Your data: what and why
What we collect, why we collect it, where it’s kept and what you can do about it.
Last updated 3 November 2026
Who is responsible
The data controller is the operator of Learntokiz. Email: [email protected]. You can also use the contact form.
What we collect
Only here to play? We don’t ask for your name and keep nothing about you. The site has no advertising or analytics trackers.
| When | What we hold | Why |
|---|---|---|
| You sign up with email | First and last name, screen name, email address, date of birth, a password (kept only as a one-way hash), sign-up date, last sign-in, failed-attempt count and any lock time, plus when you accepted the Terms and Privacy Policy. | To run your account, confirm you are 18+ and keep it secure. |
| You sign in with Google | Your name, verified email and Google account ID, as supplied by Google and checked by our server. We then ask for a screen name and date of birth. | To sign you in and confirm you are 18+. |
| You contact us | Your name, email address, topic and message. | To read your message and reply. |
| You ask for a password reset | Your email and a single-use reset code (kept as a hash, valid for one hour). | So that you can choose a new password. |
| You sign in or send any form | A short-lived counter linked to a one-way hash of your IP address. | To stop spam and password guessing. Counters expire by themselves. |
We never request or keep card or bank details, and nothing you give us is used for advertising or profiling.
Where it is kept
- Accounts are stored on our web server as protected files that cannot be opened from the web. There is no separate database. They remain until you delete your account or ask us to remove it.
- Messages sent through our forms are emailed by our server, using an email delivery service (SMTP), to our support inbox. We also keep a protected delivery log containing only the date, result, form used and any technical error, with no names, email addresses or message text.
- In your browser we store your age answer, your cookie-notice choice and the time your visit began (for the timer), plus a sign-in cookie when you log in or use a form. See the Cookie Policy.
- Our hosting provider may keep routine technical logs (such as IP address and requested page) for security and operational purposes.
Who else handles it
- Email delivery service. Sends the messages from our forms and password-reset emails.
- Google Sign-In. Used only when enabled and chosen by you. Loading the Google button on the sign-in and sign-up pages connects your browser to Google, whose privacy policy then applies.
- The games. Games load inside our pages from files hosted on learntokiz.com and may use your browser’s storage to work. We receive no payment or identity details from them.
- Hosting provider. Hosts and delivers the site.
We never sell personal data.
How we use it
- Operating and securing your account.
- Confirming that you are 18 or over, as the site is for adults.
- Replying to your messages and requests.
- Preventing abuse of the site and its forms.
Your choices and rights
Depending on where you live (for instance under the GDPR, the UK GDPR or US state privacy laws), you may have the right to access, correct or erase your data, object to or restrict its use, receive a copy, or complain to a data protection authority. You can delete your account yourself at any time on the account page, which removes it from our server. For anything else, please use the contact form.
Children
The site is intended for adults aged 18 and over, not children. If you think a child has given us information, contact us and we will delete it.
Changes to this policy
If we change this policy, we will update this page and its date.