Cloudtop Studios Privacy Policy
**Last updated:** May 31, 2026
**Effective:** Date of publication on Cloudtopstudios.com
Cloudtop Studios ("Cloudtop," "we," "us," or "our") operates **Cloudtopstudios.com** (the "Service"), a paid streaming platform that delivers original animated films and shorts created for families and children. This Privacy Policy explains what information we collect, why we collect it, how we use it, who we share it with, and the choices and rights available to you and your children.
This policy is written to comply with the U.S. Children's Online Privacy Protection Act ("COPPA") as amended in 2025, the California Consumer Privacy Act / California Privacy Rights Act ("CCPA/CPRA"), and other U.S. state privacy laws applicable to operators of online services that knowingly collect information from children under 13.
If you have any question about this policy, contact **privacy@cloudtopstudios.com**.
---
1. Who this policy is for
The Service is designed for **parents and legal guardians** ("Parents") to subscribe to, set up, and supervise on behalf of their children ("Kids"). At launch, the Service is offered only to residents of the United States. The Service is not directed to users outside the United States and we do not knowingly accept accounts from outside the United States.
- **Parent account.** Only an adult (18+) may create the membership account. The Parent is the contracting party and the controller of the family's data on the Service.
- **Kid profile.** A Parent may create one or more Kid profiles under their account. We treat each Kid profile as belonging to a child under 13 unless the Parent indicates otherwise during profile setup. Kid profiles do not have independent login credentials, cannot send messages, cannot post content, and cannot interact with other users.
We do not knowingly allow children to create their own accounts on the Service.
2. Information we collect
2.1 Information you (the Parent) provide
When you sign up and use the Service, we collect:
- **Account information:** your name (optional), email address, password (stored hashed and salted), and, if you sign in through a third-party identity provider (e.g., Apple, Google), the basic profile fields that provider returns.
- **Billing information:** your billing name and address, and the last four digits and expiration of your payment card. **Your full card number is collected and stored by our payment processor (Stripe, Inc.), not by Cloudtop.** We retain a payment processor token that lets us charge you for your membership.
- **Membership records:** the plan you selected, the promotion code you used (if any), your subscription start date and renewal date, your payment history, and your cancellation status.
- **Support communications:** if you email us or use our parent dashboard's contact form, the contents of those messages.
- **Newsletter (optional):** if you opt in to our parent newsletter, your email address is added to our mailing list until you unsubscribe.
2.2 Information about your Kid that you provide
When you create a Kid profile, you provide:
- **Display name** (a chosen name, nickname, or initial; we ask you not to use the child's full legal name).
- **Age band** (e.g., 2-4, 5-7, 8-10, 11-12). We use the age band to recommend age-appropriate content.
- **Optional avatar selection** from our preset library (no photo upload).
2.3 Information collected automatically about Kid use of the Service
When a Kid profile is used to watch content, we collect playback data needed to operate the Service:
- Titles played, time watched, completion percentage, and last-watched timestamp.
- Playback quality and buffering events (for delivery diagnostics).
- The IP address of the device used to connect to the Service and a session identifier for the duration of the playback session.
- The device type, operating system, and browser/app version.
We use this information solely to deliver the Service, operate features such as "continue watching" and parental dashboards, secure the Service, and diagnose technical problems. We do **not** use Kid playback data for behavioral advertising or to build advertising profiles. We do not sell or share Kid data for cross-context behavioral advertising.
2.4 Information collected automatically about Parent use of the Service
When you use the parent dashboard or website, we collect standard server logs (IP address, user agent, requested URL, timestamp) and first-party cookies needed to keep you logged in and remember your preferences. We do not use third-party advertising trackers on the Service.
3. How we use information
We use the information described above to:
1. Provide the Service to you and your Kids (account login, content delivery, parental controls, account settings).
2. Process payments and operate the membership (including reminders about renewals and receipts).
3. Personalize the experience within the Service (recommend content by age band, "continue watching," watch history visible to the Parent).
4. Communicate with you about your account (transactional email such as receipts, renewal notices, password changes, and important Service notices).
5. Maintain the security, integrity, and functioning of the Service (fraud detection, abuse prevention, diagnostics).
6. Comply with legal obligations (e.g., respond to lawful requests from government authorities, enforce our [Terms of Service](/terms)).
For Kid profiles specifically, we use information **only** to support the internal operations of the Service as that phrase is used in COPPA, and **never** to contact the Kid, never to serve behavioral advertising to the Kid, and never to disclose Kid information to third parties except as described in Section 4.
4. Who we share information with
We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We share information only in the following ways:
- **Service providers operating on our behalf.** We use vetted vendors to run parts of the Service under written agreements that limit their use of the information to providing services to us:
- **Stripe, Inc.** — payment processing.
- **Bunny.net (BunnyWay d.o.o.)** — video delivery (Cloud CDN and Bunny Stream). Receives signed URLs and IP addresses for playback.
- **Postmark / transactional email vendor** — transactional and account email delivery.
- **Site hosting and infrastructure** — providers that host our application, database, and storage.
- **Error and performance monitoring** — vendors that help us diagnose and fix problems with the Service.
- **Aggregated or de-identified data.** We may share aggregated or de-identified data (data from which a person cannot be identified) for research, reporting, or business operations. We do not attempt to re-identify Kid data once aggregated.
