Privacy
We store as little as the site needs to work, and you can delete all of it yourself.
Without an account
You can read every story and lesson, listen, play the games and take the quizzes without telling us anything. Your reading progress is kept in your browser's local storage on your device only. We run no analytics and no advertising, and we set no tracking cookies.
Parent accounts
A parent signs in with an email address. We store that address, the name you give, a family code, and the lesson progress you mark complete. Sign-in links are single use and expire after fifteen minutes; we keep only a hash of each link. Emails are sent through Resend, our email provider, and contain nothing but the sign-in link. To slow down abuse we also keep, for one hour, a hashed copy of the network address behind sign-in and family-code requests, and a record of each active session.
Children's accounts
A child's account holds a first name, an emoji avatar, a hash of the four-digit PIN (never the PIN itself), stars, badges, daily habit ticks and story quiz results. Children have no email address and no password. A child's account is created and deleted only by the parent.
Cookies
Signing in sets a session cookie: hl_p for a parent and hl_k for a child. They are HttpOnly and Secure, and they carry a random token, not your details. Two small companion cookies, hl_p_on and hl_k_on, only tell the page that a session exists so it can show the right links. Signing out removes them.
Where it is kept
Everything is stored in Cloudflare's D1 database and served from Cloudflare's network. Fonts are loaded from Google Fonts, so Google sees your IP address for those requests, as with any web request. We never sell or share the data. Cloudflare, Resend and Google Fonts process only what their service needs to run, as described above.
Deleting it
A parent can remove any child from the parent dashboard. To remove everything, open the parent dashboard and choose Delete my account: the parent record, every child, their stars, badges, habits and quiz results, and the parent's lesson progress are deleted at once, and both session cookies are cleared. Local storage on your own devices can be cleared from the browser.
Last updated 2026-09-04.