Last updated 28 September 2026
| What | Why | Where |
|---|---|---|
| The first name your child types | So Pip can greet them | This browser only |
| Progress, stars, streaks and rewards | So the game remembers where they are | This browser only |
| Settings such as language, sound and quiet mode | So choices stick | This browser only |
Without a parent account none of this is sent to us. To erase it, open You in the game and choose Start over, or clear this site's data in your browser settings.
When the Star Steps page loads, our server adds one to a tally for that day and country. The tally records the date and a two-letter country code. It does not record a name, an IP address, a device identifier or a cookie, so it cannot tell who opened the app or link one visit to another.
The site is served by Netlify. Like every web host, Netlify receives each visitor's IP address in order to deliver the page and may keep it in its own server logs for security and operations, under Netlify's privacy policy. We do not use those logs to identify anyone.
Star Steps is made for children aged 5 to 12. We do not ask children for an email address, a photo, a location or any other personal information, and we do not show them advertising. Plans, settings and the parent area sit behind a question meant for grown-ups, and only a parent can create an account or buy a plan.
A parent account is optional. It is for a parent or legal guardian aged 18 or older, who creates it and adds the children. Because the parent sets up each child profile, the parent gives consent for the little we keep about that child.
| What we store | Why | Kept until |
|---|---|---|
| Parent email and password (the password is stored only as a secure hash) | To log in, and to send account and billing emails | The account is deleted |
| Each child's first name and grade | So each child has their own profile and path | The profile or account is deleted |
| Each child's game progress: stars, crowns, streaks, settings and which questions were missed | So progress is saved and works on every device | The profile or account is deleted |
| Plan details: which plan, its status and renewal date, and the Stripe customer number | To give your family the plan you pay for | The account is deleted; payment records are kept as tax law requires |
We do not use children's information for advertising, profiling or anything other than running Star Steps for your family. Account emails are only about your account and plan: confirming your email, password resets, trial and payment notices. No marketing.
Paid plans are handled by Stripe. You type your card details on Stripe's secure page; we never see or store your full card number. Stripe tells us the plan, its status and the last payment result.
We use a few service providers, each only for its job and under its own privacy terms: Netlify (hosting the site), Supabase (the account database, hosted in Canada), Stripe (payments) and Resend (sending account emails). None of them may use your family's information for their own purposes.
Everything travels over encrypted connections. Each family can only ever read its own data: the database enforces this on every request. Passwords are checked against known data breaches when they are set.
In the parent area you can see each child's progress, change a name or grade, remove a child, download all of your family's data as a file, and delete your account. Deleting the account removes the parent account, every child profile and all progress straight away, and cancels any plan. Progress saved on a device stays there until you choose Start over or clear the browser's data. You can also email us to ask for any of this.
Questions about privacy: reply@zeroorigine.com. Star Steps is looked after as part of ZeroOrigine.