WonderkidLast updated: 31 July 2026
Wonderkid ("we", "us") is operated by Nicola Di Rende. This page explains what personal data Wonderkid collects, why, how long we keep it, and how you can control it. It covers both the game (game.wonderkid.space) and this website (wonderkid.space).
We run our own servers. We do not use any third-party analytics, advertising, or crash-reporting service, and we do not sell or share your data with advertisers.
Data we collect
If you sign up on this website
When you sign up on this website, we store the email address, first name, last name, and username you type in, plus a few technical details from the form: where you came from (referrer), your browser's user agent, your browser's language, and — only if the site is configured to do so — a one-way salted hash of your IP address, never the address itself. If that configuration isn't set, we don't store anything IP-related at all.
Signing up here also creates your game account, so the same email address and username are passed to the game server and stored there too — see the section below for what that means. You'll get one email with a link; the account has no password until you pick one behind that link, and picking it is also how we confirm the address belongs to you. We keep the website entry until you ask us to delete it.
If you asked to join the Android test
The Android version was distributed through a closed test on Google Play until August 2026, when the app went public — the test is over and the form that fed it is gone. If you asked to join while it ran, we stored the email address and first name you gave us, the same technical details listed above, and whether that address looked like a Google account, and we sent a confirmation email first: an address nobody had confirmed would have taken up one of a fixed number of tester places.
We pass that email address to Google. There is no other way for Google Play to recognize you as a tester — Play matches testers by their Google account address and by nothing else. Google's handling of it is covered by Google's own privacy policy, not this one. If you'd rather not, the browser version needs nothing from Google and gives you the whole game.
If you ask to be told about the iPhone version
The home page has a one-field form for people who want the iOS version. We store the email address you type and the same technical details listed above — nothing else, and no confirmation email. It is used for exactly one thing: one email, once, on the day the iPhone version is out. Ask us and the row gets deleted before that.
We keep the entry until the test ends or you ask us to delete it, whichever comes first. Removing you from the tester list in Play Console is a separate action we take at the same time.
If you create a game account
We store your username, display name, email address, and password. Your password is never stored as plain text — we store a salted Argon2id hash of it, a one-way cryptographic function that cannot be reversed. When you register or change your password, we check whether it has appeared in a known public data breach, using a third-party breach-check service; only a truncated, irreversible fragment of your password's hash is ever sent for that check — never your actual password, email, or any other identifying data.
We store your save data (your game progress) so you can continue where you left off, and a record of your login sessions (timestamp, IP address, the version of the app you are running, and a description of the client itself — on the web your browser's user agent, and in the app the operating system version, the screen size, and the text size you have set in your device settings), which we use to secure your account, to know which build a problem comes from, and to help with support requests. Session records are kept for as long as your account stays active, and are deleted if you delete your account.
We also record gameplay telemetry — which screens and actions you use — tied to your account, so we can find bugs and understand how the game is played. This is deleted automatically after 30 days. If the app crashes or errors, we keep a technical error report (with your account ID, not your name) for 90 days to help us fix it.
Cookies
The game uses exactly one cookie: an authentication cookie that keeps you logged in. It cannot be read by any script (it's "HTTP-only") and is only ever sent to our own login system. We do not use advertising or analytics cookies, and we do not track you across other websites.
Your rights
You can export a full copy of your account data, or permanently delete your account and everything tied to it, at any time from inside the game (Settings). Account deletion is immediate and cannot be undone.
You also have the right, under GDPR and similar laws, to ask us to correct inaccurate data, to object to or restrict how we use your data, and to lodge a complaint with your local data protection authority. For any request you can't complete yourself in-app, write to info@wonderkid.space.
Delete your account
To delete your Wonderkid account: open the Wonderkid app, go to Settings → Delete account, enter your password to confirm, and tap Delete. This takes effect immediately and cannot be undone — there is no recovery period.
Deleting your account permanently removes your username, display name, email address, password, save data, session records, gameplay telemetry, and crash reports. Nothing about you as a player is kept afterwards, and no additional retention period applies beyond that — data that was already scheduled to expire under the table below (for example, a crash report from last week) is simply removed early rather than kept out its normal window.
If you can't access the app to do this yourself, write to info@wonderkid.space from the email address on your account and we'll delete it for you.
How long we keep things
| Data | Kept for |
|---|---|
| Website signup entry | Until you ask us to delete it |
| Android tester request, unconfirmed | 30 days after the confirmation link expires |
| Android tester request, confirmed | The test ended in August 2026; kept until you ask us to delete it |
| iPhone interest entry | Until the iOS launch email is sent, or you ask us to delete it |
| Game account, saves, session records | While your account is active; deleted on account deletion |
| Gameplay telemetry | 30 days |
| Crash/error reports | 90 days |
| Server logs | 30 days |
| Admin action records (audit log) | Indefinitely — this is a record of what administrators did, kept for accountability, and does not describe players |
Children
Wonderkid is not directed at children under 13, and we do not knowingly collect personal data from children under that age. If you believe a child has created an account, contact us at info@wonderkid.space and we will delete it.
Changes to this policy
If we change how we handle your data, we'll update this page and change the "last updated" date above.
Contact
Questions about this policy or your data: info@wonderkid.space.