Khadija's World Privacy Notice
Version 1.1 — effective 1 August 2026
This notice describes the current product implementation. It is not a certification of legal compliance.
What works without sending play data
The game does not require an account and does not include advertising or analytics. Normal play, saved progress, settings, and familiar neighborhood replies stay in the browser by default.
Optional Smarter replies
A grown-up must enable this feature. An unknown typed message, the selected character, the current room, and limited conversation context are sent through the game's same-origin Cloudflare function for moderation and reply generation. Project logging records technical outcome categories and timing and is designed not to log message or reply text.
Optional encrypted cloud saves
A grown-up may create a sync code. Encryption happens in the browser before upload. Cloudflare D1 stores the encrypted save envelope, revision information, and technical device identifiers. The raw sync code and readable world JSON are not sent to the server.
Storage and deletion
Local progress remains until it is reset, browser storage is cleared, or the browser removes site data. A connected encrypted cloud copy remains until a grown-up deletes it from Grown-Up Controls. Platform operational logs may follow the hosting provider's configured retention.
Children and safe use
Do not enter real names, addresses, school details, passwords, contact information, or other personal information in NPC chat. Grown-ups control optional online features and their usage allowances.
Support
Questions or deletion problems can be reported through Khadija's World project support.