Privacy Policy & Children's Privacy Notice

Effective date: January 1, 2026
Last updated: January 1, 2026

This Privacy Policy and Children's Privacy Notice ("Privacy Policy") explains how Kartoon Studios, Inc., Ameba Entertainment LLC, Frederator Studios, LLC, Frederator Networks, Inc., Mainframe Studios, and their related subsidiaries and affiliates (collectively, "Kartoon Studios ,” "we ,” "our ,” or "us") collect, use, disclose, and protect personal information when you use any of our websites, apps, channels, games, and online services that link to this Privacy Policy (collectively, the "Services").

This Privacy Policy applies, for example, to:

• Websites: including, without limitation, kartoonchannel.com, amebatv.com, kartoonstudios.com, edisonsecretlab.com, rainbowrangers.com, mainframe.ca, frederator.com, and other brand sites that link here.
• Apps & channels: including Kartoon Channel! and Ameba apps and channels on app stores, smart TVs, settop boxes, AVOD/FAST platforms (such as Pluto TV, Roku, Amazon, Tubi, Xumo, and others) that link to or otherwise reference this Privacy Policy.

Not every feature described in this Privacy Policy is available on every Service, and some Services may have additional notices or terms. Where a Service posts a separate or supplemental notice, that notice controls to the extent it conflicts with this Privacy Policy.

By using any Service, you acknowledge that you have read this Privacy Policy and agree to our practices described here. If you do not agree, you should not use the Services.

1. Who is responsible for your information?

The entity responsible for your personal information (the "controller" or equivalent under applicable law) will generally be Kartoon Studios, Inc., but we may delegate duties to a local affiliate in certain jurisdictions outside the United States (for example, Canada or the UK).

You can contact us using the details in Section 11 (How to contact us).

If you access our Services from the European Economic Area (EEA), the United Kingdom, Canada, or Australia, local laws may require us to provide additional information and rights; see Section 9 (Your rights and choices) and the regional addenda there.

2. What information we collect

We collect information in three main ways:

• You provide it to us.
• We collect it automatically when you use the Services.
• We receive it from third parties.

2.1 Information you provide to us

Depending on the Service, we may collect:

• Account and profile information
  Name, display name, username or handle; Email address, password, and security information; Parent or guardian contact details (for child accounts or kids' experiences where a parent is involved); Child profile information that a parent chooses to provide (for example, first name or nickname, age range, avatar, and favorite shows).
• Contact and subscription information
  Email address, country/region, communication preferences; Information you provide when you sign up for newsletters, promotions, contests, or investor alerts.
• Payment and transaction information
  Billing address, partial payment card details (such as last 4 digits and expiry date), subscription type, purchase history, and related records; We typically rely on thirdparty payment processors, who may process your full payment card information on our behalf and under their own privacy policies.
• Usergenerated content & communications
  Content you submit or upload (for example, comments, reviews, messages, drawings, contest entries, or other contributions); Information you provide when you contact customer support or otherwise communicate with us.
• Job and business information
  If you apply for a job, we may collect CVs/resumes, work history, portfolios, references, and similar details; If you are a business partner, content provider, or advertiser, we may collect contact details and other information relevant to our relationship.

We may also collect other information that you choose to provide in connection with the Services.

2.2 Information we collect automatically

When you use the Services, we and our service providers automatically collect certain information, including through cookies, SDKs, pixels, APIs, and similar technologies. This may include:

• Device and network identifiers
  IP address; Device identifiers (such as advertising IDs, app identifiers, operating system IDs); Browser type and version, operating system, device type and settings; Network information (such as internet service provider, mobile network, language, time zone).
• Usage and interaction data
  Pages or screens you view, links you click, features you use, time spent, and navigation paths; Watch history, viewing behavior (for example, shows or episodes viewed, search queries, pause/rewind activity, and viewing times); Crash reports, performance data, and other diagnostic information.
• Location information
  Approximate location inferred from your IP address or device settings; Where you grant permission, more precise device location.

