License terms
Product and purchase
The Ideas Vault, also named Cofre das Ideias in Portuguese, is an educational browser game with adapted stories, simulated coins, and reasoning activities. The free demo contains one complete adventure. The product is supplied under the NovaNinho Studio brand, operated by Fabiana Mascarenhas Souza Lima Victor; tax identification, address, and support details appear in the Contact section below. Only an adult may purchase. Paddle acts as merchant of record and authorized reseller for the transaction; the supplier grants the game license after server-confirmed payment. Paddle shows applicable transaction taxes, currency, total, and available payment methods before payment and issues the transaction receipt.
Family license
A personal, non-exclusive, non-transferable license for non-commercial home use by one household on a reasonable number of devices controlled by that household, with up to four local participants on one device. The purchased version and corrective updates have no fixed expiry. The license does not cover a school, course, event, multiple households, resale, sublicensing, public performance, public code sharing, or redistribution.
School license
A non-exclusive, non-transferable license for educator-supervised use at one identifiable school site and up to five classes for 12 months from server-confirmed payment. It may run on devices controlled by the site or on a TV/projector for local group use. It does not cover another site, an entire network, an outside commercial course, a public event, resale, sublicensing, or distribution. There is no automatic renewal; a new term requires a new authorized purchase or written agreement.
Adult account and access
The buyer must protect the license code and keep the purchase email current. License validity and this browser’s session are different: the access cookie lasts up to 180 days and, if it expires or is cleared, the adult can activate a license again while that license remains valid. Children do not enter into this contract, create accounts, or contact support without adult mediation. A code may be limited or suspended if published, shared outside its scope, obtained by fraud, refunded, or subject to an approved chargeback, while legitimate buyers retain access to support and review.
Educational scope
The game is designed to support adult-mediated conversation and practice involving observation, evidence comparison, simple math, uncertainty, and risk. It does not promise a learning outcome, financial literacy, improved school performance, or behavioral change. Stories, values, ownership percentages, and coin outcomes are editorial adaptations. They are not investment advice, financial analysis, professional training, or a promise of returns.
Intellectual property
The supplier or its licensors retain rights in the code, structure, text, characters, art, interface, narration, audio, marks, and materials. The license grants use within the purchased scope, not ownership. Copying, extraction, modification, translation, redistribution, resale, sublicensing, derivative works, or circumvention of access controls is prohibited except where mandatory law expressly allows. Third-party facts and marks referenced in editorial sources remain their owners’ property and do not imply sponsorship.
Availability and applicable law
An internet connection is required for license validation and delivery of the server-authorized structured premium catalog. Temporary interruptions may occur for maintenance, security, or external services. Nothing excludes mandatory warranties or remedies. These terms are governed by Brazilian law, but mandatory protections in the buyer’s country override any less favorable term.
Child-first privacy notice
No child account or identity request
- No child name, email, birth date, phone, voice, photo, precise location, contacts, camera, microphone, or advertising identifier is requested; the game does not record voice or images.
- No ads, individual profile, cross-site tracking, chat, uploads, online ranking, loot boxes, purchasable coins, or daily streaks.
- A local checkpoint keeps mode, participant count, balances, aggregate stars, technical completion and catalog markers, save and expiry dates, and a safe journey position for up to 24 hours, without a name, email, key, or explicit answer history. The catalog marker is not a license credential and grants no access. Because balances and progress are needed for recovery, they may allow a prior choice to be inferred on that device. Identifier-free usage events, including broad choice categories, are received and immediately added to daily totals.
- Purchase, activation, support, and refund flows are controlled by an adult.
Aggregate metrics and technical operations
When a feature is used, the browser sends an identifier-free event with limited categories such as language, demo or license, solo or group mode, story, broad choice or result band, audio use, and adult purchase-funnel step. The server receives it and immediately increments a daily counter; no event table or individual profile is created. The metrics table receives no IP address, cookie, user, session or device identifier, exact time, email, free text, or individual choice sequence. Hosting may still temporarily process IP address, time, browser, route, and security signals to deliver the service, prevent abuse, and diagnose faults. None of these signals or counters is used for advertising, personalized recommendations, child ranking, or cross-site tracking. The current cleanup attempts to delete counters older than 13 months when a new metric is written. A maintenance routine also performs that deletion independently and records every run with its start, end, and result, which makes the period auditable without new visits. It is triggered automatically once a day by the hosting scheduler configured alongside the published version, and can also be started manually through an address protected by its own secret. The schedule takes effect when the version containing it is published.
Audio and local settings
Stories and short instructions first use prerecorded narration files. If one cannot play, the game may try speech synthesis offered by the browser or operating system; that voice may be local or depend on a service configured on the device. The game does not turn on the microphone or record the child, and visible text remains available. An optional gamepad-button mapping stays in local browser storage until replaced or cleared.
Local journey checkpoint
To keep a page failure or refresh from erasing the whole journey, a versioned checkpoint remains only in this browser's local storage for up to 24 hours. If the browser blocks that storage, the emergency copy lasts only while the page remains open. It contains language, solo or group mode, number of characters, balances, aggregate stars, completed levels, editorial identifiers for completed cases and scenarios, the next safe case or scenario, save and expiry dates, technical completion flags, and a demo-or-licensed catalog marker. Those identifiers describe fixed game stages, not the child; the catalog marker is not a key or authorization. It contains no custom name, age, email, license key, license cookie, free text, or explicit answer field or history. Because balances and completion markers are needed to resume without duplicating coins, someone with access to the browser may infer a prior choice in some deterministic outcomes. The checkpoint cannot unlock premium content unless the current license is verified by the server. Starting a new game replaces the prior checkpoint at its first safe point, and browser settings may also remove it. An expired checkpoint is rejected and removal is attempted when next read, when the browser permits.
