Privacy Policy

Who is responsible

Effective date: September 28, 2026

NodNPlay operates NodNPlay. In this policy, “we,” “us,” and “our” refer to the operator. This policy covers the NodNPlay website and its current games. Our Terms of Use describe permitted uses of the service.

Privacy contact: hello@nodnplay.com.

Children and free play

NodNPlay is designed for children, including children under 13, with guidance from parents, guardians, and educators. We do not ask children to supply their name, email, birth date, school, precise location, photo, voice recording, or payment information to play. The current site does not offer account creation, uploads, public profiles, messaging between users, or public posting.

Game answers and round progress are handled in the browser. We do not operate a database of individual children’s scores or learning histories. Please have an adult contact us about a problem, and avoid including a child’s personal information.

If we learn that a child has sent personal information that we do not need or are not permitted to retain, we will remove it as described below. If a future feature requires parental notice or verifiable consent, we will introduce those protections before collecting information for that feature. Visiting the site or reading this policy is not consent to unrelated collection or future tracking.

Information used to operate the website

Technical requests and security records

Delivering pages, images, and audio involves technical information such as an IP address, requested resource, time of request, response status, and browser or device information. Our hosting and security providers may process this information in delivery, security, and error logs. Even without an account, some technical information can be personal information.

We use this information to deliver the site, diagnose failures, assess service reliability, and prevent abuse. We do not use it to contact children, follow them across unrelated services, target advertising, or build individual learning or marketing profiles. We do not add advertising pixels, behavioural analytics, marketing fingerprinting, or session-replay software to the current site. Our hosting provider, Vercel, also uses request and connection signals for security, such as IP addresses, browser information, and TLS connection fingerprints, to detect automated abuse and protect the site. These security signals are distinct from advertising profiles.

Temporary information on your device

Some games use session storage to keep the current question set available after a refresh. This stays in the browser and is not sent to us as a child profile. It normally ends with the browser session; browser session-restore features may preserve it longer. You can remove it by clearing this site’s browser data. Doing so may reset a game. We also store your sound on/off choice in session storage so it follows you between games in the same tab and after a refresh. It is not sent to us or used to identify a player.

Browser caching may also keep copies of images, audio, and other site files to make repeat visits faster. The game code does not set advertising or analytics cookies. Hosting or security services may use technical mechanisms needed to deliver or protect the site.

Messages from adults

If you email us, we receive your email address, any name you provide, your message, and any attachments you choose to send. We use them to answer the request, troubleshoot the issue, handle privacy or safety concerns, and keep necessary support records. We do not add people who contact support to a marketing mailing list.

Please send only what is needed, such as the game name and browser. Do not include children’s names, school details, photographs, recordings, passwords, identity documents, or sensitive information in an initial message. We will request limited additional information only if necessary to verify authority or investigate a specific request.

Audio and device features

Most narration is prepared synthetic audio served with the games. Where a prepared recording is unavailable, a game may use your browser or device’s text-to-speech service to read game text. Whether that speech is generated on the device or through the device provider’s service depends on the selected voice and provider settings.

NodNPlay does not activate a microphone or camera, record speech, or create voice profiles. The text passed to speech features is game text, not personal information entered by a child. A tap or key press may be needed before a browser permits sound.

Service providers and disclosures

Providers supporting website hosting, content delivery, security, and email support process information for those functions. We do not sell personal information, share it for cross-context behavioural advertising, or permit use of children’s information for independent advertising profiles.

Website hosting and delivery: Vercel.

Information may be disclosed where legally required, or where reasonably necessary to address fraud, a security incident, a threat to safety, or a legal claim. We limit such disclosures to information needed for the purpose. If the business is transferred, applicable privacy obligations continue to apply; a transfer does not itself authorize incompatible new uses of children’s information.

Retention and deletion

We keep information for a specific operational or support purpose and remove or anonymize it when that purpose ends. We do not retain children’s personal information indefinitely.

• Game session data: remains on the device until the session or browser storage is cleared, subject to the browser’s restore behaviour described above.
• Technical delivery and security logs: are limited to the period needed for delivery, security, and troubleshooting under the applicable hosting configuration. Contact us for the retention details of our current providers.
• Routine adult support messages: are deleted or anonymized within 12 months after the request is closed, unless the message is needed for an unresolved dispute, security investigation, or legal obligation.
• Unnecessary personal information received from a child: is deleted promptly after it is identified, ordinarily within 30 days, unless a specific legal obligation requires limited retention. It is not used for marketing.

When a record must be retained for a legal or security reason, its use is limited to that reason and it is deleted when the requirement ends. Copies in a provider’s backup system may remain until that system’s scheduled expiry; they are not used to restore deleted information for ordinary business use.

Parents’ and visitors’ choices

A parent or guardian can ask what personal information we hold about their child, request access or correction, ask for deletion, and ask us to stop further collection or use where applicable. Adults can make similar requests about their own information. We do not require more information about a child than is reasonably needed for a permitted activity.

Email hello@nodnplay.com with the subject “Privacy Request.” We may take reasonable steps to verify the requester’s identity and authority without collecting excessive information. We respond within the time required by applicable law, explain any lawful limitation or extension, and do not penalize someone for exercising privacy rights.

Because we do not maintain player accounts or named learning records, we may not be able to identify a particular visit from a child’s name alone. Please do not send extra personal information solely to identify anonymous game activity. We can explain what records, if any, can be located.

You may also raise a concern with the privacy or consumer protection authority responsible for your location. For Canadian residents, this may be the Office of the Privacy Commissioner of Canada or an applicable provincial regulator. For U.S. children’s privacy concerns, the Federal Trade Commission provides information about COPPA.

Security and international processing

We use reasonable safeguards appropriate to the information processed, restrict access to those who need it for the stated purposes, and review the providers and features we use. No internet service can guarantee complete security. Where an incident triggers a legal duty to notify people or authorities, we will provide the required notices.

Visitors may access the site from different countries. Providers may process information outside your province, state, or country. Information processed abroad may be subject to lawful access under local laws. Contact us with questions about providers, locations, or safeguards.

Changes, accounts, and payments

This policy describes the current free service. Creating an account, saving learning records online, adding analytics, or introducing payments could change the information involved. We will explain material changes before applying them, update this page and its effective date, and obtain any required consent before using information for a new purpose. Simply updating this policy does not authorize new uses requiring consent.

Future purchases would be offered to adults through a separate purchase process. Current play does not enroll anyone in a subscription or authorize future charges.