We may combine automatically collected data with other information we have about you and treat the combined information as personal information where it identifies you or your household.

2.3 Information we receive from third parties

We may receive information about you from:

• Platform providers and app stores (for example, Apple, Google, Roku, Amazon, Pluto TV, Xumo, and other streaming or app platforms) relating to your use of our apps or channels on their services (such as views, subscriptions, general demographics, and device information), subject to their own privacy policies.
• Payment processors, who may send us transaction confirmations, limited payment card details, and billing data.
• Marketing, analytics, and advertising partners, who may provide interest or preference information, aggregated or inferred audience segments, or campaign performance.
• Social networks and signin providers (if you sign in or interact with our content through those services), subject to the privacy settings you select there.
• Other third parties, such as content licensors, antifraud services, or data providers that help us maintain accurate records.

We may combine this information with other data we collect and will handle it in accordance with this Privacy Policy.

2.4 Aggregated and deidentified information

We may create aggregated, deidentified, or anonymized information from personal information by removing or obscuring details that make it directly identifiable.

Where such information is not reasonably reidentifiable, it is no longer treated as personal information and we may use it for any lawful purpose.

Where local law still considers the information personal, we will treat it accordingly.

3. How we use information

We use the information we collect for the following purposes, to the extent permitted by applicable law:

• To provide and operate the Services
  Operate our websites, apps, channels, and other Services; Create and manage accounts and subscriptions; Deliver content, personalize your experience, and remember your preferences; Enable features such as watchlists, parental controls, and profiles.
• To communicate with you
  Respond to your requests, support inquiries, and feedback; Send you transactional messages (for example, account notifications, subscription updates, security alerts); Send you newsletters, marketing messages, and information about products, services, contests, and promotions, where permitted by law and your preferences.
• To personalize content and recommendations
  Understand what content you enjoy and how you use the Services; Recommend shows, games, and content that may be interesting to you or your family; Customize user interfaces and experiences.
• To provide advertising and measure its effectiveness
  Show you ads in our adsupported Services and measure their performance; For adults and generalaudience experiences, use information (such as viewing history, device information, and approximate location) to help select and measure ads, where allowed by law and your settings; For childdirected experiences, we limit data use and advertising practices as described in Section 5 (Children's privacy).
• To analyze, improve, and develop the Services
  Monitor performance and usage, fix bugs, and improve stability; Develop new features, content, and offerings; Conduct research and analytics about our audiences and Services.
• To maintain safety, security, and integrity
  Detect, prevent, and respond to fraud, abuse, cheating, unauthorized use, and security incidents; Protect users, children, parents, our Services, and our rights.
• To comply with legal obligations and enforce our rights
  Comply with applicable laws, regulations, and legal processes; Respond to lawful requests from authorities; Enforce our terms, policies, and agreements or defend our legal interests.
• With your consent or at your direction
  For any other purpose that you consent to or that is reasonably compatible with the original purpose of collection.

3.1 Legal bases for processing (EEA/UK only)

Where EU/EEA or UK dataprotection laws apply, we process personal data on the following legal bases:

• Performance of a contract – for example, to provide Services you request, manage subscriptions, or respond to your support requests.
• Consent – for example, for certain types of marketing, nonessential cookies or similar technologies, or processing children's personal data where required.
• Legitimate interests – for example, to secure and improve the Services, personalize content for adults, prevent fraud and abuse, and support business operations, provided these interests are not overridden by your rights and interests.
• Compliance with legal obligations – for example, recordkeeping, children's privacy requirements, tax and accounting.
• Protection of vital interests – where necessary to protect someone's life or safety.

You can contact us for more detail on our legal bases and how they apply to particular processing activities.

4. Cookies, SDKs, and similar technologies

We and our partners use cookies, web beacons, SDKs, device identifiers, local storage, and similar technologies ("Cookies") to:

• Recognize your device and keep you logged in
• Remember your preferences
• Understand how you use the Services
• Provide, personalize, and measure ads (subject to applicable law)
• Improve performance and security

Where required by law (for example, in parts of the EEA and UK), we will obtain your consent before using nonessential Cookies, and you can withdraw that consent at any time through cookie settings where available or by adjusting your browser or device settings.

