Privacy

Engine Explorers is used by children, so this page is written to be read quickly and to be specific. Last updated: {{LAST_UPDATED}}.

The short version

The game itself contains no tracking and no advertising.
Without an account, nothing about a child leaves the device. Progress is saved in your browser's local storage.
An account is optional and belongs to a grown-up. Children never have logins and are never asked for personal details.
The website (not the game) counts visits using Cloudflare Web Analytics, which is cookieless and does not track people between sites.
You can delete the account and everything in it at any time, from inside the game.

Playing without an account

This is the default. Explorers, progress, journal entries, badges and settings are stored by your browser on the device, in local storage. None of it is sent anywhere. Clearing your browser data for this site deletes it permanently — there is no copy elsewhere.

If a grown-up creates an account

An account exists for one reason: so a child's progress survives a lost device and can continue on another one. Creating an account is a decision for an adult.

What we store

Your email address — used to identify the account and sign in. We do not send marketing to it.
A hashed password — put through PBKDF2 with a per-account random salt. The plain password is never stored and cannot be recovered by us.
A session token — stored as a hash, set as a secure, HTTP-only cookie so the device stays signed in. It expires, and signing out deletes it.
For each explorer (up to four): the name and colour chosen in the game, and the game state — which chapters are complete, which tools and badges are earned, journal entries the child wrote in the game, check-in counts and settings.

What we do not store

No child email addresses, no required real names, no birthdates, photographs, voice recordings or location.
No advertising identifiers, no behavioural profiles, no cross-site tracking.
No tracking of any kind inside the game itself.

Explorer names are free text typed by whoever sets up the profile. Please use a first name or a nickname only. The game defaults to "Explorer" and never requires a real name.

Children's data and consent

Accounts are for adults. By creating one, the adult confirms they are the parent, carer or teacher of the children whose explorers they add, and consents to that information being stored as described. Children cannot create accounts, and the game never asks a child for an email address, a password or any contact detail.

If you believe a child has provided information to us without a parent's involvement, contact {{CONTACT_EMAIL}} and we will delete it.

Who can see it

Only the account holder. Data is not sold, rented, or shared with third parties for their own purposes. It is not used to train anything, and it is not used for advertising.

Where it is stored, and for how long

In a Cloudflare D1 database, encrypted at rest, reachable only by this site's own server code over HTTPS. We keep it until you delete it. Sign-in sessions expire automatically after 30 days of not being used. If an account is not signed in to for {{DORMANT_PERIOD}}, we may delete it and its explorers after emailing the account address first.

Deleting things

One explorer: Grown-Up Corner → Progress → Delete this profile. Removes it from the device and from the account.
Everything in the account: Grown-Up Corner → Account → Delete account. Permanently removes the email, the password hash, all sessions and every explorer's progress. It cannot be undone.
This device's copy: sign out and choose "also remove this device's copies", or clear site data in your browser.
By email: write to {{CONTACT_EMAIL}} and we will action it.

Cookies and analytics

One cookie, set only if a grown-up signs in: a session cookie that keeps the device signed in. It is HTTP-only, secure, and same-site. There are no advertising or third-party tracking cookies.

The website pages use Cloudflare Web Analytics to count visits. It is cookieless, does not fingerprint visitors, does not build profiles, and cannot follow anyone across other websites — which is why you are not being asked to accept a cookie banner. It records aggregate things like page URL, referrer, country and browser type. It runs on the marketing pages and the game page; it does not see anything a child does inside the game, and it is not connected to accounts or explorer data.

The website itself

Pages are static files served by Cloudflare Pages. Standard server request logs (IP address, page requested, timestamp) are produced by Cloudflare for security and reliability and are retained on their normal schedule.

Your rights

Depending on where you live you may have rights to access, correct, export or delete the information held about you, and to withdraw consent. The delete controls above are the fastest route; for anything else, contact {{CONTACT_EMAIL}}. {{JURISDICTION_NOTE}}

Changes

If this policy changes in a way that affects what is stored or who can see it, the date at the top will change and account holders will be told by email before the change takes effect.

Contact

{{OPERATOR_NAME}} — {{CONTACT_EMAIL}}

Before publishing — remove this box

This page is drafted to match exactly what the code does today. The {{PLACEHOLDER}} values still need filling in, and because this is a children's product the finished text should be checked by someone qualified in your jurisdiction (COPPA in the US, UK GDPR and the Age Appropriate Design Code in the UK, GDPR in the EU).

Educational, not therapy. Informed by the Alert Program® framework; not affiliated with or endorsed by it.