Payments and security
How money and data move when you buy from Kidslandy, and what protects them.
Who processes the payment
Every payment is processed by Stripe. Stripe is certified as a PCI Service Provider Level 1, the highest level of certification in the card industry.
Your card number is entered on Stripe's own payment page and is transmitted directly to Stripe. It never reaches our servers, and we could not retrieve it if we wanted to. What we receive back is a payment identifier, the amount, the currency and your email address.
What appears on your statement
The charge appears as KIDSLANDY.
If you see a charge you do not recognise, please write to support@kidslandy.com before opening a dispute with your bank. We can identify any charge within minutes and, if something is wrong, we refund it the same day. That is faster for you than a chargeback, which typically takes weeks.
Payment methods
Card payments are available everywhere we sell. Depending on your country, the checkout may also offer local methods such as Pix, Apple Pay, Google Pay or Link. Whatever is shown at checkout is available to you.
There is no subscription and no stored card. Each purchase is a single charge and nothing recurs.
How your access is protected
The site is served over HTTPS everywhere, including the program area.
Access to the program is granted by a link signed with HMAC-SHA256. The signature covers the whole link, so a link that has been altered by even one character is rejected and no content is returned. There are no passwords to leak, because there are no accounts.
The signing key is stored as a server-side environment variable and never reaches the browser.
What we store
Your email address, the plan you bought, and the payment identifier from Stripe. That is what is needed to deliver what you paid for and to issue a refund if you ask.
We do not store card data, we do not store anything about your children, and we do not sell or share data with advertisers.
Reporting a problem
Security reports go to support@kidslandy.com. Tell us what you found and how to reproduce it. We will answer, we will fix what is real, and we will not take action against anyone who reports in good faith without damaging or removing data.