Privacy Policy · Small Reasons

Last updated 16 October 2026.

This policy explains what personal information we collect, why, who we share it with and what your rights are. It follows South Africa's Protection of Personal Information Act (POPIA).

1. Who is responsible

Small Reasons (Laura Germishuys) is responsible for your personal information. Our Information Officer, the person in charge of privacy, is Laura Germishuys. You can reach them at hello@smallreasons.com.

2. Children

The site is made for children, but we do not collect personal information from children. Accounts belong to grown-ups who are 18 or older. We do not ask for a child's name, age, school or photograph.

Some activities let a child circle answers or type an idea. That is kept only in the browser on the device being used. It is never sent to us, and clearing the browser's data removes it.

3. What we collect

If you just browse: nothing that identifies you. The browser remembers whether you chose light or dark mode. Our hosting company keeps standard technical logs, such as internet addresses, for security.
If you create an account: your email address, a password (stored only in a scrambled form we cannot read) and, if you give it, your name.
If you buy something: what you bought, the price, the date and the payment reference. Paystack collects your card or payment details directly; we never receive your full card number.
If you subscribe: your plan, its dates and Paystack's reference for it. Paystack keeps the card.
If you ask for free months: your email address, the date, our decision and, if you choose to write one, your reason. We delete the reason as soon as the request is decided. We never ask about your children.
If you download a printable file: which file and when, so we can deal fairly with refunds.
If you email us: what you write and your contact details.

4. Why we use it

To run your account and give you access to what you bought.
To take payments, send receipts and handle refunds.
To answer your questions and complaints.
To keep the site secure and keep the records the law requires, such as tax records.

We do not sell your information. We do not send marketing emails unless you have asked for them, and every such email lets you stop them.

5. Who we share it with

Only with companies that help us run the site, and only what they need:

Paystack, to process payments.
Supabase, which stores accounts and purchase records.
Vercel, which hosts the website.
Resend, which sends our emails, such as the one that confirms your email address. It receives your email address and the email we send you.
Google, if you choose to sign in with your Google account, and for our own email inbox, which holds any email you send us.
Google Fonts, which supplies the site's lettering; your browser fetches the fonts from Google.

We may also share information if the law requires it.

6. Information stored outside South Africa

Some of these companies store information on servers outside South Africa. We only use companies that protect personal information to a standard at least as high as POPIA requires.

7. How long we keep it

We keep your account information while your account is open. We keep purchase records for five years, because tax law requires it. When we no longer need information, we delete it.

8. Keeping it safe

The site uses an encrypted connection (https). Passwords are stored scrambled. Payments are handled by Paystack, which meets the card industry's highest security standard (PCI DSS Level 1). Only people who need to see your information can see it.

9. Your rights

You may ask us what information we hold about you, ask us to correct or delete it, or object to how we use it. Email hello@smallreasons.com. You can delete your account at any time.

If you are unhappy with how we handled your information, you may complain to the Information Regulator.

10. Changes

If we change this policy, we will update the date at the top. If a change is important, we will tell account holders by email.