Let's Play
Privacy Policy
Last updated: 26 September 2026
This policy explains what information the Let's Play website collects, why it is collected and how you can control it.
Who is responsible for the information
The website is operated by Sigal Sasson-Spector. For privacy questions or requests to access, correct or delete information, contact sigalsplay@gmail.com.
Information we collect
When you register, an email address and account identifier are stored. Your password is processed by Supabase authentication and is not shown to us in plain text. Your account stores the content you create: favorites, folders, therapy plans, the diary, session boards and uploaded images, as described below. Preferences such as language and button positions are stored only in your browser. To count returning users, the date a signed-in user opens the site is also stored (once a day, without pages, times or actions).
Therapist diary and session boards
The diary and session boards are stored in your cloud account so they are available on any device. The diary stores the client's name, the date, the time (if entered) and whether the session repeats weekly. A session board stores the chosen activities, games and signs, pen drawings and photos the therapist added to the board. Enter a first name or nickname only, without a surname, ID number, address, phone number, diagnosis or other identifying information. The website does not keep session notes.
Uploaded images
A therapist can upload her own images (for example games, equipment and materials) to use on session boards. The images are kept in private storage in the account, and photos taken directly onto a board are saved with that board. Upload and photograph only equipment and materials, with no children and no identifying details.
Who can see the information
Each user sees only their own information. Access to cloud data is limited to the account that created it, and we do not share it with other users. A home-practice link sent to parents contains only the list of activities, with no client name or personal details.
Children's photos
A photo uploaded to the story builder is processed locally on the device for cropping and background removal. By design, it is not sent to our server or stored in the website library, and is removed from the builder when you leave. Upload a photo only with a parent or guardian's permission.
Analytics and Cookies
Google Analytics is activated only after you select Accept in the Cookie notice. It helps us understand visits and pages viewed. You can decline analytics or change your choice through Cookie preferences in the website footer.
How we use information
Information is used to operate your account, save content you request, maintain security, provide support, fix errors and improve the website. We do not sell personal information or use your email for marketing without separate consent.
Service providers and data transfers
We use Supabase for accounts and cloud storage, and Google Analytics for analytics after consent. These providers may process information outside Israel under their terms and safeguards.
Retention, security and your rights
Account information is retained while the account is active or as needed for the purposes for which it was collected, subject to law. We use reasonable safeguards, but no system is completely secure. You may request access, correction or deletion using the contact address above.
Children
Account registration is intended for parents, guardians and professionals. A child should use the website with a responsible adult. We do not ask children to provide personal information directly to us.