Privacy

World Respawn is run by [COMPANY NAME]. We decide how the information on this page is used, which makes us its “controller” under data protection law.

Questions about this page, or a request about your family’s information, go to [SUPPORT EMAIL].

Only what the app needs in order to work. This is all of it.

Parent accounts are switched off for now, so for nearly everyone the first entry below is the whole story. The entries after it describe the parent accounts that already exist, and they apply to those families only.

The account the app makes for a device

The first time the app opens on a device, it makes an account for it. It holds a reference number made at random, a profile named only “Me”, the date it was made, and a scrambled form (a hash) of the account’s 16-digit save code. It holds no name, email address, password, date of birth, photo or voice recording, and no parent’s details, because there is no parent on it. The Worlds made on the device are saved under it, as described under “What your children make” below. The device keeps a copy of the save code so it can sign itself back in; typing the code on another device opens the same Worlds there, and does not sign the first device out.

If there is a parent account: you, the parent

Your email address. We use it to send you a link to log in (there’s no password) and to write to you about your account and your subscription.

Your subscription

When you start a free trial or subscribe, you pay on a page run by Stripe, by card or, if your device offers it, with Apple Pay or Google Pay. We never see or keep your card number or wallet details. We keep a reference to your Stripe customer and subscription, your plan, how many children it covers, and the dates your trial and renewals fall on.

Your children’s profiles

A first name or nickname, as you typed it (up to 24 letters, numbers and spaces), when it was added, a daily play limit if you set one, the settings for the Sound Studio (the level the child chose, the highest level you allow and the volume limit you set) and, while a child is signed in on a device, what kind of device it is (like “iPad, Safari”) and the day they signed in, so you can tell which screen it is. Nothing else about a child is stored. We don’t ask for an email address, a password, a date of birth, a photo, a voice recording, a location or a school.

What you agreed to

When you add a child, we keep the date you confirmed that you’re their parent or legal guardian and have read this notice, which version of it you read, and whether you let them ask to show a game to someone you pick (it’s off unless you switch it on). You can see this, and change that choice, in the Grown-ups area.

What your children make

Their games: the names they give them, the things in them, the rules and the pictures they paint. Every save is kept as a version, so you can go back to an earlier one. A child can also take a small square picture of a game to stand for it on their home screen; the app makes it from the game itself, as it looks in the editor, and never from a camera. They can also make sounds and music in the Sound Studio and keep a sound for every game. A sound is stored as a short recipe (the settings that make it, not a recording), with a name picked from a list of words and a made-up maker name like “Brave Owl”, never a real one. The sounds a game uses are saved inside that game. All of it sits under your account.

Where they’ve got to

How far each child has got in the lessons, so it carries on from one device to the next. It holds no name and nothing a child made.

How long they play

How many minutes each child plays each day, so a daily limit you set can work and the weekly email can tell you. These records are removed after about 60 days.

Sharing

Sharing is switched off. Where a parent account used its earlier version: when a child asked to show a game to someone, we keep the request: a short name for that person, like “Gran” (we don’t ask for their email address), whether you said yes, the link, and when it ends. We don’t keep a list of who opened a link.

Your weekly email choice

If you ask for the weekly email, we keep that choice, and a copy of your email address to send it to. It’s off unless you turn it on.

Technical details

Whenever you open a page, our servers receive your device’s IP address and details of its browser. We use them to deliver the page, keep the service secure and fix faults, and they appear in the ordinary logs a server keeps. We don’t use them to follow you around other sites or to build a profile of you. Slowing down repeated tries (wrong guesses at a save code or a child’s sign-in code, many new accounts from one address, or many sign-in links asked for one email address) uses the address too, and the email address a link was asked for, held in the server’s memory for a few minutes and not stored.

