隐私政策

This policy explains what personal data we process when you visit our website and when you use the RoboGuru for WeDo 2.0 app, why we process it, how long we keep it and what rights you have. We have tried to write it in plain language.

Who we are

The controller responsible for processing personal data under the EU General Data Protection Regulation (GDPR) is:

[Company name – set in site.ts]
[Street address – set in site.ts]
[Country – set in site.ts]

Email: [Contact email – set in site.ts]

RoboGuru for WeDo 2.0 is an independent product. It is not made, sponsored or endorsed by the LEGO Group, and LEGO’s privacy terms do not apply to it.

Scope

This policy covers:

the website roboguru.app and all its pages and language versions, and
the RoboGuru for WeDo 2.0 app on every platform we offer it for.

App stores (Apple App Store, Google Play) and other websites we link to have their own privacy policies, which apply when you use them.

Summary

Website: our web server keeps short-lived access logs for security. They are deleted after 14 days.
Analytics only with consent: Google Analytics 4 runs only if you click “Accept analytics”. If you reject it or do nothing, no analytics script is loaded and no analytics cookies are set.
No other cookies: no advertising, no social media plugins, no newsletter and no contact form tracking.
App: the app needs Bluetooth permission to talk to the WeDo 2.0 Smarthub. Purchases are handled by the app stores; we never see payment card details.
Children: the app is used by children at school and at home. We do not knowingly collect personal data from children.
Your rights: you can ask for access, correction or deletion at any time by emailing [Contact email – set in site.ts].

Data we process on the website

Server access logs

When you open a page, your browser sends technical information to our web server. The server records it in an access log:

your IP address,
the date and time of the request,
the page or file requested and the HTTP status code,
the referring page (if your browser sends it), and
your browser’s user agent (browser and operating system).

We use these logs only to deliver the website, to detect and fix errors and to defend against attacks and abuse. We do not combine them with other data or use them to build profiles. Logs are deleted automatically after 14 days, unless a specific entry is needed to investigate a security incident.

Hosting

The website is a set of static files served from servers rented from Hetzner Online GmbH in the EU (Hetzner, Germany/Finland). Hetzner processes the data above on our behalf under a data processing agreement (Art. 28 GDPR) and does not use it for its own purposes.

If, and only if, you click “Accept analytics” in our consent banner, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). It helps us understand which pages are useful, for example how many people read a guide and which country or language they come from.

Before you choose, and if you reject: the Google Analytics script is not loaded at all. We use Google Consent Mode v2 with every consent type set to “denied” by default.
After you accept: Google Analytics sets the cookies _ga and _ga_<ID>, which by default expire after two years, and collects information such as the pages you visit, how long you stay, your approximate location (country or city, derived from your IP address), device type, browser, screen size and the referring website.
IP addresses: Google Analytics 4 does not log or store IP addresses; IP anonymisation is built in and always on.
No advertising features: advertising storage, ad user data and ad personalisation stay “denied”. We do not use Google Signals or link Analytics to advertising products.
Retention: Analytics data is kept for [GA4 data retention (2 or 14 months) – set in site.ts] months and then deleted automatically.

Google may process data in the United States. See “Recipients and international transfers” below. More information: Google Privacy Policy, How Google uses information from sites that use its services. You can also block Google Analytics on all websites with Google’s browser add-on.

Your choice in the consent banner (“granted” or “denied”) is stored in your browser’s local storage under the key rg-consent, so we do not ask again on every page. If you dismiss our language suggestion, that is remembered under rg-locale-suggest-dismissed. Both values stay on your device, are never sent to us and can be deleted at any time by clearing your browser’s site data. They are strictly necessary for the features you asked for.

You can change your choice at any time: . The same link is in the footer of every page. Withdrawing consent stops future analytics; it does not affect processing that happened before. To remove cookies that were already set, clear the cookies for this site in your browser.

What the website does not do

The website sets no other cookies. It has no user accounts, no comments, no newsletter, no advertising and no embedded social media widgets. Fonts and all other files are served from our own server, so your browser does not contact third parties such as Google Fonts. There is no contact form; if you email us, see “Contacting us” below.

