Privacy, in plain words

The short version

• You can only get in via an invite. The site isn't searchable or open.
• We collect the minimum needed to run the app: your account, the code you write, and your chats with Ren.
• Your chats with Ren — and any comments your kid leaves on a friend's shared game — go to Anthropic (chats to power Ren, comments to be safety-checked before another child sees them). They're contractually barred from training on them.
• If your kid asks for an AI-drawn background or sprite, the short description they type is safety-checked, then sent to OpenAI to draw the picture. That's the only thing OpenAI ever receives.
• No ads, no tracking pixels, no third-party analytics. No selling data. Ever.
• You (or a grown-up) can delete your account and everything in it at any time.

What we collect

Your account

Kids join via an invite link and pick a display name, a username, and a password — no email address required or stored. Grown-ups have a display name, an email address, and a password. In both cases the password is stored hashed (bcrypt) so we never see it in the clear. If a grown-up invited you, we record who.

The code you write

Every project file you save, in your account. It's yours. You can rename, delete, or export it.

Your chats with Ren

The conversation thread is kept in your browser. The most recent turns plus the current code are sent to Anthropic each time you press Send, so Ren has the context to help. Anthropic processes them to answer; they don't train on them and don't keep them long-term (see their privacy policy).

Comments on shared games

When your kid leaves a comment on a friend's shared game (or receives one), we store the text, who wrote it, when, and the outcome of the AI safety check. Comment text is sent to Anthropic (Haiku) for that check — same terms as Ren's chats, no training, not kept long-term. Your kid (and the admin) can hide any comment.

AI-drawn pictures (backgrounds and sprites)

When your kid uses a Generate button, we store the description they typed and the resulting picture in their account (a generated sprite becomes editable pixel art in their library). The description — nothing else — is first safety-checked by Anthropic (Haiku), then sent to OpenAI's image model to draw. OpenAI doesn't train on API data under their terms. Generations are capped per child per day.

Lesson progress

Which lessons you've finished, so the right next one unlocks.

AI usage counters

Tokens used and approximate cost per request — visible only to the site admin, used to keep the bill in check.

Standard server logs

IP address, browser type, the URL you requested, the time. Rotated daily and kept for up to about eight weeks for security and debugging, then automatically deleted.

What we don't do

• No advertising. None. No third-party ad pixels or tracking cookies.
• No analytics services (Google Analytics, etc.) — no behavioural tracking.
• No selling, renting, or sharing personal data for marketing.
• No public profiles, no discovery, no DMs. Kids in the circle can leave comments on each other's shared games (those comments are AI safety-checked before they appear), but there is no general messaging surface, and no one outside the circle can see anything.
• No biometric data, no location tracking, no microphone or camera access.

Who else sees the data

Just three third parties, all essential to running the service:

• Anthropic — processes chat messages and the code excerpts you send to Ren, the text of any comment your kid leaves on a friend's shared game (for the safety check), and the descriptions typed into the image Generate buttons (also a safety check). Bound by their commercial terms not to train on the data.
• OpenAI — receives only the short description your kid types when generating an AI background or sprite, and returns the picture. API data isn't used for training under their terms.
• Stripe — handles all payments. Your card number goes directly to Stripe and never touches our server; we store only your subscription status and a Stripe customer reference. See Stripe's privacy policy. Kids' accounts have no billing data at all.
• Our hosting provider — a Linux server in Sydney, Australia that stores the database and runs the site. Standard hosting; no human reads the data unless we ask them to help with a specific incident.

That's it. No marketing platforms, no CRMs, no data brokers.

Cookies

One cookie, called a "session cookie", that remembers you're logged in. It's deleted when you log out or when your browser clears it. No tracking cookies; no cross-site cookies.

Kids and grown-ups

Irenaverse is built for kids. Because of that, we take a few extra care steps:

• An invitation has to come from a grown-up who already has an account. Kids can't sign themselves up, and there's no public sign-up form.
• Kid accounts collect no email address (see "What we collect" above), so there is no inbox we (or anyone else) can reach a child at through Irenaverse.
• Grown-ups can ask to see, correct, or delete their child's data at any time. Email irenaverse@div.nz and you'll get a real human replying within a few days.

Your rights

Under the New Zealand Privacy Act 2020 (and equivalent overseas), you can:

• Access any personal data we hold about you.
• Correct anything that's wrong.
• Delete your account and everything attached to it — there's a button in your profile, or just email us.
• Export your code and lesson progress — ask and we'll send a JSON dump.

Security

The site runs over HTTPS only. Passwords are bcrypt-hashed. The database is on a managed server with daily backups. We patch dependencies regularly. If we ever discover that account data has been exposed, we'll notify affected users within 72 hours and tell you what happened, what's affected, and what to do.

Changes to this notice

If we change anything material — what we collect, who we share with, how long we keep things — we'll update this page and, for logged-in users, post a notice in the editor. The "last updated" date at the top will move.

Contact

Irenaverse is run by Tom Peck in Wellington, New Zealand. Reach us at irenaverse@div.nz for anything privacy-related. We read every email.