• No advertising, and no advertising or tracking tools of any kind. There are no analytics, pixels or third-party scripts on this website or in the app.
• We don’t sell your information or your children’s, and we don’t use it to build profiles.
• No AI. Nothing your children make is sent to an AI service or used to train one, because we use none.
• No chat, comments, public profiles or messages between people. A child can’t contact anyone through the app, and no one can contact them.
• No marketing emails.
• No access to your camera, microphone or location. The app never asks for them. (To sign a child in by picture, you scan it with your device’s own camera.)

To let you and your children sign in; to keep what your children make and show it back; to keep to the daily limit you set; to take payment and run your subscription; to keep the service secure and working; and to meet legal duties, such as keeping payment records.

We email you only about your account: your log-in link, a note when a device is signed in as one of your children, a confirmation when you subscribe, a reminder before a free trial ends and, if you ask for it, the weekly summary of what your children made. Each weekly email has a link to turn it off.

The reasons the law lets us do this, in the UK: it’s needed to give you the service you signed up for; it serves our legitimate interest in keeping the service secure and working; the law requires it (payment records, for example); and, for the weekly email, your consent, which you can take back at any time.

We don’t sell your family’s information or hand it to anyone to use for their own purposes. Two companies handle it so that the service can run, and a third only if you choose its wallet to pay:

Amazon Web Services

Hosts the app, stores accounts, games and pictures, and sends our emails. Our data is kept in its London region.

Stripe

Takes your payment and keeps your card details, under its own privacy policy: stripe.com/privacy.

Apple or Google, if you use their wallet

If you pay with Apple Pay or Google Pay, Apple or Google runs the wallet and passes the payment to Stripe, under its own privacy policy. We aren’t given your card or wallet details.

That’s the whole list. If it ever grows, this page changes first.

A person you send a share link to can play that one game. They can’t see who made it, change it, or reply. We would hand information to the police or a court only if the law required it.

Accounts, games and pictures are stored in Amazon Web Services’ London region, in the UK. Stripe is a US company and handles payments wherever it operates, including the US, and so are Apple and Google if you pay with their wallets. Where information leaves the UK, the law requires safeguards for it, and we use companies that provide them.

For as long as your account is open, so a child’s games are there when they come back. After that it’s yours to remove, and removal is immediate:

• Erase a child and their games (every version, every painting and the picture each one has on the home screen), their sounds, their share links, their profile and their lesson progress are deleted at once. The record of how long they played goes within about 60 days.
• Erase your account and all of that goes for every child, along with your subscription record and your log-in. If you have a subscription, we stop it first, so you aren’t charged again.
• All that remains afterwards is a note that an account with a certain reference number was erased. It has no name, email address or anything about your family in it. It exists so that a log-in left on someone’s device can’t bring the account back.
• Deleted information can stay in our backups for up to 35 days, and then it’s gone.
• Some things are short-lived by design: a child’s sign-in code lasts ten minutes and is deleted when it’s used, and so is a request from a child’s device for a grown-up to sign it in, which lasts half an hour; a request from a signed-in child’s device for a grown-up to unlock more Worlds also lasts half an hour, and names your account and that child for that time; a log-in link lasts a day; a share link lasts 30 days unless you stop it sooner.
• Records of payments are kept for as long as tax and accounting law requires. Stripe keeps its own.
• Ordinary server logs are kept only as long as they’re needed to run and secure the service.

A cookie is a small file a website leaves in your browser, and the app keeps a few other things on your device too. Everything below is needed for the app to work, which is why there’s no cookie banner. None of it is for advertising or tracking, and none of it comes from anyone but us.

Logging in (cookies)

Keep you logged in and protect the log-in from forgery. A parent’s or child’s log-in lasts up to 30 days. Two of these cookies are also set when you open pages on this website, because the page header checks whether you’re logged in; they go when you close the browser.

The last game (a cookie)

Remembers which game a device opened last, so the home screen can offer to carry on with it. It holds a game’s reference number and nothing else, and lasts a year.

Settings on the device

Your choices on that device (gentle play on or off, whether sounds are shown as words, the touch-control layout, which tips have been shown, the Sound Studio’s level and volume limit, and a random number that keeps a made-up maker name the same on that device), and where a child has got to in a lesson until it’s been sent to us.

