Privacy policy

This policy explains what personal information AnimalWorld Kids collects, why we collect it and what you can do about it. Information about children has its own, shorter notice: our children's privacy notice.

Who we are

AnimalWorld Kids is run by , based in Tunisia. We are responsible for the personal information described here. For any privacy question, write to [email protected].

Visiting the site without an account

You can use the whole site without telling us who you are.

• On your device: the site remembers your language for the visit, your day or night setting, and the child's My Zoo progress (points, badges, favourite animals). These are stored in your browser, not sent to us, and you can clear them at any time from My Zoo or your browser settings.
• Delivering the site: our host, Cloudflare, processes your network (IP) address to send you the pages and to protect the site from attacks. We do not keep it.
• Statistics: Cloudflare Web Analytics counts visits to pages without cookies and without identifying anyone.
• Protection against misuse: to stop attacks, sign-in attempts and form submissions are counted per network address. These counters are deleted automatically after a short time. For the contact form we keep only a one-way code made from the address, which cannot be turned back into it.
• Searches typed on the site are used only to show results and are never stored with anything that identifies you.

Parent accounts

When a parent creates an account, we keep:

• your email address, the name you give, your preferred language and your settings (sound, day or night, daily time limit, weekly email);
• your password, stored only as a one-way scrypt code that nobody, including us, can read;
• for each sign-in, the session and the browser and network address it came from, so you can stay signed in and so we can spot misuse;
• for each child profile you create: a nickname, an animal avatar, points, badges, game results and favourite animals.

We use this to provide the account, keep your children's progress on all your devices and keep the account secure. If you choose to receive the weekly progress email, we use your email address to send it; you can switch it off at any time.

Messages you send us

When you use the contact form we keep your name, email address, the topic, your message and your language, so we can answer. We keep messages only as long as we need them to answer you and deal with any follow-up, and we regularly delete old messages.

Advertising

The site is paid for by advertisements from Google AdSense. Every ad request is tagged as coming from a site for children, so Google does not show ads based on a person's interests or past activity and does not use the visit to build a profile. Google may still use cookies or similar technology for limited purposes such as counting how often an ad was shown and fighting fraud. In Europe, the United Kingdom and Switzerland, Google's consent message asks before any such technology is used. See how Google uses information from sites that use its services (opens in a new tab).

Videos

Videos are shown with YouTube's privacy-enhanced player. YouTube receives nothing until someone taps play. Once a video plays, YouTube's own privacy policy applies to that video.

Who helps us run the site

We use a small number of trusted providers. Each one only receives what it needs and may use it only to provide its service to us:

• Cloudflare (hosting, file storage, statistics without cookies, the "are you a person?" check on forms)
• Neon (our database)
• Resend (sending account and weekly emails)
• Google (AdSense advertising, as described above)

Some of these providers process information outside your country, including in the United States and the European Union. Where the law requires it, they are bound by standard contractual protections for such transfers.

We never sell personal information, and we never share it for other companies' advertising.

Why we are allowed to use it

We use account information to provide the service you asked for; security, statistics and protection against misuse because we have a legitimate interest in keeping the site safe and working; and the weekly email and, where required, advertising technology only with consent, which you can withdraw at any time.

How long we keep it

• Account information: until you delete the account. Deleting it removes your children's profiles and progress at once.
• Sign-in sessions: they end after 7 days without use (12 hours for our team).
• Contact messages: as explained above.

Keeping it safe

Information travels encrypted (HTTPS), passwords are stored as one-way codes, team accounts must use two-step sign-in, and every change made in our admin dashboard is logged.

Your rights

You can ask to see, correct, download or delete your personal information, and to object to or limit how we use it. Signed-in parents can download all their data and delete their account themselves in the account area. For anything else, write to [email protected]; we answer within one month. You can also complain to your data protection authority, for example the Instance Nationale de Protection des Données Personnelles in Tunisia or the authority in your country in Europe.

Changes

If we change this policy, we will update the date at the top and, for important changes, tell account holders by email before the change applies.