← Back to game Terms of Use

🛡️ Privacy Policy

Space Force Spelling · Effective 2026-07-12 · Policy version 2026-07-12
Built for kids ages roughly 4–12, with parents in the pilot seat.

Plain English promise: We design for children first. We collect as little as we can, we never sell personal data, we do not run behavioral ads, and parents can review, export, unlink, and delete. This page tells you exactly what exists — not marketing fluff.

1. Who we are

Space Force Spelling (“we”, “the game”) is an educational spelling / math / science adventure. Contact for privacy requests: use the recovery email on your parent account, or the in-app Parent Dashboard → Privacy & Control tools. Venmo tips (@SpaceForceSpelling) are optional and not required to play.

2. Who this app is for

Kids (under 13): should play with a parent or guardian involved. Parent accounts create or link child accounts.
Teens (13+): may create their own account with self-attestation.
Parents / guardians: own the family dashboard, adult PIN, link codes, deletion, and difficulty controls.

3. What we collect — by bucket

Data	Where	Why
Username + password (hashed)	Cloud	Sign-in, progress sync, family links
Optional recovery email	Cloud	Password reset only
Account role + consent record + policy version	Cloud	Parent/teen attestation audit trail
Game progress (planets, scores, subject accuracy, struggle words, streaks, inventory)	Device + if signed in Cloud	Save learning progress; power Parent Dashboard
Age (approx.) or starting level	Device (may sync in progress)	Pick fair difficulty — not used for ads
Parent ↔ child link	Cloud Parent	Family dashboard + family-only multiplayer
Adult PIN (hashed)	Cloud	Gate Parent Dashboard on shared devices
Presence (room / online-ish for family)	Cloud Family only	See siblings/parents in co-op worlds
Optional family photo description / AI art	Photo: not retained after analysis; descriptions/assets may be cached if you use Family Edition features	Personalized cutscenes — parent-gated premium path
Leaderboard display name + coarse stats	Cloud	Friendly competition (username + high-level scores only)
Guest play time counters	Device	12-hour free guest window before sign-in nudge

What we do not collect

Legal full name, school name, student ID, home address, or phone (not requested)
Precise GPS location or advertising IDs for tracking
Payment card numbers (if payments are ever enabled, they go through a PCI processor — never stored by us)
Behavioral advertising profiles — no ad networks in the current product

4. Guests vs accounts

Guest mode: play on this device only. Progress and stats stay local. Guests do not upload arcade/story telemetry to our servers.

Free account: username + hashed password + progress sync. Optional recovery email. Enables Parent Dashboard linking, cloud backup, and multiplayer family presence.

5. Parents: what you can do

Review linked kids’ learning progress (Parent Dashboard)
Link with a short one-time code (preferred) or temporary password proof
Unlink a child anytime
Create a child account from your parent account (recommended)
Set age / difficulty and session limits
Adult PIN so kids can’t open parent tools on a shared tablet
Export account data and delete the account

6. Third parties (processors)

Service	Purpose
Hosting / functions (e.g. Netlify) + database (Postgres)	Serve the app and store accounts/progress
xAI (optional AI voice / images / photo description)	Premium/voice features; family photo is analyzed then not kept on our disk
Resend (email)	Password-reset messages only
Cloudflare Turnstile (optional)	Bot protection on sign-up/login
YouTube nocookie embeds	Optional lesson videos
Stripe (optional purchases)	Adult-only checkout for Family Edition / voice boost. Card data stays with Stripe — we store entitlement flags + optional customer id, never card numbers. Parental gate required in-app before checkout opens.

We do not sell data to data brokers. Processors only get what is needed for the feature you use.

7. Children’s privacy (COPPA-minded design)

Accounts for under-13s should be created or linked by a parent/guardian.
We record parent/teen consent role + policy version + time at registration.
We avoid collecting more than needed for education and safety.
Parents can review and delete.
This is not a formal legal certification — if you need school district paperwork, contact us before classroom use.

8. Retention

Account + progress: until you delete the account (or long inactivity cleanup if we later announce one).
Sessions: about 30 days, or until logout.
Link codes: expire in minutes and are one-time.
Local guest data: until you clear browser storage or reset progress.

9. Security

Passwords hashed with a modern KDF (scrypt); never stored in plain text.
Parent PIN hashed the same way.
Family multiplayer is scoped to linked family members — not open chat with strangers.
Rate limits on login/register; optional Turnstile.
No product is perfect — report issues via your parent recovery email channel.

10. Your rights

Depending on where you live (e.g. GDPR/UK/CCPA-style rights), you may request access, correction, export, or deletion. In-app tools: Parent Dashboard → Privacy & Control, and Settings → Delete account. We aim to honor deletion promptly via automated cascade of account-linked data.

11. Changes

When this policy changes in a material way, we bump the policy version and ask for a new acceptance at registration or next sign-in when required. Historical consent is kept with the version you accepted.

12. Contact

Space Force Spelling · Privacy · Use the recovery email on your parent account or in-app support links. Play at your deployed site (e.g. spelling-bee / space force spelling Netlify host).

Last updated: 2026-07-12 · Version 2026-07-12