Privacy Policy
Effective August 8, 2026
The short version: Build A Squishy has no accounts and never asks who you are. Your squishies are saved on your own device, not on our servers. We keep one lightweight, ads-free analytics tool so we can see which features people enjoy — and that's it.
No ads. No selling data. No chat. No location. Nothing to sign up for.
Who we are
Build A Squishy (buildasquishy.com) is a free 3D squishy creator you play in your browser. It is made and operated by Matt Uffalussy in the United States. Questions about this policy can be sent through the contact form linked at the bottom of this page.
What we never collect
- No accounts, names, email addresses, photos, or profiles — the one exception is the optional email address you may choose to type into our contact form if you would like a reply
- No chat, messaging, or any way to contact other players
- No precise location
- No advertising, ad tracking, or cross-site tracking of any kind
- We never sell or share data for marketing — there is nothing to sell
Your squishies stay on your device
Creations, settings, and progress are stored in your browser's own storage on your device. They are never uploaded to us — we couldn't look at your collection if we wanted to. Clearing your browser's site data deletes them.
Analytics
We use Google Analytics in a deliberately restricted configuration to understand, in aggregate, how the site is used — things like how many people visited and which shapes and materials are popular. Concretely:
- All advertising features, ads personalization, and Google Signals are disabled; nothing is linked to any ads product
- Analytics data is retained for the minimum period Google offers (2 months)
- Google Analytics does not store IP addresses; an IP is used momentarily to estimate a coarse region (like a state) and then discarded
- The only identifier involved is a random analytics cookie, used solely to operate and improve the site — never for advertising or profiling, and never combined with any other information
You can block analytics entirely with your browser's cookie settings or a content blocker, and the site works exactly the same.
Sending a squishy
"Send a Squishy" links carry only the recipe — which shape, color, finish, inside, and sparkles to use — encoded directly in the link itself. The link never contains a typed name or any personal information, is never sent to our servers, and opening one simply rebuilds the squishy on your own device. Names shown for a received squishy are generated from a built-in word list.
Writing to us
There is a contact form in the app — open the About panel and choose "send us a note." What you write is delivered straight to our own mailbox. It is not stored in a database, not published anywhere, and not shared with anyone. Adding an email address is optional, and we use it only to write back to you.
Please don't put a last name, address, school, or phone number in a note — we don't want that information, and we delete anything like it when we see it. To keep automated spam out, the form runs Cloudflare's Turnstile check, which confirms a real person is sending the note and does not track you across websites.
Children's privacy
Build A Squishy is made for young people, including players under 13, so we hold ourselves to the Children's Online Privacy Protection Act (COPPA). We do not ask for or knowingly collect personal information from anyone. The contact form described above is the only place anything can be typed in at all, and it never asks who you are. The single random identifier described in the Analytics section is collected only to support the site's internal operations — counting visits and seeing which features are used — which COPPA permits without parental consent. It is never used for behavioral advertising or to build profiles.
Parents and guardians: if you have any questions, or want us to review or delete any data connected to your child's visits, use the contact form linked below and we will help.
Hosting
The site is delivered by Cloudflare, whose servers — like virtually all web servers — process visitors' IP addresses transiently in routine server logs for security and delivery purposes.
Changes to this policy
If what we collect ever changes — for example, if a future version adds optional accounts — we will update this page first and change the effective date at the top.
Contact
Use the contact form for any question about privacy on Build A Squishy, including a parent or guardian's request to review or delete data connected to a child's visits. It reaches us directly.