If you disable certain Cookies, some features of the Services may not work properly.

5. Children's privacy

We create content primarily for children and families, but account creation, purchases, and other administrative features are designed for parents, guardians, and other adults.

We take children's privacy seriously and comply with applicable children's privacy laws, including those in the United States (such as COPPA), the EEA and UK, Canada, and Australia, as they evolve.

5.1 Who is considered a “child”?

Because different countries define “children” differently for online services, we use the term "Child" or "Children" in this Privacy Policy to refer generally to:

• Children under 13 in the United States;
• Children under the minimum age at which they can legally provide their own consent to data processing for online services in their country (often between 13 and 16 in the EEA, UK, and other regions); and
• Anyone else under the age at which local law requires parental involvement for online privacy matters.

Where we ask for age or age range, we use that information to apply the appropriate protections.

5.2 Our general approach to children

• Accounts and purchases: We require that only parents, guardians, or other adults create accounts, set up subscriptions, and make purchases on the Services.
• Childdirected experiences: Many of our Services and channels are clearly aimed at children and families. For those experiences, we design our data practices to be more protective by default, and we do not require children to provide more personal information than is reasonably necessary to use the Service.
• Mixedaudience environments: Some Services (for example, corporate, investor, or professional sites) are directed primarily to adults but may still be visited by children. For such Services, we do not knowingly collect personal information from children without implementing appropriate parental consent mechanisms where required.

5.3 Information we collect from or about children

Depending on the Service and your child's use, we may collect:

• Limited profile information (for example, a child's first name or nickname, avatar, age range, and profile preferences) from a parent or guardian;
• Usage and viewing information relating to content viewed on a child profile or in a childdirected experience;
• Device and network identifiers and other technical data described in Section 2.2, which may be considered “personal information” or “personal data” when associated with a child.

We aim to minimize the personal information we directly collect from children.

Where a child experience permits entry of freeform text, we use reasonable measures (technical and/or manual) to limit collection of personal information in those fields.

5.4 Parental consent and control

Where required by law, we will seek verifiable parental consent before collecting, using, or disclosing a child's personal information beyond what is permitted without consent (for example, for strictly internal operations or limited security and performance purposes).

We may obtain parental consent through methods such as:

• Asking a parent to sign up and verify their email address
• Requiring a payment card or other online payment method in the parent's name
• Other methods allowed under applicable law

Parents and guardians can:

• Review the personal information we have collected about their child;
• Request deletion of their child's personal information; and
• Withdraw consent for further collection or use of their child's personal information.

To exercise these rights, see Section 9 (Your rights and choices) or contact us using Section 11 (How to contact us) and clearly identify that your request concerns a child's account or information.

If we learn that we have collected personal information from a child in a way that is inconsistent with applicable law or without required parental permission, we will take reasonable steps to delete it.

5.5 Advertising and sharing restrictions for children

For users we know are children or for Services that are directed primarily to children, we:

• Do not show behaviorally targeted advertising based on profiles built over time from a child's activities across sites or apps;
• Do not “sell” or “share” children's personal information to third parties for their own targeted advertising or other independent marketing purposes;
• Limit the use of persistent identifiers and other data about children to what is necessary to provide and secure the Services, measure performance, comply with law, and support internal operations (for example, limiting frequency capping, contextual advertising, analytics, and service improvement).

We may still show contextual advertising (for example, ads based on the content of the show being watched), sponsorships, and house ads, to the extent permitted by law and applicable platform rules.

5.6 Guidance for parents and caregivers

We encourage parents and guardians to:

• Set up and manage accounts and profiles for their children;
• Use available parental controls on our Services and on devices, platforms, and app stores; and
• Talk with their children about safe online behavior and the importance of not sharing personal information in chat, comments, or other interactive features.

