Privacy Policy
How Kepler's Lab handles information.
DRAFT - pending legal review. This page is a working skeleton, not a final legal document.
The short version. Kepler's Lab is built local-first: games, progress, and student profiles live on your device by default. We collect aggregate, anonymous usage statistics (see Analytics below); we never sell personal information, and we never share it with advertisers or data brokers, and no child-facing account exists. An optional birthday on a student profile powers age-appropriate sign-in guidance and is visible only to the parent.
Our data promise. We never sell your data, and we never share it with advertisers, data brokers, or partners - not ever. Your information is used only to run and improve this app and to communicate with you about it. The only outside hands it passes through are the service providers who help us operate it (for example, the email service that delivers your sign-in link), and only for that job.
What stays on your device. Student names, optional 4-digit profile codes, game progress, journal entries, favorites, and settings are stored in your browser on your device. Clearing browser storage removes them.
What syncs when a grown-up signs in. If a parent signs in, game progress and journal entries sync to their account so reports work across devices. Accounts are intended for adults. [DRAFT NOTE: age-screening on account creation is an open item for legal review.] A child's own sign-in, when a parent allows it, is always linked to the parent's account.
Analytics. We measure aggregate usage (which pages and games get used) to improve the product. Analytics run in cookieless mode: nothing is stored in the browser and no individual profiles are created. We do not run advertising, and we do not track users across other websites.
Children's privacy. No child-facing sign-up exists. Child profiles are created and managed by the parent account. [DRAFT NOTE: COPPA direct-notice and consent language to be completed in legal review.]
Your choices. You can use everything without an account, delete local data by clearing browser storage, and ask for your account data to be exported or deleted via the contact page.
Contact. Questions about privacy: use the contact page.