Privacy Policy

Our promise

Your child's privacy is paramount to us, and we are deeply particular about protecting it. Nepedia is made by a parent of young kids, for other families to enjoy — not to profit from them.

We will never mine, profile, or monetize your child's information, and we will never sell, rent, or share your data with anyone. There are no ads and no trackers following your child around the web. We collect only the bare minimum needed to run the service, and you can delete all of it at any time.

What we collect

When a parent signs in with Google, we store:

• Google account name and email address
• Child profile information you create (nicknames, reading levels, content preferences)
• Browsing history (which articles each child visits) so a parent can see it
• A hashed version of your parental PIN (we never store the PIN itself)

What we do NOT collect

• We do not track children's personal information beyond their nickname and reading level
• We do not sell, share, or transfer any data to third parties
• We do not use data for advertising or marketing — there are no ads on Nepedia
• We do not use tracking cookies beyond what is needed for your login session
• We do not collect location data, device identifiers, or contact information from children

How we use your data

Your data is used solely to:

• Remember your login session so you don't have to sign in every visit
• Apply age-appropriate content filters based on the reading level and maturity you set
• Show browsing history so parents can see what their children are reading
• Personalise the experience (bookmarks, streaks, badges)

Cookies

Nepedia uses a single session cookie to keep you logged in. This cookie is:

• Encrypted and tamper-proof (signed with a secret key)
• Marked as HttpOnly (cannot be read by JavaScript)
• Marked as Secure (only sent over HTTPS)
• Set to SameSite=Strict (not sent with cross-site requests)

We also use privacy-friendly analytics to count how many people visit the site. This is anonymous, aggregate data.

Deleting your data

You can delete your entire account at any time from the Settings page. This permanently removes:

• Your parent account and login information
• All child profiles and their preferences
• All browsing history

Data storage

All data is stored in a secured database hosted on Amazon Web Services (AWS) in the Sydney, Australia region. Connections are encrypted in transit. Access is restricted to the application only.

Guest users

If you use Nepedia without logging in, no personal data is collected or stored. Guest users can explore articles at the Early Reader level, with all sensitive topics safely hidden, without creating an account.