and to opt out of its “sale” or “sharing” or its use for targeted advertising. We do not collect personal information through the Site, and we do not sell or share personal information or use it for targeted advertising, including information about anyone under 16. You may still contact us with any request or question, and we will not treat you differently for doing so.

Pennsylvania: if we ever experience a breach involving personal information, we will notify affected people as Pennsylvania law requires.