Our commitment
Numbercade is built for kids in grades 4 to 8 (roughly ages 9 to 12). We take children's privacy seriously and comply with the Children's Online Privacy Protection Act (COPPA).
This page explains, in plain language, exactly what data we collect, how we use it, and what control you have as a parent.
What we collect from kids: almost nothing
When a parent creates a child profile, the only information stored is:
- A nickname (max 20 characters, chosen by the parent)
- An emoji avatar (chosen by the parent)
- Game progress data (scores, stars, coins, which worlds they have completed)
That is it. We do not collect real names, birthdates, photos, location data, device identifiers, or browsing history from children.
What we collect from parents
The only personally identifiable information in our system is one parent email address, used for sign-in via a magic link or Google OAuth. This email is never shared with third parties for marketing purposes.
What we do NOT do
We believe the best privacy policy is one where there is almost nothing to talk about. Here is what Numbercade will never do:
- We do not serve ads of any kind
- We do not use analytics or tracking pixels
- We do not use cookies
- We do not sell, rent, or share data with third parties for marketing
- We do not allow kids to make purchases (the coin shop is earn-only, no real money)
- We do not allow kids to communicate with other users (no chat, no forums, no social features)
- We do not collect more information than is reasonably necessary to participate in the games
Parental consent and control
Parents are always in charge:
- Only a parent can create an account. An account requires a parent's email address. Kids cannot sign up on their own.
- Review your child's data. You can review all data associated with your child's profile at any time by contacting info@numbercade.com.
- Modify or delete data. You can request modification or deletion of your child's data at any time.
- Refuse further collection. You can stop all data collection by deleting the account.
If we ever learn that we have collected personal information from a child without verifiable parental consent, we will delete that information promptly.
How data is stored
- Local storage. Game progress is stored locally in the browser (localStorage) by default. No account is required to play.
- Cloud sync. If a parent creates an account and signs in, progress is also synced to our database (hosted by Supabase) so it carries across devices.
- Row-level security. Data is protected by row-level security policies, which means each parent can only access their own family's data.
Third-party services
We use a small number of services to run Numbercade. None of them serve ads or track children.
- Supabase provides our database and authentication
- Resend sends the sign-in email (magic link)
- Google provides optional sign-in via Google OAuth
- Netlify hosts the website
None of these services receive child data beyond what is described above.
Changes to this statement
If we make material changes to how we handle children's data, we will update this page and note the new date at the top.
Contact us
If you have questions about this statement or about your child's data, please reach out:
- Email: info@numbercade.com
- Mail: Dara Lee Luca, doing business as Numbercade, 6530 Heather Brook Ct, McLean, VA 22101, United States
You can also read our full Privacy Policy and Terms of Service.