- **Legal disclosures.** We may disclose information if required by law, subpoena, or court order, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Cloudtop, our users, or the public, or to enforce our Terms of Service.
- **Business transfers.** If Cloudtop is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such transfer and any choices you have.
We do not knowingly disclose Kid personal information to third parties for those third parties' own purposes.
5. COPPA notice to Parents
Cloudtop is an operator of an online service "directed to children" under COPPA because the Service knowingly accepts the use of Kid profiles. We do the following to comply with COPPA:
- **Notice and consent.** This policy provides notice of our information practices for Kids. When you create your Parent account and add a Kid profile, you provide verifiable parental consent for the collection and use of Kid information as described in Section 2 and Section 3. You confirm that you are at least 18 years old and the parent or legal guardian of the Kid you add.
- **Limited collection.** We collect only the Kid information described in Section 2.2 and 2.3. We do not request or accept additional personal information from a Kid.
- **No third-party disclosure of Kid information for third-party purposes.** Section 4 lists the only disclosures we make. None are for advertising or third-party purposes.
- **Internal operations only.** Kid information is used only to operate the Service.
- **Parental rights** (see Section 6 below):
- Review the personal information we have collected from your Kid.
- Delete your Kid's personal information.
- Refuse to permit further collection or use of your Kid's information by deleting the Kid profile or cancelling your account.
- **Retention.** Kid personal information is retained only as long as necessary to provide the Service. See Section 9.
- **Contact.** Questions about COPPA practices: **privacy@cloudtopstudios.com**.
If you believe we have collected information from a child without proper consent, please contact us at the address above and we will promptly investigate and delete the information.
6. Your choices and rights
6.1 Parental controls inside the Service
From the parent dashboard you can:
- View your Kid's watch history and current "continue watching" list.
- Edit the Kid's display name and age band, or choose a different avatar.
- Delete the Kid profile (which deletes the associated watch history).
- Export a copy of the data we hold for your account and your Kid profiles.
- Cancel your membership.
6.2 Rights under U.S. state privacy laws
Depending on where you live (including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia), you may have the right to:
- **Know / access** what personal information we have about you and your household.
- **Correct** inaccurate personal information.
- **Delete** personal information, subject to legal exceptions.
- **Port** personal information (receive a copy in a usable format).
- **Opt out of sale or sharing** for cross-context behavioral advertising. *(We do not sell or share for behavioral advertising; we honor opt-out requests as a matter of policy.)*
- **Opt out of profiling** for decisions producing legal or similarly significant effects. *(We do not engage in such profiling.)*
- **Limit use of sensitive personal information**. *(We do not use sensitive personal information for purposes other than providing the Service.)*
For Kid (under-13) information, we treat any processing as requiring opt-in consent, which we obtain via the Parent at account creation.
To exercise a right, email **privacy@cloudtopstudios.com** with the account email address and a description of the request. We will verify your identity by sending a confirmation email and may ask additional questions to make sure we respond to the right person. We will respond within the timeframe required by applicable law (generally 45 days, extendable by 45 more days where allowed).
You may appeal a denial of a request by replying to our response email. If you are a California resident, you may also designate an authorized agent.
6.3 Marketing email
If you opt in to the parent newsletter, you can unsubscribe at any time using the link at the bottom of every newsletter or by emailing us. Transactional emails (receipts, renewal reminders, security notices) cannot be unsubscribed while your account is active.
6.4 Cookies and tracking
We use only first-party cookies needed for authentication and basic site function. We do not use third-party advertising cookies on the Service. Most browsers let you block or delete cookies; doing so may prevent you from staying signed in.
We honor browser-level "Global Privacy Control" signals as a valid opt-out of sale/share where applicable.
7. Geographic scope
The Service is offered only in the United States at launch. We attempt to block account creation from IP addresses outside the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. The Service is not intended for, and we do not knowingly accept users from, the European Economic Area, the United Kingdom, or other jurisdictions outside the United States.
8. Data security
We use industry-standard administrative, technical, and physical safeguards to protect the information we collect, including:
- TLS encryption in transit.
- Encryption at rest for sensitive data.
- Hashed and salted passwords.
- Tokenized payment data via Stripe (we do not store full card numbers).
- Access controls and audit logging for production systems.
- Vendor due diligence and written data-protection agreements with service providers.
No method of transmission or storage is 100% secure. If we become aware of a security incident affecting your personal information, we will notify you in accordance with applicable law.
9. Data retention
We retain account and billing records for as long as your account is active and for a reasonable period afterward to comply with tax, accounting, and legal obligations.
We retain Kid profile information for as long as the Kid profile exists. If you delete a Kid profile, we delete the associated personal information promptly (within 30 days), except where retention is required by law (for example, fraud or abuse investigations).
If you cancel your membership and do not renew, your Parent account and all associated Kid profiles will be deleted within 12 months of cancellation, unless you reactivate before then.
10. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent version. If we make material changes, we will notify Parents by email at the address on file and post a notice on the Service before the changes take effect. Continued use of the Service after the effective date of an update means you accept the updated policy.
11. Contact us
Cloudtop Studios — Privacy
Email: **privacy@cloudtopstudios.com**
For COPPA questions or requests, address them to the same email with the subject line "COPPA Request."
For California Shine the Light or other state-specific requests, identify the request in the subject line.
---
*This policy is the binding statement of our information practices for Cloudtopstudios.com.*