Privacy

Last updated 3 September 2026

The short version

• Parents own the account. Children play through a profile that is only a nickname, an avatar and a grade.
• We never ask a child for a name, email, birthday, photo, address or location.
• There are no ads, no ad trackers, no third-party analytics and nothing to buy.
• Children cannot message anyone. There is no chat and no public profile.
• Leaderboards are off for new players until a parent turns them on, and show only a nickname and avatar to other signed-in families.

What we collect

From the parent: an email address and either a password (stored as a one-way hash) or a Google sign-in. Optionally a name and a date of birth for the parent's own account.

For each child profile: a nickname the family chooses (we block nicknames that look like phone numbers, addresses or unkind words), an avatar, a grade, and an optional 4-digit PIN (stored as a hash). Nicknames should not be a child's real full name.

Learning activity: which questions a profile answered and whether they were right, lessons practiced, puzzles finished, XP, streaks, badges and cards earned. This is what makes progress, recommendations and the parent dashboard work. We also keep a first-party log of product events (for example "lesson completed") tied to the profile number only, to understand what children enjoy.

Technical: your browser's time zone (so streaks roll at your midnight), and standard server logs. We rate-limit sign-in attempts by network address; addresses are not stored with profiles.

What we never do

• Show advertising or use advertising identifiers.
• Sell, rent or share personal information with third parties.
• Let strangers contact children. Family Quiz Race rooms are private, joined by a code your family shares, and guests get a generated name.
• Send notifications a parent has not turned on.

Third parties

Google Sign-In (only when a parent chooses it, and only on the sign-in screen). Listen Mode may generate audio for a lesson using Google's Gemini speech service; the text sent is the lesson or question itself, never anything about the child, and the audio is cached so each text is generated once. Some answer photos are loaded from Wikimedia Commons.

Parent choices

• Turn leaderboards on or off per profile, set or remove a PIN, rename or delete a profile at any time from Manage players.
• Turn read-aloud, voice answers, sounds and the guide character on or off per profile.
• Delete the whole account, including every profile and all activity, from Account. Deletion is immediate.

Contact

Questions or requests about a child's data: use Send feedback from your account, or email the address on the About page.