Web privacy
Pip’s Story World is the browser experience from COCOTOFY LLC · Pixel Palms. This page describes the web game; the iOS app has its own privacy information.
Playing
No ads, chat, or account sign-up. Stickers, paint and sound settings stay in your browser’s local storage. We don’t ask for a child’s name, age, location, photo or voice recording.
Grown-up purchases
The optional $4.99 USD one-time unlock is handled by Stripe’s secure checkout. Stripe processes the grown-up’s payment and contact details. We do not receive or store card numbers. Our server stores a purchase reference, payment state and hashes of your private restore code and access tokens to provide the chapters you bought.
An essential, protected browser cookie remembers your verified access for 30 days; you can restore it using your purchase code. Checkout uses an essential temporary cookie for up to 24 hours to connect your payment to this browser. No advertising cookies or third-party analytics are added by the game.
Hosting and support
Cloudflare hosts the site and processes normal network information, including IP addresses, to deliver and protect requests. The purchase endpoints use a short-lived, secret-hashed rate-limit identifier for abuse protection; the game server does not store the raw IP address. Purchase records remain available for restoring access and handling refunds. Browser progress can be cleared in the parent corner or your browser settings.
A grown-up can contact cocotofyllc@gmail.com about privacy or a purchase. Please do not send a child’s personal details, card details or your private restore code.
Updated October 2, 2026