Adult purchase data, purposes, and legal basis
We process the adult email, plan, base price, transaction identifiers and status, license status and term, relevant dates, and support messages to perform the contract, prevent fraud, provide refunds and support, comply with law, and defend rights. Applicable legal bases and the child-best-interest assessment must remain documented. If consent becomes necessary for a future feature, it will be specific and revocable. We never receive or store the full card number, card security code, or payment-account password.
Unexpected child-identifying data
The service avoids intentional collection of personal information from children under 13 and does not depend on child consent. If child-identifying information is accidentally sent to support, we will restrict its use, notify the responsible adult when appropriate, and delete it unless a legal duty requires retention. Do not include a child's name, image, voice, document, or school information in a support request.
Providers and international transfers
Paddle will process transaction payment, tax, fraud, receipts, and billing support as merchant of record when sales open. Cloudflare hosts the site, license database, aggregate metrics, and security controls. Resend delivers transactional email. These providers may process data internationally. Sales remain blocked while roles, countries, subprocessors, contracts, and applicable transfer mechanisms are recorded and reviewed. Each provider is also responsible for activities it controls directly.
Cookie, security, retention, and rights
A strictly necessary HttpOnly, secure-in-production, SameSite=Lax cookie keeps the adult license active for up to 180 days; a still-valid license can be activated again. Metrics use no cookie or local storage. Sessions are signed and license identifiers are validated using cryptographic hashes. The premium text catalog and the prerecorded narration of the premium adventures are server-authorized and delivered only to sessions with an active license; the demo narration and the shared short instructions remain public. The local checkpoint expires after 24 hours; gamepad mapping remains until replaced or cleared. Purchase, refund, and license records are kept for contract, fraud, tax, and legal-claims periods. For support records, the planned policy is review after closure with a deletion or anonymization target of 24 months, unless a dispute, legal duty, or valid preservation request applies; the procedure and its operational evidence remain pre-sales requirements. Adults may request access, correction, deletion where applicable, sharing information, objection, or other rights under applicable law through the contact below.
LGPD, Digital ECA, and COPPA-aware design
The Brazilian operation applies the child-best-interest duties of the LGPD, the Child and Adolescent Statute, Digital ECA Law 15,211/2025, and Decree 12,880/2026. The service is also designed to limit analytics to internal operations and avoid intentional collection of personal information from children under 13. New features require a fresh necessity, risk, age-rating, and child-safety review before release.
Consent and retention details
If a future feature relies on consent to process a child’s personal information, specific, informed, verifiable consent will be requested from the responsible adult — never from the child — with evidence of authorization and a way to withdraw it. The response to accidentally received child-identifying data is stated in the privacy section above.
The current metrics cleanup attempts to delete aggregate counters older than 13 months when a new metric is written. A maintenance routine performs the same deletion independently, logs each run, and is triggered daily by the hosting scheduler shipped with the published version. That routine is restricted to adult operations, its manual entry point requires its own secret, and it neither receives nor produces child data. Purchase, refund, and license records are kept only for applicable contract, tax, fraud-prevention, and legal-claims periods. Closed support records have a deletion or anonymization target of 24 months unless a dispute, legal duty, or valid preservation request applies. Cookies and technical logs follow periods proportionate to the session and security purpose; providers apply their own documented retention periods.
If a key is rejected, the adult email remains filled only in that tab session for a retry. The key is never stored there. The temporary email is cleared after successful activation or when the tab session ends. This storage is separate from aggregate metrics and is not used for advertising or profiling.
Worldwide refund policy
Full refund within 14 days
Any buyer may cancel and request a full refund within 14 calendar days of purchase, without giving a reason or paying a refund fee, even after immediate premium access begins. This commercial policy includes the Brazilian statutory 7-day withdrawal period. Any longer or more favorable mandatory local right remains available.
Contact support from the purchase email and include the plan and transaction identifier if available; never send full card details. We acknowledge the request, route it through Paddle to the original payment method, and deactivate the license after refund or approved chargeback. Paddle, the bank, or card issuer may need operational time to post the credit. Defects, duplicate charges, and other non-conformity remedies remain available after 14 days where required by law.
Age information
Educational recommendation is not an official rating
The educational recommendation is ages 6+ because reading and reasoning are required. The pre-release demo uses a temporary Brazilian self-rating of Livre (general audiences), with no content descriptors, after a full content check under Article 47 of Ministry Ordinance 1,048/2025. The CLASSIND prior-analysis request for direct commercial web distribution was submitted on September 4, 2026 and remains in screening; its final decision and review of later product changes are required before sales open. IARC is only available through a participating digital storefront. No final Brazilian or foreign rating is claimed while that process remains pending.
Support and seller identification
Contact
- Legal name
- Fabiana Mascarenhas Souza Lima Victor
- Brazilian tax ID
- CPF 546.309.835-20
- Address for location and contact
- Rua Dona Avelina, 105, ap. 11, Vila Mariana, São Paulo/SP, CEP 04111-010, Brasil
Target response time: two business days. Never send passwords, child-identifying material, or full card details.
These details are public to meet Brazilian e-commerce supplier-identification rules. This page requests no search-engine indexing but remains public and available to consumers.