6. How we share information

We may share personal information as follows, to the extent permitted by applicable law and consistent with children's protections described above:

• Within the Kartoon Studios group
  With our parent company and affiliates (including Kartoon Channel!, Ameba, Mainframe Studios, Frederator, and other brand divisions) for the purposes described in this Privacy Policy, such as operating the Services, analytics, and content and product development.
• With service providers
  With thirdparty companies and individuals that provide services to us or on our behalf, such as hosting, analytics, customer support, payment processing, email delivery, security, and marketing support. These service providers are contractually required to use the information only to perform services for us and to protect it appropriately.
• With partners and content providers
  With distribution partners, appstore platforms, and coproduction or licensing partners in connection with the Services, content, and promotions, where permitted by law and consistent with your choices. For child users, sharing is limited as described in Section 5.5.
• With other users or the public
  When you post content (for example, comments, reviews, usergenerated content, or contest entries) in areas of the Services that are visible to others, the information you choose to include may be seen and used by others. Please use caution when sharing information and avoid posting personal details in public areas.
• For business transfers
  In connection with (or during negotiations for) a merger, acquisition, reorganization, sale of assets, financing, or similar transaction, your information may be shared with the relevant parties, subject to appropriate confidentiality obligations.
• For legal reasons
  To comply with legal obligations, respond to lawful requests, protect our rights and property, protect the safety of users (including children), or investigate and prevent fraud or other illegal activity.
• With your consent or at your direction
  With third parties when you direct us to do so or when you have been given clear notice and an opportunity to consent to such sharing.

We do not disclose children's personal information to unrelated third parties for their own independent marketing purposes.

7. International transfers

Kartoon Studios is headquartered in the United States and has operations in North America and partnerships around the world.

As a result, your personal information may be transferred to, stored in, or accessed from countries that may not provide the same level of data protection as your home country.

Where required by law, we use appropriate safeguards for these transfers, such as:

• Standard contractual clauses approved by the European Commission for transfers from the EEA;
• The UK International Data Transfer Addendum for transfers from the UK; and
• Other contractual or organizational safeguards as required by local law.

By using the Services, you understand that your personal information may be transferred to and processed in countries outside your country of residence, including the United States, subject to these safeguards and this Privacy Policy.

8. Data retention and security

8.1 How long we keep information

We retain personal information for as long as reasonably necessary to:

• Provide the Services and operate our business;
• Fulfill the purposes described in this Privacy Policy;
• Comply with legal, tax, accounting, and reporting obligations;
• Resolve disputes and enforce our agreements.

Retention periods will vary depending on the type of information and the context of the processing.

When personal information is no longer needed, we will delete it or take steps to anonymize or deidentify it, unless we are required by law to keep it longer.

8.2 How we protect information

We use reasonable administrative, technical, and physical safeguards designed to protect personal information from loss, misuse, and unauthorized access, disclosure, alteration, or destruction.

However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials and for any activity under your account.

9. Your rights and choices

Your rights and choices depend on your location and the laws that apply to you.

In all cases, you can contact us using Section 11 to exercise your rights.

9.1 Global choices

Regardless of where you live, you generally have the ability to:

• Access and update your information
  Log into your account (where applicable) to view and update certain details. Contact us if you cannot access certain information directly.
• Manage marketing communications
  Use the “unsubscribe” or similar link in our marketing emails to opt out of those messages. Adjust notification settings in apps or device settings.
• Manage cookies and similar technologies
  Use browser or device settings to block or delete cookies. Where our Services provide cookie or privacy controls, use those to manage your preferences.
• Children's rights through parents/guardians
  Parents and guardians may review, delete, or control further collection or use of personal information associated with their child's account or childdirected experience (see Section 5.4).

We may ask you to verify your identity before we respond to your request.

