Privacy
Last updated: October 23, 2026
This page has not had a legal review yet. It describes what the site does today. It is not a promise of compliance with any specific children's privacy law, and it is not legal advice.
In short: guests are never saved. Only a parent can create an account, and only a parent can add a child profile. A child profile is a nickname, a grade band and practice results. We never ask for a child's email, birthday, photo, real name or anything typed about them.
Exactly what we collect
- Waitlist: a parent email address and the date you joined, only if you type it into the waitlist form.
- Parent account (optional): the parent's email address and a password. The password is stored only as a salted hash by our sign-in provider (Supabase Auth). We can't read it. Sign-in sessions use cookies.
- Child profile (optional, up to 3 per parent): a nickname and a grade band (Pre-K–K, 1–2, 3–5, 6–8 or 9–12). Please use a nickname, not a real name. Nicknames can't contain spaces, which helps avoid full names.
- Parental permission record: when a parent adds a child, they tick a permission statement. We store the date and time, the statement's version (2026-10-23-v1) and the exact text they agreed to.
- Practice results (only when a parent has picked a child): for each answer, the game (Catch the AI, Think First, or Daily Puzzle), the puzzle id, the grade band and topic of that puzzle, whether the answer was right or wrong, a random session id that groups one play-through, and the time.
- We do not collect: a child's email, birthday or age, photo, real name, address, location, or any free text about a child.
The wording a parent agrees to (version 2026-10-23-v1): “I am this child's parent or legal guardian. I give permission for Kidorizon to save this nickname, the grade band, and my child's practice results (which puzzle was answered, the game, and whether the answer was right) in my account, so I can see their progress. I understand I can delete this child's data, or my whole account, at any time.”
Guests: nothing is saved
You don't need an account to play. As a guest, “Catch the AI”, “Think First, Then Check” and the Daily Puzzle run in your browser, and your choices and scores are not sent to us. They disappear when you close or refresh the page. Your grade band choice is remembered in your own browser (and in the web address) so it carries from page to page. If you press “Copy result”, the text goes only to your own clipboard.
How we use it
The waitlist email is used to tell you about Kidorizon Plus. Account and child information is used only to sign you in, to remember the child profiles, and to show you the progress dashboard. We don't sell this information, use it for advertising, or share it for marketing.
Who can see it
Database rules mean a signed-in parent can only read and write the rows for their own children. Our hosting (Vercel) and our database and sign-in provider (Supabase) process the data for us. Our hosting provider may keep standard server logs (such as IP address and browser type); we don't put children's results into our own logs or analytics, and we don't use advertising cookies or analytics trackers.
How long we keep it, and deleting it
- We keep account, profile and practice data until you delete it. We don't delete it automatically yet.
- Delete a child's progress history or remove a child profile (this also deletes the permission record and all results) from Progress.
- Delete your whole account from your account page. This permanently deletes your email, every child profile, every permission record and all results. It happens right away and can't be undone. Sign-in provider backups may take a short while to age out.
- For the waitlist, you can ask to be removed at any time. A contact address for these requests will be published on this page before launch.
Who accounts are for
Accounts and the waitlist are for parents and guardians (18 or older) only. Children should not create accounts or enter their own email address. If a child has done so by mistake, a parent can delete the account, or ask us to remove it.
Changes
If we change how we handle data, we will update this page first and explain what changes. Before a public launch we plan to get this policy and our practices reviewed by a lawyer.