Contacting us

If you email us, we use your email address, your name (if given) and the content of your message to answer you. We delete the correspondence when it is no longer needed, unless we must keep it for legal reasons (for example, tax records for a school purchase).

Data the app processes

Bluetooth

The app needs permission to use Bluetooth so that it can find and connect to the LEGO® Education WeDo 2.0 Smarthub and send your programs to it. Depending on the operating system, this permission may be labelled “Nearby devices” or, on older Android versions, “Location”, because Android groups Bluetooth scanning with location. The app uses this permission only to connect to the Smarthub.

What the app collects

[App data practices (appCollectsNoPersonalData, appUsesBluetoothOnly, appHasAccounts, appHasAnalytics, appHasAds) – set in site.ts claims]

Purchases

The app is sold through the Apple App Store and Google Play. Payments are processed by Apple or Google under their own terms and privacy policies. We receive no payment card details and no personal data about you from the purchase; the stores send us only anonymous, aggregated sales and download reports.

Data from the app stores

Apple and Google provide app developers with statistics such as download numbers, crash rates and countries. These are aggregated and do not identify you. Whether the stores share crash reports with us depends on the settings on your device.

Children

RoboGuru for WeDo 2.0 is used by children in schools and at home, usually with a teacher or parent. We do not knowingly collect personal data from children.

United States (COPPA): we do not knowingly collect personal information from children under 13. The website is aimed at parents and teachers.
European Union (GDPR Art. 8): where processing is based on consent and the child is under the age of digital consent in their country (13 to 16, depending on the country), consent must be given by a parent or guardian. Analytics on this website is meant for adults; please do not let children accept the consent banner for you.
Schools: teachers and school administrators can contact us for information they need for a data-protection assessment.

If you are a parent, guardian or teacher and believe a child has given us personal data (for example by email), contact us at [Contact email – set in site.ts] and we will delete it.

Legal bases

We process personal data on these legal bases under the GDPR:

Consent, Art. 6(1)(a): Google Analytics and the cookies it sets. You can withdraw consent at any time with “Cookie settings”.
Legitimate interests, Art. 6(1)(f): server access logs and hosting, to deliver the website securely and keep it free of abuse; answering emails you send us.
Contract, Art. 6(1)(b): answering support requests about an app you bought, and quotes or invoices for schools.
Legal obligation, Art. 6(1)(c): keeping business records where the law requires it.

Storing your consent choice on your device is strictly necessary for the consent feature you use (Art. 5(3) ePrivacy Directive and its national laws).

Recipients and international transfers

Hetzner Online GmbH, Germany, our hosting provider, processes data on our behalf as a processor under Art. 28 GDPR. Our servers are in the EU (Hetzner, Germany/Finland).
Google (Google Ireland Limited and Google LLC, USA), only if you accept analytics. Google LLC is certified under the EU-U.S. Data Privacy Framework, on which the European Commission’s adequacy decision of 10 July 2023 is based; Google also uses the EU Standard Contractual Clauses.
Apple and Google as app stores, for purchases you make there, under their own privacy policies.

We do not sell personal data and do not share it with advertisers.

Retention

Server access logs: 14 days.
Google Analytics data: [GA4 data retention (2 or 14 months) – set in site.ts] months; Analytics cookies on your device: up to two years unless you delete them.
Your consent choice: on your device until you clear your browser’s site data.
Emails: as long as needed to deal with your request, and longer only where the law requires it (for example, up to ten years for invoices in Germany).

Your rights

Under the GDPR you have the right to:

access the personal data we hold about you (Art. 15),
have inaccurate data corrected (Art. 16),
have your data erased (Art. 17),
restrict processing (Art. 18),
receive your data in a portable format (data portability, Art. 20),
object to processing based on legitimate interests (Art. 21), and
withdraw your consent at any time, with effect for the future (Art. 7(3)).

To use these rights, email [Contact email – set in site.ts]. We answer within one month. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work, or where you think an infringement happened.

Contact

For any privacy question or request, write to [Contact email – set in site.ts] or by post to the address under “Who we are”.

Changes to this policy

We update this policy when the website, the app or the law changes. The date at the top shows when it was last updated. If a change significantly affects how we use your data, we will point it out on the website.