Cookies & Analytics Notice

This notice covers our website and grown-up areas. Our analytics rule is: For analytics, nothing is sent from children's screens except the anonymous counts described below — see What We Record About Your Child. Our own server receives anonymous counts of starting checks begun after warm-up and starting checks finished, and how often practice voice heard an answer or asked to say it again, as daily totals, with nothing that identifies anyone. Crash reports contain only the type of error, where in our code it happened and which kind of page, never names, answers or anything you typed, plus an allowlisted technical code if available, app version and time. Practice saved on the device, consented family backup and classroom rounds are described on the child-data page. Starting-check counts carry a random delivery key used only for retries, the event type and the New Zealand calendar day, with no cookies, referrer or visitor or device ID. Delivery receipts expire after eight days and are removed by scheduled cleanup. Voice requests carry only totals of answers heard, requests to say it again, and answers accepted using the expected-answer confidence check, with no identifiers, audio or answers.

Our own server also receives anonymous daily visit counts from the home and Sprint marketing pages, whether or not you allow analytics. They use the same event type, New Zealand day and one-delivery retry key described above, with no cookies, referrer or visitor ID, and never go to PostHog.

Strictly necessary (always on)

Sign-in session (Clerk), a child's Play Code sign-in on their device, security/anti-fraud, your consent choice itself, a short-lived cookie that lets the help chat follow your conversation, practice saved on the device, and the preferences needed for features you choose, such as display settings. Sign-in and practice need their storage; preference storage remembers your selections.

Analytics (your choice)

With your consent, we use PostHog Inc., which processes this analytics data in the United States through our own domain, on adult pages to understand what's used, what's confusing, and what's broken: page views, clicks, and the steps people take, such as going from the pricing page to checkout. Browser analytics includes a random visitor ID, browser and device information, and page addresses without query strings; page text and element attributes are masked. A few events sent from our server, such as a purchase, also carry your account's ID. Purchase events can include the plan, currency, amount and discount, never card details or payment identifiers. With your consent we also remember in your browser how you first reached us (the campaign link, if there was one, and the first page you landed on) and keep that with your purchase. Nothing goes to PostHog until you allow it, and declining removes that first-visit record. We don't use session replay or record your screen. PostHog's Discard client IP data setting is on. We use US Cloud on the free plan with one project. BladeMind and PostHog have signed a data-processing agreement, dated 14 October 2026. Its public terms describe international-transfer provisions; they do not establish safeguards equivalent to New Zealand's Privacy Act. You can ask us about overseas processing through the Tell us form.

On marketing and grown-up pages, if you allow adult-page analytics, we also save pending anonymous count deliveries in this browser so they can be retried after a connection problem or a later visit. Pending counts expire after seven days and are removed the next time a marketing or grown-up page checks the queue. Each saved delivery contains only its event type, a random key for that delivery and the time it was created. The delivery key is not a visitor or device ID. If you choose "Essential only", pending counts are retried in memory and are not saved to browser storage. Withdrawing analytics consent clears the saved pending counts when the choice is handled on a marketing or grown-up page. Children's pages do not read, write or restore this outbox. Anonymous count requests carry no cookies or referrer and do not go to an analytics company.

We use PostHog's free plan. Its pricing page, checked on 14 October 2026, lists one year of event and metadata retention for free plans. That is not a promise that every event is deleted exactly after one year. Changing your cookie choice stops new browser analytics but does not remove events already sent. Ask us to delete them and we will request deletion from PostHog.

We have signed PostHog's data-processing agreement, dated 14 October 2026, and turned off its AI training on anonymized data and third-party AI features. The training opt-out applies to future use; it does not undo earlier training.

The queue restriction applies to routine child counting. If a grown-up explicitly opens Cookie settings on a learner page, choosing Essential only can clear pending adult counts saved by an earlier grown-up visit.

Decline and everything still works — we just learn less.

Managing your choice

Change your mind anytime via "Cookie settings" in the footer. Analytics starts unticked: Essential only, or Save choice without ticking it, keeps analytics off. Declining stops new browser analytics immediately, clears pending saved counts and removes the first-visit record on adult pages. Purchase events use the choice saved when checkout opened: a delayed payment confirmation can still send an event if you allowed analytics then, even after you change your browser choice. Changing this choice does not delete analytics already sent. The storage periods below describe this browser, not how long PostHog keeps received events; our database cleanup does not delete PostHog events.