Privacy and cookie policy
Last updated: 2026-07-27
1. General provisions.
1. 1. This Privacy and Cookie Policy (the "Policy") describes how UAB "ChickiMap" (the "Company") collects, uses and stores personal data of users of the website www.chickimap.com (the "Website").
1. 2. Data controller: UAB "ChickiMap", company code 305888999, Santariškių g. 75-34, Vilnius, Lithuania, email for data protection matters: info@chickimap.com.
1. 3. By using the Website, registering an account, purchasing memberships or goods, or otherwise providing personal data, users confirm that they have read this Policy.
1. 4. Protection of children's personal data. The Website's games and educational materials are intended for children; however, only adults (parents, guardians, educators or other persons aged 18 or over) may register an account, make purchases and provide data on the Website. The Company does not knowingly collect children's personal data.
2. Personal data collected.
The Company collects and processes only the data necessary to provide services and fulfil orders:
– registered account data: first name, last name, email address, country, password (stored only in encrypted form – the Company cannot see it);
– organisation account data: organisation name, institution code, VAT code (if provided), address;
– purchase data: order history and invoice data;
– when purchasing goods without an account (guest purchase): first name, last name, email address and country;
– payment information (payments themselves are securely processed by Paysera or PayPal – the Company does not receive or store payment card or bank login data);
– IP address and information about the device used and browsing on the Website;
– correspondence between the user and the Company.
The buyer's country and IP address are recorded at the time of purchase to comply with tax accounting (VAT/OSS) requirements – as evidence of the buyer's location.
2.1. Child progress module (children's profiles).
You can create children's profiles in your account: a child's first name or nickname (we recommend a nickname – we do not ask for or require a full name) and age. Children's profiles have no separate logins – they exist only within the parent's or institution's account. When children play, the following is recorded: which game was played, the date and active playing time, and in some games – the number of correct and incorrect answers. We do not collect any other children's data (photos, contact details, location).
This data is used for a single purpose – to show the child's progress to parents or educators (the Child progress page, the weekly email report) and to the child – their achievements collection. The child sees only positive achievements; ratings and percentages are shown only in the adult view. This data is not sold or transferred to third parties for marketing purposes.
The weekly progress report is sent to the private account's email address only if the child played that week; you may opt out at any time using the checkbox on the Child progress page or the link at the bottom of each report. These emails are not sent to organisation accounts.
In organisation accounts children are organised into groups. Each group is protected by a password set by its educator – the group's children's data is visible only to those who know the password. A forgotten group password is reset by the Company's administration at the institution's request; the reset affects only that one group.
Child progress data is stored on the Company's server in the European Union (Lithuania). When a child's profile is deleted, it and all its progress are immediately removed from the account and no longer used. To have the child's data completely and irreversibly erased from the Company's systems, write to info@chickimap.com from the email address with which the account is registered (this confirms that the request comes from the account owner) – we will do so within 30 days (GDPR Art. 17).
3. Purposes and legal bases of processing.
3. 1. Data is processed on the following legal bases: performance of a contract (account operation, membership activation, delivery of digital goods); legal obligation (issuing invoices, accounting, tax requirements); the user's consent (newsletters, non-essential cookies); legitimate interest (Website security, fraud prevention, dispute resolution, Website improvement).
3. 2. Marketing. To show relevant offers or remind about an unfinished shopping cart, the Company may use automated marketing tools (e.g. Meta Pixel, a newsletter platform). These tools operate only with the user's consent, which may be withdrawn at any time.
4. Data transfer to third parties and outside the EU.
4. 1. Data is transferred only to partners who help provide services: payment service providers (Paysera, PayPal), analytics and marketing system operators (Google Ireland Ltd. – Google Analytics; Meta Platforms Ireland Ltd. – Meta Pixel), IT service providers (website hosting, technical maintenance) and public authorities where required by law. The Company does not sell personal data and does not transfer it to third parties for their own marketing purposes.
4. 2. As some partners (Google, Meta) are US companies, part of the analytical data may be transferred outside the EU. Such transfers are carried out only on the basis of Standard Contractual Clauses approved by the European Commission or the EU–US Data Privacy Framework.
5. Direct marketing (newsletters).
5. 1. Newsletters are sent only to users who have subscribed to them themselves.
5. 2. You may unsubscribe at any time – by clicking the unsubscribe link at the bottom of any newsletter or by writing to info@chickimap.com. Order-related emails (payment confirmations, invoices, download links) are not newsletters and are sent in performance of the contract.
6. Data retention periods.
6. 1. Order and invoice data is stored for 10 years in accordance with the accounting requirements of Lithuanian law.