9.2 Additional rights for EEA and UK residents

If you are in the EEA or UK, you may have additional rights under dataprotection laws, including:

• Right of access – to obtain confirmation of whether we process your personal data and a copy of that data.
• Right to rectification – to correct inaccurate or incomplete personal data.
• Right to erasure – to request that we delete your personal data in certain circumstances.
• Right to restriction – to request that we limit processing in certain circumstances.
• Right to data portability – to receive personal data you provided to us in a structured, commonly used, machinereadable format and have it transmitted to another controller where technically feasible.
• Right to object – to object to certain processing, including where we rely on legitimate interests (for example, for direct marketing).
• Right to withdraw consent – where we rely on consent, without affecting the lawfulness of processing before withdrawal.

You also have the right to lodge a complaint with your local supervisory authority (for example, the ICO in the UK or your local dataprotection authority in the EEA).

9.3 Additional rights for Canadian residents

If you are in Canada, federal and provincial privacy laws may provide additional rights, including rights to:

• Request access to and correction of your personal information;
• Withdraw your consent to certain processing, subject to legal or contractual restrictions;
• Lodge a complaint with the Office of the Privacy Commissioner of Canada or your provincial privacy regulator.

We aim to handle children's data consistently with evolving guidance from Canadian regulators, including emerging children's privacy codes and bestinterest standards.

9.4 Additional rights for Australian residents

If you are in Australia, you may have additional rights under the Privacy Act and the Australian Privacy Principles, including rights to:

• Request access to and correction of your personal information;
• Complain to us and, if unsatisfied, to the Office of the Australian Information Commissioner (OAIC).

We are monitoring the development of the Children's Online Privacy Code and aim to align our practices with its childcentred protections as it comes into force.

9.5 Additional rights for residents of certain U.S. states (including California)

Some U.S. state privacy laws (such as those in California and other states with comprehensive privacy laws) grant additional rights to residents, which may include:

• The right to know the categories and specific pieces of personal information we collect, use, disclose, and (where applicable) “sell” or “share”.
• The right to delete personal information, subject to certain exceptions.
• The right to correct inaccurate personal information.
• The right to opt out of “sale” or “sharing” of personal information and certain types of profiling or targeted advertising.
• The right to limit the use and disclosure of sensitive personal information in certain contexts.
• The right to nondiscrimination for exercising privacy rights.

To exercise these rights (where available to you), please contact us using the methods in Section 11, and clearly indicate that your request concerns your U.S. state privacy rights.

Where required by law, we will treat recognized browser or device signals relating to optout preferences (such as Global Privacy Control) as a valid request to opt out of sale or sharing for the browser or device that sends the signal.

We do not “sell” or “share” children's personal information for crosscontext behavioral advertising.

10. Thirdparty services and links

Our Services may contain links to thirdparty websites, apps, content, and services, including platforms where our content appears (such as app stores, AVOD/FAST platforms, and socialmedia services).

These third parties may collect information about you independently and have their own privacy policies and practices.

We are not responsible for the privacy practices of thirdparty services.

We encourage you and, where applicable, your children to read the privacy policies of every site and app you use.

11. How to contact us

If you have questions about this Privacy Policy or our privacy practices, or if you wish to exercise your rights, you may contact us at:

• By email:
  For Kartoon Studios and global privacy inquiries: info@kartoonstudios.com
  For Ameba Services: support@amebatv.com
  For Frederator Services: as listed on frederator.com or other Frederator sites.
• By mail (example primary contact address):
  Kartoon Studios, Inc.
  Attn: Privacy
  190 North Canon Drive, 4th Floor
  Beverly Hills, CA 90210
  USA

Depending on your location, we may provide additional contact details, such as local representatives or data protection officers, in separate regional notices.

When you contact us, please do not include sensitive information (such as paymentcard numbers) in your email or postal correspondence.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, legal requirements, or business practices.

When we do, we will revise the “Effective date” at the top and, where required by law, we will provide additional notice (for example, by posting a notice on the Services or sending you a direct notification).

If we make material changes that affect how we handle personal information we have already collected, we will take reasonable steps to notify you and obtain any required consents.

Your continued use of the Services after we post an updated Privacy Policy means you acknowledge and agree to the updated terms.