The Cocoon Collective™

1. Who We Are

The Cocoon Collective™ is a trade name of MJM Productions, which does business as The Cocoon Collective™. It is not a separate legal entity. The Cocoon Collective™ name, logo and cocoon-collective.org are trademarks owned by MJM Productions. We operate the website at cocoon-collective.org and the Cocoon Collective gaming platform (the “Platform”). When this policy says “we,” “us,” or “our,” it means MJM Productions.

We are building the Cocoon Collective from the ground up to be a safe, positive online environment for children. Privacy is not an add-on — it is architecture. Every data decision begins with the question: is this right for a six-year-old?

2. Who This Policy Covers

This Privacy Policy covers two types of people who interact with us:

• Parents and guardians — adults who create accounts, register their children, and manage family access to the Platform.
• Child players — children ages 6 to 12 whose accounts are created and managed by a parent or guardian. Children do not register themselves and do not interact with our website directly.

The Cocoon Collective website (cocoon-collective.org) is intended for parents. Children access the Platform through the Minecraft game client, not through this website.

3. Information We Collect

From Parents

When a parent creates an account or registers a child, we may collect:

• Parent’s name and email address
• A parent-created account password (stored securely and never in plain text)
• Billing information if a paid subscription is selected (processed by our payment provider; we do not store full card numbers)
• The parent-child cipher — a private shared code known only to your family. We are building this to verify the parent-child relationship within the Platform. It is not yet in use, and we will notify you before it is.

From Child Players (via the Platform)

For child accounts, we collect only what is necessary to operate the Platform safely:

• A game username (not required to be a real name)
• In-game activity logs — actions taken within the Platform. These support Platform operation today, and will support safety monitoring and moderation as those systems are built.
• In-game communications — messages sent within the Platform. These remain inside the Platform, and we are building moderation systems that will review them for safety.
• Game progress data — economy balances, island status, achievements within the Platform

We do not collect a child’s real name, home address, phone number, photograph, or any information that is not necessary for Platform operation. Game usernames are not required to reflect a child’s real identity.

Automatically Collected Information

Like most websites, cocoon-collective.org may collect standard technical information when you visit, including IP addresses, browser type, and pages visited. This information is used solely to operate and improve the website and is not used to build profiles of individuals.

4. How We Use Information

We use the information we collect only to:

• Create and manage parent and child accounts
• Operate and maintain the Platform and deliver the gaming experience
• Monitor in-game activity for safety and moderation, once those systems are in place
• Process subscription payments, when subscriptions become available
• Respond to parent inquiries and support requests
• Improve the Platform based on aggregated, non-identifying usage patterns
• Comply with our legal obligations

We do not use children’s information for advertising, marketing, or any commercial purpose beyond operating the Platform.

5. Information We Do Not Sell or Share

• We do not sell personal information. We do not sell children’s personal information. Ever.

• We do not share personal information with third parties for their marketing purposes. 

• We do not permit advertisers to target children based on their data.

We may share information only in the following limited circumstances:

• Service providers: Third-party vendors who help us operate the Platform (e.g., payment processors, hosting providers) under strict data processing agreements that prohibit them from using your data for any other purpose.
• Legal requirements: If required by law, court order, or to protect the safety of a child or other person.
• Business transfers: If the Platform is acquired or merged, or if MJM Productions transfers the Platform to a successor company it forms to operate it, we will notify affected families and the same privacy protections will apply.

6. Children’s Privacy and COPPA Compliance

The Children’s Online Privacy Protection Act (COPPA) applies to the collection of personal information from children under 13 years old in the United States. We take our COPPA obligations seriously.

• Current state: the Platform is in closed testing and is not open to the public. No child accounts have been created through a public registration process. The protections described below are being built and will be in place before any child account is created outside our test group.
• Parental consent required: We do not knowingly collect personal information from children under 13 without verified parental consent. All child accounts must be created by a parent or guardian.
• No child self-registration: Children cannot create their own accounts. The registration process is designed exclusively for adults.
• Parent rights: As a parent, you have the right to review the personal information we have collected about your child, request that we delete it, and refuse to allow any further collection or use of your child’s information.
• Minimum data collection: We collect only what is necessary to operate a safe gaming environment. We do not collect information we do not need.

To exercise any of these rights, contact us at privacy@cocoon-collective.org. We will respond within 30 days.

7. Data Security

We take reasonable technical and organizational measures to protect personal information from unauthorized access, disclosure, or loss. These include:

• Encryption of passwords and sensitive account data.
• Separation of player identity from personal identity — game servers hold only an opaque identifier and never a real name, email address or payment detail. We are extending this separation across every layer as the account system is built.
• Restricting internal access to personal data to personnel who require it
• The parent-child cipher system, which we are building so that no child can be contacted by anyone outside their approved circle. This system is not yet in operation.

No security system is perfect. If we become aware of a data breach that may affect your family’s information, we will notify you promptly.

8. Data Retention

We retain personal information for as long as an account is active, plus a reasonable period afterward to resolve disputes or comply with legal obligations. When a child account is closed, we delete the associated personal information unless retention is required by law.

Game progress data (island builds, economy balances) may be retained in anonymized form to support the continuity of the Platform community — for example, so that later cohorts of players can see what earlier cohorts built. This data is not linked to any personally identifiable information after account closure.

9. In-Game Communications

All in-game chat and communication on the Cocoon Collective Platform takes place within our closed environment. The Platform is a closed environment — children cannot be contacted from outside it. We are building the approved-circle system that will further restrict contact within the Platform, and it is not yet in operation.

We are building moderation systems that will review communications for safety purposes, including review of message logs by trained personnel.

We intend to give parents visibility into who their child has been communicating with — names and roles within the Platform — as part of our safety architecture. This is not yet available.

10. Cookies and Tracking

Our website (www.cocoon-collective.org) may use essential cookies to operate the site correctly (such as keeping a parent logged in). We do not use advertising cookies, tracking pixels, or third-party analytics that build profiles of individual visitors.

We do not use tracking tools within the gaming Platform beyond what is necessary for Platform operation and safety monitoring.

11. Your Rights

As a parent or guardian, you have the right to:

• Access the personal information we hold about you and your child
• Correct inaccurate information
• Request deletion of your or your child’s personal information
• Withdraw consent for collection of your child’s information (which will require closing the child’s account)
• Receive a copy of your data in a portable format

Depending on your location, additional rights may apply under laws such as the California Consumer Privacy Act (CCPA) or similar state or national privacy laws. To exercise any right, contact us using the information below.

12. Changes to This Policy

We may update this Privacy Policy as the Platform grows and as legal requirements evolve. When we make material changes, we will notify parents by email and update the “Last updated” date at the top of this page. Continued use of the Platform after notice constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy, want to exercise your rights, or believe your child’s privacy may have been compromised, please contact us: privacy@cocoon-collective.org.

MJM Productions, d/b/a The Cocoon Collective™ — Privacy

Website: www.cocoon-collective.org

We will respond to all privacy inquiries within 30 days.