6. 2. Registered account data is stored until the user requests deletion of the account (by email to info@chickimap.com). Accounts that have not been logged into for 3 years are anonymised: the first name, last name, email and password are removed, while order and invoice data is retained for the period specified in clause 6.1 for accounting purposes.
6. 3. Guest purchase data is stored together with the order data for the period specified in clause 6.1.
6. 4. Emails and enquiries are stored for no longer than 2 years from the date of the last correspondence; newsletter subscription data – until consent is withdrawn.
7. Users' rights.
7. 1. Users have the right to: access their personal data; request its rectification or erasure (the "right to be forgotten", except for data the Company must retain by law); restrict processing; object to processing; data portability; withdraw consent at any time.
7. 2. Requests are submitted by email to info@chickimap.com. The Company responds no later than within 1 month of receiving the request; where necessary, this period may be extended by a further 2 months, with the user being informed.
7. 3. Users also have the right to lodge a complaint with the Lithuanian State Data Protection Inspectorate (vdai.lrv.lt).
8. Cookies and similar technologies.
8. 1. Essential records – required for the Website to function, used without separate consent: the login session cookie, the language selection cookie, technical purchase-flow records and the shopping cart record "chiki_cart" (stored in the browser's localStorage and not sent anywhere – it only contains the selected products).
8. 2. Statistics cookies (Google Analytics, cookie "_ga", stored for up to 2 years) and marketing cookies (Meta Pixel, cookie "_fbp", stored for up to 3 months) are used only after the user gives consent in the Website's cookie banner.
8. 3. Consent may be withdrawn at any time by clearing this Website's data in the browser (the choice will then be presented again) or by contacting the Company at info@chickimap.com.
8. 4. The pages of payment service providers (Paysera, PayPal) may use their own cookies – their use is governed by the privacy policies of the respective providers.
9. Data security.
9. 1. The Company applies appropriate technical and organisational measures to protect personal data against unlawful access, loss or disclosure (encrypted connection, encrypted passwords, restricted server access).
9. 2. For account security purposes (on the basis of legitimate interest), account login records are kept: the login time, IP address and the type of device and browser used. No more than the last 50 login records are stored (the oldest are removed automatically), and active session data is kept for up to 30 minutes from the last activity. This data is used solely to prevent unauthorised use of accounts and is not transferred to third parties.
10. Final provisions.
10. 1. The Company reserves the right to update this Policy; the current version is always published on the Website with the date of the last update.
10. 2. All privacy-related questions are accepted by email at info@chickimap.com.
1. General provisions.
1. 1. This Privacy and Cookie Policy (the "Policy") describes how UAB "ChickiMap" (the "Company") collects, uses and stores personal data of users of the website www.chickimap.com (the "Website").
1. 2. Data controller: UAB "ChickiMap", company code 305888999, Santariškių g. 75-34, Vilnius, Lithuania, email for data protection matters: info@chickimap.com.
1. 3. By using the Website, registering an account, purchasing memberships or goods, or otherwise providing personal data, users confirm that they have read this Policy.
1. 4. Protection of children's personal data. The Website's games and educational materials are intended for children; however, only adults (parents, guardians, educators or other persons aged 18 or over) may register an account, make purchases and provide data on the Website. The Company does not knowingly collect children's personal data.
2. Personal data collected.
The Company collects and processes only the data necessary to provide services and fulfil orders:
– registered account data: first name, last name, email address, country, password (stored only in encrypted form – the Company cannot see it);
– organisation account data: organisation name, institution code, VAT code (if provided), address;
– purchase data: order history and invoice data;
– when purchasing goods without an account (guest purchase): first name, last name, email address and country;
– payment information (payments themselves are securely processed by Paysera or PayPal – the Company does not receive or store payment card or bank login data);
– IP address and information about the device used and browsing on the Website;
– correspondence between the user and the Company.
The buyer's country and IP address are recorded at the time of purchase to comply with tax accounting (VAT/OSS) requirements – as evidence of the buyer's location.
2.1. Child progress module (children's profiles).
You can create children's profiles in your account: a child's first name or nickname (we recommend a nickname – we do not ask for or require a full name) and age. Children's profiles have no separate logins – they exist only within the parent's or institution's account. When children play, the following is recorded: which game was played, the date and active playing time, and in some games – the number of correct and incorrect answers. We do not collect any other children's data (photos, contact details, location).
This data is used for a single purpose – to show the child's progress to parents or educators (the Child progress page, the weekly email report) and to the child – their achievements collection. The child sees only positive achievements; ratings and percentages are shown only in the adult view. This data is not sold or transferred to third parties for marketing purposes.
The weekly progress report is sent to the private account's email address only if the child played that week; you may opt out at any time using the checkbox on the Child progress page or the link at the bottom of each report. These emails are not sent to organisation accounts.
