Privacy Policy

Effective October 23, 2026 · Family Arcade is operated by Childs LLC ("we", "us"). This policy covers www.family-arcade.com and everything in it.

1. Who this service is for

Family Arcade is a learning-and-games website for families. Parents (adults) create the family account and then create accounts for their children. Children cannot sign up on their own. Because the site is designed for use by children under 13 under a parent's supervision, we follow the principles of the U.S. Children's Online Privacy Protection Act (COPPA): we collect only what the service needs, parents give consent by creating and managing their child's account, and parents can review and delete their child's information at any time.

2. What we collect

From parents

• First and last name, email address and a password (stored only as a secure hash) when you create your account.
• Your family name if you choose a plan that puts it on the site.
• Billing status from Stripe (plan, trial/renewal dates, whether a payment succeeded). We do not receive or store card numbers.
• Settings you choose: screen-time limits, free-play schedules, online-play permissions for each child, and whom you invite as a second parent.

From children (entered by the parent, or created through play)

• A display name (usually a first name) and a username chosen by the parent. The username becomes an internal sign-in identifier that looks like an email address but is not a real mailbox and is never used to contact anyone.
• Learning progress: which worlds and questions were attempted, answers given, scores, stars, difficulty settings and which skills need practice. This is what makes Smart Review and the Quest Coach work.
• Game play data: scores, best times, Play Credits earned and spent, and when games were started and stopped (used to apply the limits a parent set).
• Cartoon hero pictures (see section 4).
• Feedback or suggestions a family member chooses to send us.
• Messages sent through the Contact form on our home page: the name, email address, optional phone number and message you enter. We use them only to reply, keep them while the inquiry is open, and delete them within 12 months.

Automatically

• Basic technical information needed to run a website: IP address, browser type, device type, pages visited and sign-in times. Sign-in records help us spot misuse and help you troubleshoot.
• Anonymised usage analytics through Microsoft Clarity (see section 6). Clarity is configured to mask all page content on every page, so recordings show layout and clicks but not what anyone typed, answered or read.
• Small browser-storage items (localStorage and session cookies) that keep you signed in and remember choices like your selected character, sound setting and best scores.

3. How we use it

• To run the service: sign-in, saving progress, awarding and spending Play Credits, applying the limits parents set, and running online matches between permitted players.
• To personalise learning: Smart Review and the AI-powered Quest Coach use a child's own answer history to choose practice questions. We send the coach the skill and the question content that was missed — never a child's name, username or contact details.
• To bill the family and send service emails: trial reminders, payment problems, password resets, a child's "ask a parent for more time" request, and admin approvals.
• To keep the site safe and working: preventing abuse, debugging, and understanding which features families use.

We do not use personal information for advertising, we do not build marketing profiles, and we do not sell, rent or trade it.

4. Photos and cartoon heroes

Parents (and, with a parent's account, families) can upload a photo to turn a family member into a cartoon hero. The photo is sent over an encrypted connection to Google's Gemini image model, which returns a cartoon version with the background removed. The original photo is never stored on our servers — it is discarded as soon as the cartoon is returned. Only the cartoon image is kept, and it is visible only to accounts in your family (and to the site administrator for approval). You can delete a hero at any time from Learning Quest or My Kids, or by emailing us. Please upload photos only of your own family members or with the permission of the person's parent.

5. Online play and what other families can see

There is no chat, messaging or free-text sharing between players anywhere on the site. By default a child can only play online with members of their own family. A parent may widen this per child to "other kids online" or "other families including adults"; in those modes the only things another player sees are the child's display name, chosen character and family name — never a username, email or progress. Both sides' parents must have allowed the same level of contact for a match to be offered.

6. Service providers

We use a small number of trusted companies to run the site. Each receives only what it needs for its job and is bound by its own privacy terms.

7. Your choices and rights

• See and change your family's details on My Family and My Kids; parents can rename children, reset passwords and change permissions at any time.
• Delete a hero picture, a child account, or your entire family and all its data — send us a request using the parent's email address and we will complete it within 30 days and confirm.
• Export — ask and we will send you a copy of your family's data in a readable format.
• Analytics — you can block Clarity with any standard tracker blocker without affecting the site.
• Emails — we only send service emails (billing, passwords, approvals, a child's request for more time). There is no marketing list to unsubscribe from.

Depending on where you live (for example the EU/UK or California) you may have additional legal rights to access, correct, delete or restrict use of your information, and to complain to a regulator. Use the email above and we will honour them.

8. How long we keep information

Account and progress data is kept while your family has an account. If a subscription lapses, the account is kept for 12 months so a family can come back without losing progress, then deleted. Sign-in logs are kept for 90 days. Deleted hero pictures are removed immediately. Stripe keeps billing records as required by financial regulations.

9. Security

All traffic is encrypted (HTTPS). Passwords are stored only as salted hashes. Every database table is protected by row-level security so a family can only ever read its own rows, and administrative actions run in server-side functions with their own checks. Secrets and API keys are never shipped to the browser. No system is perfect; if we ever learn of a breach affecting your family we will tell you promptly.

10. Changes to this policy

If we change how we handle personal information we will update this page, change the effective date at the top, and — for anything significant involving children's data — email parents before the change takes effect.

11. Contact

Questions, requests or concerns: contact@family-arcade.com. Family Arcade is operated by Childs LLC in the United States.