Privacy & Children's Notice
The short version
- Kids can play everything without an account. Nothing about a child is sent to us unless a grown-up signs in.
- Only people 18 or older can create an account on their own. For anyone under 18, a parent or legal guardian must create and manage the account, using their own email address.
- We keep only an email address and the game saves you choose to store online. There are no passwords, ads, or selling of data.
- You can delete the account and every online save at any time from the account button.
Children
kiddo.city is made for children, but accounts are for adults. We do not knowingly let a child register, and we do not ask children for their name, age, photo, location or contact details. If we learn that a person under 18 created an account without a parent or guardian, we will delete it. If you think this happened, write to [email protected].
When a parent or guardian creates an account, they confirm that they are the adult responsible for the child and that they agree to this notice. This confirmation is stored with the account together with its date.
What we collect
- Email address of the adult who owns the account, used only to send one-time sign-in codes.
- Saved game data (for example Marble Run builds) that you choose to save while signed in.
- Sign-in session data: a random token kept on your device and a hashed copy on our server, valid for 30 days.
- When you sign in or sign up, we also keep a short-lived record of the code request (valid for 10 minutes).
Without an account, saves, stars and settings stay in your browser's local storage on your device. We cannot see them.
How we use it
Only to sign you in and to store and return your saved game data. We do not use it for advertising, profiling or marketing, and we do not sell or share it with third parties, except the service providers needed to run the site (hosting, database and email delivery), who may only process it on our behalf.
Third-party content
Fonts are loaded from Google Fonts and voice recordings from our own content network, so those services can see a visitor's IP address as with any website. We do not add advertising or tracking scripts.
Your choices and rights
- Delete: use the account button, then "Delete account and saved data". Everything stored online for the account is removed immediately.
- Access, correction or export: email us and we will respond. Depending on where you live (for example under GDPR or the UK GDPR, or US state privacy laws) you may have further rights, including to complain to your data protection authority.
- Parents: you may review, ask us to delete, and refuse further collection of your child's data at any time.
Retention and security
We keep account data until you delete it. Unused sign-in codes and expired sessions are removed automatically. Data is transmitted over HTTPS, and sign-in codes and session tokens are never stored in readable form.
Changes and contact
If we change this notice in a way that affects children's data, we will update the date above and ask the account owner to confirm again. Questions: [email protected].