Privacy Policy
Last updated September 9, 2026
Who we are
Tuxedo (“Tuxedo”, “we”, “us”) is a free, community-run penguin world made for kids and families. This policy explains what information we collect, why, and the choices you and your child have. Because Tuxedo is directed to children, we follow the U.S. Children’s Online Privacy Protection Act (COPPA).
Information we collect
- Penguin name: a made-up nickname your child chooses. We ask kids not to use their real name.
- Password: stored only as a one-way salted hash; we never see or store the plain text.
- A parent or guardian email: used for the account, parental consent, and account recovery.
- Gameplay data: things like coins, clothing/items, igloo, and which rooms a penguin visits.
- Chat messages: processed and filtered for safety, and may be reviewed by moderators.
- Technical data: IP address and basic device/connection info, used to run the service, prevent abuse, and keep it secure (a “persistent identifier”).
How we use information
We use this information only to run and protect the game: creating and securing accounts, saving progress, moderating chat for child safety, preventing cheating and abuse, and contacting a parent about their child’s account. We do not use it to build advertising profiles.
Emails we send
When a penguin is created we send one email to the parent or guardian address: an activation link that confirms a grown-up agrees to the account. Until it is clicked the penguin may play for a short trial. Beyond that, we only email a parent about their own child's account, for example a safety concern or a change to the parent controls. We never send marketing, newsletters, or anything from anyone else. Our messages come from no-reply@tuxedocp.com; replies to that address are not read, so please write to the addresses below instead. If an activation email has not arrived, the sign-in page can send it again.
We do not sell or share for ads
We do not sell children’s personal information, and we do not share it with third parties for advertising. We only use service providers needed to operate the game (hosting, and an email delivery service that sends our messages to the parent address), and only to the extent required to run Tuxedo. We will obtain separate parental consent before disclosing a child’s personal information to any third party for any other purpose.
Parental consent & your rights
Before a child’s account is active, we seek verifiable consent from a parent or guardian. At any time, a parent may: review the personal information we hold about their child, ask us to delete it, and refuse to allow any further collection or use. To do any of these, use the Parents page or email us at support@tuxedocp.com.
Chat & safety
Chat is filtered automatically and may be set to a safe, menu-only mode by a parent. We discourage and attempt to block sharing of personal information (real names, addresses, phone numbers, emails) in chat.
Data retention
We keep personal information only as long as reasonably necessary to run the account and the purposes above. When an account is deleted, or on a verified parental request, we remove the associated personal information within a reasonable period, except where we must keep limited records for legal or security reasons.
Security
Passwords are hashed, and we take reasonable measures to protect the data we hold. No online service is perfectly secure, but we work to keep Tuxedo safe.
Changes
We may update this policy. If we make material changes affecting children’s data, we will notify parents.
Contact
Questions about your child's account or this policy: support@tuxedocp.com. To report behaviour that worries you, or anything that puts a child at risk: abuse@tuxedocp.com. Safety reports are read first.