Cookie policy

1. Strictly necessary

These keep Kidventures working. They need no consent.

• sb-izwohiyinamrkibneuwb-auth-token (sometimes split into numbered parts): your sign-in session, set by our sign-in provider Supabase when a grown-up signs in. Removed when you sign out or the session ends.
• Kid pass: on a device handed to a kid, a short-lived pass (up to 12 hours) so the kid space opens without the grown-up's sign-in.
• kv_locale: remembers the language you picked yourself (language menu or "English?"), so we never switch it for you. Kept 1 year. kv_locale_auto: set for 5 minutes when we open the site in your language, to show you which language we picked once.
• kv-consent (in your browser) and kv_consent (a cookie of 3 digits that our server reads): remember whether you accepted or refused Google Analytics, so we do not ask again on every page. Kept 180 days.
• kv_push and kv_webpush: on a device where you turned on notifications, the id of its notification registration, so signing out there stops them on that device. Kept 1 year. The browser also keeps a small notification worker (push-sw.js) that only shows the notifications you turned on; it stores nothing and is removed when you turn notifications off or clear the site data.

2. Visit counting without cookies

To learn which public pages help families, we count visits ourselves. This sets no cookie and stores nothing in your browser. Each page view sends our server the page, its language, the site you came from and the campaign tags in the link; the server works out the country, the device type and a visitor code for the day from a hash whose key changes every day. Your IP address is never stored. While the page stays open, it sends a short signal every 30 seconds, also without a cookie; the grown-up space sends the same signal with the screen type only. Kid screens send only the read-aloud count below.

Browsers that send Do Not Track or Global Privacy Control are not counted. Page views and signals are deleted after 90 days; daily totals are kept. The privacy policy has the details.

When a kid taps Listen, the kid screen tells our server that a reading started, finished or failed. This adds no cookie and stores nothing in the browser: our server recognises the family from the kid pass already in use and keeps only a family code that changes every day, with the library quest, the language and the voice used. Hourly counts are deleted after 90 days; daily totals are kept. We use them to improve read-aloud and fix errors.

3. Product analytics and session recording

To see how families use Kidventures and where they get stuck, our website, the sign-in pages, the setup and the grown-up space load PostHog (servers in the EU, Frankfurt). It measures pages and screens, taps, errors and loading times, and records sessions, which can include what is on screen. Kid screens, the profile picker of a shared device, invitation pages and our back office never load it. The privacy policy has the details.

• ph_<project key>_posthog (browser storage, no cookie): a random visitor id, the session id and, once a grown-up signs in, the account id. Kept until you clear your browser data; signing out resets it.
• __ph_opt_in_out_<project key> (browser storage): remembers that measuring is paused on a page where it must not run.

PostHog also adds the session id to the requests our pages send to our own server, so a recorded session and the actions it caused can be read together. It sets no advertising cookie and loads no other script.

4. Analytics, only if you accept

If you accept, our public pages load Google Analytics 4 to count visits and see which pages help families. It never runs in the signed-in app or on kid screens. Advertising features stay off. It loads only after you accept: until then no Google script runs and no Google cookie is set.

• _ga: distinguishes visitors. Expires after 2 years.
• _ga_<id>: keeps the state of a visit. Expires after 2 years.

If you refuse, or later withdraw your consent, Google Analytics does not load and we remove these cookies.

5. Changing your choice

Use the "Privacy choices" link at the bottom of every page or in the account menu of the grown-up space, or the button on this page, to change your Google Analytics choice at any time. You can also delete cookies and site data in your browser settings.