Privacy Policy

Scinauts is built for kids ages 6–15 and is COPPA-compliant by design. This page explains, in plain English, what we collect, what we don’t, and how parents stay in control.

What we collect from kids

Only three things, and never any of them PII:a username (chosen by the kid, validated by a profanity filter), a cartoon avatar (picked from a gallery — no uploaded photos), and a grade level (K–10). We never collect a kid’s email, real name, photo, or location.

What we collect from parents

Email + password for account access (Supabase Auth). Optional display name. That’s it. No marketing profiling. No third-party advertising. No data sales.

What we collect about gameplay

Per child profile: total coins/stars, current and longest streaks, per-game session score and accuracy, unlocked Cosmo Critters, and Cosmoverse world progress. We use no third-party analytics SDKs(no PostHog, no Mixpanel, no Google Analytics) — all telemetry we ever need is captured server-side in our own database.

Account deletion

From the parent dashboard you can delete a child profile or the entire account. Either action wipes every child row, session, critter, and world save associated with the affected profile(s).

Contact

Email [email protected] with any privacy question.