In organisation accounts children are organised into groups. Each group is protected by a password set by its educator – the group's children's data is visible only to those who know the password. A forgotten group password is reset by the Company's administration at the institution's request; the reset affects only that one group.
Child progress data is stored on the Company's server in the European Union (Lithuania). When a child's profile is deleted, it and all its progress are immediately removed from the account and no longer used. To have the child's data completely and irreversibly erased from the Company's systems, write to info@chickimap.com from the email address with which the account is registered (this confirms that the request comes from the account owner) – we will do so within 30 days (GDPR Art. 17).
3. Purposes and legal bases of processing.
3. 1. Data is processed on the following legal bases: performance of a contract (account operation, membership activation, delivery of digital goods); legal obligation (issuing invoices, accounting, tax requirements); the user's consent (newsletters, non-essential cookies); legitimate interest (Website security, fraud prevention, dispute resolution, Website improvement).
3. 2. Marketing. To show relevant offers or remind about an unfinished shopping cart, the Company may use automated marketing tools (e.g. Meta Pixel, a newsletter platform). These tools operate only with the user's consent, which may be withdrawn at any time.
4. Data transfer to third parties and outside the EU.
4. 1. Data is transferred only to partners who help provide services: payment service providers (Paysera, PayPal), analytics and marketing system operators (Google Ireland Ltd. – Google Analytics; Meta Platforms Ireland Ltd. – Meta Pixel), IT service providers (website hosting, technical maintenance) and public authorities where required by law. The Company does not sell personal data and does not transfer it to third parties for their own marketing purposes.
4. 2. As some partners (Google, Meta) are US companies, part of the analytical data may be transferred outside the EU. Such transfers are carried out only on the basis of Standard Contractual Clauses approved by the European Commission or the EU–US Data Privacy Framework.
5. Direct marketing (newsletters).
5. 1. Newsletters are sent only to users who have subscribed to them themselves.
5. 2. You may unsubscribe at any time – by clicking the unsubscribe link at the bottom of any newsletter or by writing to info@chickimap.com. Order-related emails (payment confirmations, invoices, download links) are not newsletters and are sent in performance of the contract.
6. Data retention periods.
6. 1. Order and invoice data is stored for 10 years in accordance with the accounting requirements of Lithuanian law.
6. 2. Registered account data is stored until the user requests deletion of the account (by email to info@chickimap.com). Accounts that have not been logged into for 3 years are anonymised: the first name, last name, email and password are removed, while order and invoice data is retained for the period specified in clause 6.1 for accounting purposes.
6. 3. Guest purchase data is stored together with the order data for the period specified in clause 6.1.
6. 4. Emails and enquiries are stored for no longer than 2 years from the date of the last correspondence; newsletter subscription data – until consent is withdrawn.
7. Users' rights.
7. 1. Users have the right to: access their personal data; request its rectification or erasure (the "right to be forgotten", except for data the Company must retain by law); restrict processing; object to processing; data portability; withdraw consent at any time.
7. 2. Requests are submitted by email to info@chickimap.com. The Company responds no later than within 1 month of receiving the request; where necessary, this period may be extended by a further 2 months, with the user being informed.
7. 3. Users also have the right to lodge a complaint with the Lithuanian State Data Protection Inspectorate (vdai.lrv.lt).
8. Cookies and similar technologies.
8. 1. Essential records – required for the Website to function, used without separate consent: the login session cookie, the language selection cookie, technical purchase-flow records and the shopping cart record "chiki_cart" (stored in the browser's localStorage and not sent anywhere – it only contains the selected products).
8. 2. Statistics cookies (Google Analytics, cookie "_ga", stored for up to 2 years) and marketing cookies (Meta Pixel, cookie "_fbp", stored for up to 3 months) are used only after the user gives consent in the Website's cookie banner.
8. 3. Consent may be withdrawn at any time by clearing this Website's data in the browser (the choice will then be presented again) or by contacting the Company at info@chickimap.com.
8. 4. The pages of payment service providers (Paysera, PayPal) may use their own cookies – their use is governed by the privacy policies of the respective providers.
9. Data security.
9. 1. The Company applies appropriate technical and organisational measures to protect personal data against unlawful access, loss or disclosure (encrypted connection, encrypted passwords, restricted server access).
9. 2. For account security purposes (on the basis of legitimate interest), account login records are kept: the login time, IP address and the type of device and browser used. No more than the last 50 login records are stored (the oldest are removed automatically), and active session data is kept for up to 30 minutes from the last activity. This data is used solely to prevent unauthorised use of accounts and is not transferred to third parties.
10. Final provisions.
10. 1. The Company reserves the right to update this Policy; the current version is always published on the Website with the date of the last update.
10. 2. All privacy-related questions are accepted by email at info@chickimap.com.
