← Back to Browse
Privacy Policy
Last updated: April 2026
What we collect
When a parent signs in with Google, we store:
- Google account name and email address
- Child profile information you create (nicknames, age bands, content preferences)
- Browsing history (which articles each child visits)
- A hashed version of your parental PIN (we never store the PIN itself)
What we do NOT collect
- We do not track children's personal information beyond their nickname and age band
- We do not sell, share, or transfer any data to third parties
- We do not use data for advertising or marketing
- We do not use tracking cookies beyond what is needed for your login session
- We do not collect location data, device identifiers, or contact information from children
How we use your data
Your data is used solely to:
- Remember your login session so you don't have to sign in every visit
- Apply age-appropriate content filters based on the reading level you set
- Show browsing history so parents can see what their children are reading
- Personalise the experience (bookmarks, streaks, badges)
Cookies
Nepedia uses a single session cookie to keep you logged in. This cookie is:
- Encrypted and tamper-proof (signed with a secret key)
- Marked as HttpOnly (cannot be read by JavaScript)
- Marked as Secure (only sent over HTTPS)
- Set to SameSite=Strict (not sent with cross-site requests)
We also use Google Analytics to understand how many people visit the site. This is anonymous aggregate data.
Deleting your data
You can delete your entire account at any time from the Settings page. This permanently removes:
- Your parent account and login information
- All child profiles and their preferences
- All browsing history
To delete your account: Settings → scroll to bottom → "Delete My Account"
Data storage
All data is stored in a secured database hosted on Amazon Web Services (AWS) in the Sydney, Australia region. Connections are encrypted in transit. Access is restricted to the application only.
Guest users
If you use Nepedia without logging in, no personal data is collected or stored. Guest users can browse articles at the youngest reading level (ages 5-7) without creating an account.