Privacy Policy

World Whiz Kids is built to collect as little personal data as possible. You can explore every country, topic, and activity without an account. We offer an optional, free, parent-only account so you can save a child's passport across devices and unlock printable downloads. We never sell your data, we never collect personal information directly from children, and we don't use advertising or cross-site tracking cookies.

Email address — when a parent chooses to save a passport, sign in, download a printable, or subscribe to updates. We use it to send your sign-in link and (if you opt in) occasional emails. It is never sold or shared for advertising.

Account & profile data — if you create a free parent account, we store your email and the kid profiles you create. A kid profile holds only a display name and a chosen avatar — never a child's email, birth date, photo, or any other personal detail.

Passport progress — the stamps earned on activities. For guests this lives only in your own browser. For signed-in parents we also store it in our database so it syncs across devices.

Anonymised usage — aggregate page views and performance timings via Vercel Web Analytics and Speed Insights. Cookieless, no cross-site tracking, no personal identifiers.

QR & download events — when a book QR code is scanned or a printable is requested, we log non-identifying details (which code, rough region, device type) to understand what families use.

• No personal information directly from children — accounts are parent-only
• No child email addresses, birth dates, photos, or precise location
• No advertising pixels or behavioural ad tracking
• No Google Analytics, Facebook Pixel, or similar cross-site trackers
• No selling or renting of your data, ever

Accounts are optional and free. We use passwordless “magic link” sign-in: you enter your email, we send a one-time link, and clicking it signs you in. There are no passwords to manage. Accounts are for parents and guardians only — children never sign in directly.

A parent can create a profile for each child so they each have their own passport. A profile stores only a display name and an avatar you pick. Profiles are created and managed entirely by the parent, belong to the parent account, and can be deleted by the parent at any time.

When you save a passport by email, we store your email address, a secure random token, and a copy of the earned stamps. We email you a link to restore those stamps on another device. Restore tokens expire after 90 days. You can request deletion of this data at any time at the contact below.

Free printable samples are delivered to your email via a secure, time-limited download link. We record the email address and which printable was requested so the link can be generated and so we can understand demand. We don't use this to advertise to you.

We don't use tracking or advertising cookies. The only cookies we set are strictly necessary ones: a secure session cookie when a parent is signed in (so you stay logged in), and a separate session cookie for our internal admin area. Our analytics are cookieless.

The optional leaderboard is off by default. It only ever appears if a parent explicitly opts a profile in from account settings. Even when opted in, it never displays a child's full name, photo, or any identifying information — a profile shows only its chosen avatar and a single first initial (for example, “E.”). You can opt out again at any time.

If you opt in, we send occasional emails about new countries, activities, and resources. Every email includes an unsubscribe link, and you can opt out at any time. We use Kit (formerly ConvertKit) to manage this; it only ever receives email addresses you explicitly provide.

We share data only with the providers needed to run the service, never for advertising:

• Supabase — database and account authentication (EU region, Frankfurt).
• Vercel — website hosting and cookieless Web Analytics; processes request data such as IP addresses per its own policy.
• Resend — sends our transactional emails (sign-in links and download links).
• Kit (ConvertKit) — manages optional email-update subscriptions.
• Amazon — book links are affiliate links; clicking one takes you to Amazon, which has its own privacy policy.

World Whiz Kids is designed for families and is COPPA-conscious by design. Accounts belong to parents and guardians only — children never create accounts or sign in. We do not knowingly collect personal information directly from children; kid profiles hold only a parent-chosen display name and avatar. If you believe a child has provided us personal information, contact us and we will delete it promptly.

You can use the entire site as a guest with no account. If you have an account or have saved data by email, you can ask us to delete your account, kid profiles, saved passport, or email address at any time — just email the address below and we'll take care of it.

World Whiz Kids (worldwhizkids.com) is operated as a sole proprietorship by Matthew Sorenson. The operator is responsible for the data described in this policy and handles privacy and deletion requests directly.

Privacy questions or deletion requests: matt@worldwhizkids.com (Matthew Sorenson, World Whiz Kids).