Privacy
Privacy Policy
Pilot policy · Last updated September 28, 2026
TundraBloom Games is a child-directed learning-game service for families in the United States. We designed it to work without a child email, real name, Google profile, photo, birth date, or location. A first online visit creates a random guest identifier so points and progress can be saved on that browser.
Information we collect
- Guest and device records: a Firebase anonymous user identifier, a general device label, game progress, accepted play records, points, and goal progress.
- Parent account information: when a parent or legal guardian signs in, Google provides their account identifier, email address, and display name. Google sign-in is not offered as a child sign-in.
- Kid profiles: a parent-created private nickname, server-generated public alias, privacy choice, connected devices, points, progress, and game results. We ask parents not to use a child's full legal name.
- Security data: short-lived run tickets, build and scoring versions, rate-limit values derived from a rotating keyed network hash, and abuse or integrity flags. We do not retain raw IP addresses in application records.
- First-party daily aggregate measurement: fixed-category counts such as app opens, game starts and completions, pairing, installation, offline download, and goal events. These analytics records contain no raw IP address, Firebase UID, private or public alias, score, or free text. A content-free hashed idempotency receipt is kept for no more than two days solely to avoid counting the same retry twice.
How we use information
We use these records to operate games, save progress, calculate server-owned points, show personal goals, prevent duplicate or manipulated scores, connect family devices, answer support requests, understand overall pilot reliability and return use through first-party aggregate counts, and—only after a parent's opt-in—place a kid's generated Alaska alias and eligible result on recreational rankings.
Public rankings
Guests and private profiles never appear publicly. Opted-in rankings show only a generated alias such as “Aurora Otter 482,” rank, eligible points or game performance, and a verification label. They do not show private nicknames, account identifiers, email addresses, Google photos, exact timestamps, or location. A parent can opt out, which removes the entry.
Sharing and service providers
We use Google Firebase for authentication, app security, hosting, server functions, and data storage. Service providers may process data only to operate and protect the service. We do not sell or rent personal information. There is no third-party analytics or ad tracking. The pilot loads no advertising SDK, behavioral advertising, third-party analytics SDK, or ads.txt, and we do not disclose player profiles or game history to ad providers.
Retention
Ordinary run transcripts and abuse metadata are scheduled for deletion or aggregation after 30 days. Material flagged for security review may be kept for up to 180 days. Point-ledger summaries and account records remain while the account exists so totals and merges can be audited. First-party daily aggregate counters contain no account identifier and may be retained as overall service statistics; their hashed retry receipts expire within two days. Backups expire on their normal rotation.
Parent choices
A signed-in parent can view connected profiles and devices, turn rankings on or off, revoke a device, export family data, delete a kid profile, and request family deletion. We aim to complete verified deletion or anonymization requests within 30 days. See Export and Delete Data.
Security and changes
Browser access to the database is blocked; app requests go through authenticated server endpoints. No system can promise perfect security. We may update this policy as the pilot changes and will post the date above and provide any notice required by law.
Contact
Parents can use the verified contact on our Support page about privacy, access, correction, or deletion. Do not send a child's sensitive information by email.