Privacy

Kept on this device only

The nickname, chosen age range, voice settings, mission progress and Code Lab stars are saved in this browser (local storage) so you can carry on later. Because they only exist on this device, clearing them with “Reset all progress” on the For grown-ups page deletes them completely, and switching to another device starts afresh.

Read-aloud uses your device's own speech voices, so nothing you hear is processed online.

What our server does keep

Nothing about your child. The site is a set of plain files served by Cloudflare, our hosting company. There are no accounts, forms or databases, so there is nothing to keep.

How visits are counted

We use Cloudflare Web Analytics to see how many people visit and which pages they look at. It doesn't use cookies, doesn't store anything on your device, and doesn't build a profile of anyone. It sees the page address, the website that linked here (if any), a rough device type and browser, the country, and how quickly the page loaded.

Only totals are shown to us, for example “120 visits to the Teachers page this week”. We can't see or recognise any individual visitor. Nothing from the game itself (nicknames, answers, scores or progress) is ever included.

Like any web host, Cloudflare handles your connection's address (IP address) to deliver the pages and protect the site from attacks. It acts as our processor, under its own data processing terms, and doesn't give us those addresses.

We use these totals to see whether the site is helping and which parts are used. They're never sold, and never used for adverts or profiling. Our lawful basis is legitimate interests: running and improving a free safety resource, in a way that doesn't identify anyone.

Showing our email address

To stop spam robots collecting our email address, it's only shown after a quick check by Cloudflare Turnstile. The check only runs if you tap to see the address; otherwise it isn't loaded at all. It looks at technical details from your browser to tell people from robots, isn't used for adverts or tracking, and nothing from the game is included.

Children's Code

This site is designed with the UK Information Commissioner's Age Appropriate Design Code (the Children's Code) in mind: high privacy by default, no profiling, no nudges to share data, no location, and no third-party content, fonts or advertising trackers. The only outside service is Cloudflare, which hosts the site, counts visits without cookies, and runs the robot check if you choose to see our email address.

Who is responsible

The owner of this site is the data controller for the visit counting described above. Cloudflare provides the hosting and analytics as our processor.

Contact

Questions, or want to use your data rights? Email our contact address. You can also complain to the Information Commissioner's Office at ico.org.uk.