WonderkidLast updated: 31 July 2026
Wonderkid ("we", "us") is operated by Nicola Di Rende. This page explains what personal data Wonderkid collects, why, how long we keep it, and how you can control it. It covers both the game (game.wonderkid.space) and this website (wonderkid.space).
We run our own servers. We do not use any third-party analytics, advertising, or crash-reporting service, and we do not sell or share your data with advertisers.
Data we collect
If you join the early-access list
When you sign up on this website, we store the email address, first name, last name, and username you type in, plus a few technical details from the form: where you came from (referrer), your browser's user agent, your browser's language, and — only if the site is configured to do so — a one-way salted hash of your IP address, never the address itself. If that configuration isn't set, we don't store anything IP-related at all.
We send a confirmation email before you're counted as signed up (double opt-in). If you never confirm, we delete your entry automatically 30 days after the confirmation link expires. Once confirmed, we keep your entry until we act on it (invite you) or until you ask us to delete it.
If you create a game account
We store your username, display name, email address, and password. Your password is never stored as plain text — we store a salted Argon2id hash of it, a one-way cryptographic function that cannot be reversed. When you register or change your password, we check whether it has appeared in a known public data breach, using a third-party breach-check service; only a truncated, irreversible fragment of your password's hash is ever sent for that check — never your actual password, email, or any other identifying data.
We store your save data (your game progress) so you can continue where you left off, and a record of your login sessions (timestamp, browser user agent, and IP address), which we use to secure your account and help with support requests. Session records are kept for as long as your account stays active, and are deleted if you delete your account.
We also record gameplay telemetry — which screens and actions you use — tied to your account, so we can find bugs and understand how the game is played. This is deleted automatically after 30 days. If the app crashes or errors, we keep a technical error report (with your account ID, not your name) for 90 days to help us fix it.
Cookies
The game uses exactly one cookie: an authentication cookie that keeps you logged in. It cannot be read by any script (it's "HTTP-only") and is only ever sent to our own login system. We do not use advertising or analytics cookies, and we do not track you across other websites.
Your rights
You can export a full copy of your account data, or permanently delete your account and everything tied to it, at any time from inside the game (Settings). Account deletion is immediate and cannot be undone.
You also have the right, under GDPR and similar laws, to ask us to correct inaccurate data, to object to or restrict how we use your data, and to lodge a complaint with your local data protection authority. For any request you can't complete yourself in-app, write to info@wonderkid.space.
Delete your account
To delete your Wonderkid account: open the Wonderkid app, go to Settings → Delete account, enter your password to confirm, and tap Delete. This takes effect immediately and cannot be undone — there is no recovery period.
Deleting your account permanently removes your username, display name, email address, password, save data, session records, gameplay telemetry, and crash reports. Nothing about you as a player is kept afterwards, and no additional retention period applies beyond that — data that was already scheduled to expire under the table below (for example, a crash report from last week) is simply removed early rather than kept out its normal window.
If you can't access the app to do this yourself, write to info@wonderkid.space from the email address on your account and we'll delete it for you.
How long we keep things
| Data | Kept for |
|---|---|
| Unconfirmed early-access signup | 30 days after the confirmation link expires |
| Confirmed early-access signup | Until we invite you or you ask us to delete it |
| Game account, saves, session records | While your account is active; deleted on account deletion |
| Gameplay telemetry | 30 days |
| Crash/error reports | 90 days |
| Server logs | 30 days |
| Admin action records (audit log) | Indefinitely — this is a record of what administrators did, kept for accountability, and does not describe players |
Children
Wonderkid is not directed at children under 13, and we do not knowingly collect personal data from children under that age. If you believe a child has created an account, contact us at info@wonderkid.space and we will delete it.
Changes to this policy
If we change how we handle your data, we'll update this page and change the "last updated" date above.
Contact
Questions about this policy or your data: info@wonderkid.space.