Privacy Policy

World Whiz Kids is designed from the ground up to collect as little data as possible. No accounts are required. No personal data is collected from children. The digital experience works entirely from your browser.

Email addresses — optionally, when a parent chooses to save a passport restore link. We store this address and a restore token in our database. It is never shared or sold.

Anonymised page views — via Plausible Analytics. No cookies. No cross-site tracking. No personal identifiers. Aggregate counts only.

• No names, locations, or demographic data
• No behavioural tracking or advertising pixels
• No Google Analytics, Facebook Pixel, or similar tools
• No cookies (except a session cookie for admin login — never shown to visitors)
• No data of any kind from children

When you enter an email to save your passport, we store: your email address, a secure random token, and a copy of your earned stamps. The token is emailed to you as a link. It expires after 90 days. Clicking it restores your stamps to a new device. You can request deletion at any time by emailing matt@worldwhizkids.com.

• Supabase — database, EU region (Frankfurt). Privacy-compliant hosting.
• Plausible Analytics — EU-based, GDPR compliant, no cookies, no personal data.
• ConvertKit — email platform. Only receives email addresses you explicitly provide via the save or subscribe flows.
• Amazon — affiliate links. Clicking a book link takes you to Amazon's website, which has its own privacy policy.
• Vercel — hosting. Processes request IP addresses per their privacy policy.

World Whiz Kids is designed for families. Phase 1 (current) is near-zero risk by design: no accounts, no data collection, no personal identifiers. Children's stamps are stored only in the browser on the device they're using. COPPA compliance is a core design principle, not an afterthought.

Privacy questions: matt@worldwhizkids.com