A copy for when there’s no connection

The app keeps a copy of the games opened on a device, and any changes still waiting to be saved, so it keeps working offline. For the Sound Studio it also keeps a copy of a child’s sounds, the sounds it has already made ready to play, and a beat, tune or song that isn’t saved yet. It also keeps the files it needs to start quickly. Erasing your account clears these on the device you do it from.

The save code

The device keeps a copy of its account’s save code, so it can sign itself back in when its log-in runs out. It is the key to the account’s Worlds, so anyone with access to the device can see it on the Save code screen. Clearing the browser’s data removes it from the device; the account and its Worlds stay on our side, and the code written down still opens them.

The grown-up question

Remembers for ten minutes that it was answered, so it isn’t asked again straight away.

You can clear all of this in your browser’s settings. The app will ask you to log in again.

World Respawn is for children. A child uses it through an account the app makes for their device, with no parent’s account and no consent step, because we collect nothing that identifies the child. This section is our notice to parents, including under the US children’s privacy law, COPPA.

• A device account holds no name, email address, password, date of birth, photo, voice recording or location. What it holds is the Worlds, sounds and lesson progress made on it, a profile named only “Me”, and the hash of the save code.
• A grown-up can erase a device account, and every World in it, from the Save code screen. The same screen shows the save code, so a grown-up can see what the account holds by opening the Worlds it opens. If you’d rather we did it for you, write to us, with the save code.
• You set up each child’s profile and choose the name it carries. We collect nothing else from a child, other than the technical details described above and what the app notes as they use it: the games and sounds they make, how long they play, and where they’ve got to in a lesson.
• A child can’t message anyone, post anything publicly, buy anything, or see an advert.
• We don’t share a child’s information with anyone except the companies listed above, which run the service for us.
• For a family with a parent account: you can see what we hold about a child (their games are in your Grown-ups area, and the details of their profile can be downloaded from your account page), have it erased (erase the child), and stop us collecting more (remove the child, or erase your account). If you’d rather we did any of that for you, write to us.
• For a family with a parent account: by adding a child you tell us that you’re their parent or legal guardian, and you agree to this notice on their behalf.
• If you think a child has been added without a parent’s agreement, tell us and we’ll remove them.

You can ask us to show you what we hold about you and your children, correct it, erase it, limit how we use it, or move it elsewhere; to stop using it for something you object to; and to take back any consent you gave. Most of that you can do yourself in the app: look at everything your family has made, download the details of your children’s profiles, change or erase a child, erase your account, turn the weekly email off. The games themselves stay in the app, where you can open, go back through or erase them. For anything else, write to [SUPPORT EMAIL]. We’ll answer within a month.

If you’re not happy with how we’ve handled your information, you can complain to the Information Commissioner’s Office, the UK’s data protection regulator, at ico.org.uk. You are welcome to tell us first, and we’ll try to put it right.

If you live in a US state that gives you privacy rights, the same requests are open to you. We don’t sell personal information, and we don’t share it for advertising.

• Everything travels over encrypted connections (HTTPS).
• What we store sits in Amazon Web Services, which encrypts it.
• The save code is sixteen digits, is stored only as a hash, and a run of wrong guesses from one address is slowed down. Anyone who has the code can open the account’s Worlds, so it should be kept private.
• There are no passwords to leak. You log in with a link sent to your email, which works once. A child signs in with a single-use code that lasts ten minutes, or when a grown-up says yes on their own phone.
• A share link plays one game and nothing else, can’t be guessed, and stops the moment you stop it.
• Only the people who need it to run the service can reach the data.

No system is perfectly secure. If something went wrong that put your information at risk, we would tell you, and the regulator, as the law requires.

If we change this page in a way that matters, we’ll email you before it takes effect. The date at the top shows when it last changed.

If we ever wanted to add analytics, advertising or any other company that sees your information, this page would change first, and where the law requires it we would ask you before anything started.

Write to [SUPPORT EMAIL]. The rules for using the service are in the terms of use.