We collect as little as possible.

• We store your name, email address, an optional username, your language, and your notification choices.
• Your password and 4-digit parent PIN are stored only as secure one-way hashes (Argon2id). We can't read them, and nobody at Creativerse can tell you what they are.
• We email you a link to confirm your address. Until it's confirmed, kid/teen accounts can't be linked to you.

• We store a creator nickname, an age group (not a birthday), an illustrated avatar, a username and a hashed password, the language they chose, and their interests.
• We also store what they make (stories, characters, worlds, games), their reading and playing progress, bookmarks and saved books, badges, and daily time used (to apply limits).
• Players under 13 must give a parent or guardian's email. We email that grown-up to ask for their OK, and until they approve, the account stays private: no sharing, no AI helper and no reactions. If they decline, the account is deleted straight away; if nobody approves within 30 days, it is deleted automatically.
• For teens (13–17) an email address is optional. It is only used for password resets (after it has been confirmed) or, if they choose, to ask a grown-up to link the account.
• We never ask kids or teens for their real name, phone number, photos, voice recordings, location or school.
• Other creators can only see a nickname, an avatar and creations that were shared and checked by a moderator. Age groups and emails are never shown to other families.

⚖️ Needs legal review: under-13s now need a grown-up's approval by email, but teens aged 13–17 can still create an account on their own. Some EU countries set the age of digital consent at up to 16, and the approval method (an emailed link) must be confirmed as sufficient for each market before launch.

• A parent or guardian can link a kid/teen account with a one-time code the child makes, or with the child's username and password.
• Once linked, the grown-up can see the child's creations, reading and playing activity and time used, and can set limits, sharing, the AI helper and unlock approvals.
• Parent-zone settings are protected by the parent PIN and checked on our server, not just on the screen.

• When someone uses the AI helper, the request (and, for story help, a short summary of the story, characters and world they are working on) is sent from our server to Anthropic, which provides the Claude AI model. It is never sent directly from the browser, and our AI key never reaches the browser.
• We don't keep the text of AI conversations. We log which tool was used, whether a safety filter blocked it, and how many tokens it used, so we can keep it safe and control costs.
• Grown-ups can turn the AI helper off for each child.
• Anthropic's own handling of data sent to its API is described in Anthropic's privacy policy and commercial terms.

⚖️ Needs legal review: the data-processing terms with Anthropic and the disclosure required for sending children's content to an AI provider.

• We send emails only from no-reply@creativerse.online, for account reasons: confirming an email address, resetting a password, telling you when a password or email was changed, and linking a child.
• Password reset links and codes expire after 15 minutes and work only once. Email confirmation links expire after 3 days.
• We don't send marketing emails, and we don't share email addresses with advertisers.

• One essential cookie keeps you signed in. It is secure and HTTP-only, so page scripts can't read it, and it expires after 30 days. Signing out ends it.
• Your browser's local storage remembers small display choices, such as the account type you picked, text size, contrast and language.
• We don't use advertising or tracking cookies. To count visits, we use Cloudflare Web Analytics, which sets no cookies, doesn't follow anyone across other websites and doesn't build profiles. It records the page visited, the site you came from, and your country, device type and browser, and only shows us totals. It isn't loaded on the pages opened from our email links.

Creativerse shows no ads, doesn't build advertising profiles, and doesn't sell anyone's personal information. Nothing on Creativerse costs money right now — items that need a grown-up's OK are unlocked for free once approved.

• Hosting, the database and our email mailbox are provided by Hostinger.
• The AI helper is provided by Anthropic (see above).
• Anonymous visit counts are provided by Cloudflare Web Analytics (see Cookies and storage).
• Kid-friendly research results come from a short list of trusted reference sites, fetched through the AI helper.

⚖️ Needs legal review: the legal entity responsible for Creativerse, contact details for privacy requests, where data is stored, and international transfer safeguards.

• All traffic uses HTTPS. Passwords, PINs, sign-in sessions, reset links and link codes are stored only as hashes.
• Sign-in, password reset and other sensitive actions are rate-limited. Changing a password signs out your other devices.
• Who can see or change what — family data, sharing, moderation — is checked by our server on every request.
• We keep a short security log of account actions (for example "changed password") and the device type of each sign-in session, to protect accounts and investigate problems.

• Grown-ups can download all of their family's data from Parent zone → Settings → Your family's data.
• Grown-ups can delete a child profile, or the whole family account, at any time. This removes the profiles, their creations, progress, reactions, AI usage records, sign-in sessions and their security log entries. Only a note that an account was deleted is kept.
• Kids and teens without a linked grown-up can delete their own account from their menu → Password & email.
• You can change the AI helper, sharing and notification choices whenever you like.

⚖️ Needs legal review: how long the security log and moderation decisions are kept, and the process for access and deletion requests made by email.