SPELLCLIMB
DRAFT — not final legal text. This page is published only so our children's-privacy lawyer can review it in place. It is not in force, and bracketed decisions in the source draft are still open.
Family privacy notice
SpellClimb is a spelling practice game. An adult creates climbers (child profiles). A child never creates an account and never logs in with an email. Each climber has a made-up gamertag, an age band (for example 8–10, never a birthdate), and a secret token on the device that lets the game save progress.
What we hold
- Your account: your email address, so we can send sign-in links and run your account.
- Each climber: gamertag, age band, market (country setting for spelling and notices), game settings (competition level, sound, timed mode), and which class they belong to if a teacher added them.
- Spelling progress: which target words were tried, whether each was right, the game mode, and ability summaries (current level, steadiness, words secure/due, tricky spelling families). We do not store your child's real name, email, birthdate, photo, voice, typed misspellings, or a replay of their keystrokes. There is no chat.
- Consent records: who agreed, for which climber and purpose, in which market, how, which notice version, when it expires (12 months), and if it was withdrawn.
- Link and erasure records: if you link a school climber, we keep the link record. If erasure is requested for a school climber, we keep the request until the school retention period ends, then a deletion record (a code, not the child's details, plus how many progress rows were deleted).
Why we hold it (three separate choices)
- Learning core — running the game, choosing suitable words, saving progress and showing summaries. Needed for a home link.
- Keystrokes (typing patterns) — the built system stores per-word right/wrong results and summaries; it does not store raw keystrokes.
- Research — off unless you clearly agree.
Each choice is separate. Nothing optional is pre-ticked. Refusing the learning core for a school climber means no home link; the climber stays school-only.
Who sees what
You see summaries for your own and linked climbers. A teacher sees summaries only for their own classes (never live typing). A school sees its classes and counts. Reviewers see uploaded words waiting for checks, not children's progress. Nobody sees raw keystrokes, because none are stored.
How long we keep it
Progress is kept while the climber exists. Consent lasts 12 months, then must be renewed or collection stops. If you ask to delete a family climber, deletion is immediate. A school climber is deleted after the school's retention period (shown at request; default 30 days). Some records are kept after deletion to prove what happened (audit, erasure and consent proof).
Your choices
You can see your climber's progress, export it, change or withdraw each consent choice, and ask for deletion at any time from the family pages.