Privacy
What this site and this game collect
The short answer is: as close to nothing as a website and an app can manage. The long answer is below, and every claim on this page is checkable.
Last reviewed 14 September 2026, against this website's own source and against the Android build linked from the download page.
This website
- No analytics. No Google Analytics, no Plausible, no self-hosted counter, no pageview beacon of any kind.
- No advertising and no tracking pixels.
- No cookies. The site sets none, so there is no cookie banner to dismiss.
- No local storage. Nothing is written to your browser.
- No third-party requests. Fonts, images, stylesheet and script are all served from this site. No font CDN, no external script host, no embedded video, no map, no social widget.
- No accounts, no sign-in, no comments, no chat.
- No forms. The site does not ask you to type anything, so there is nothing for it to receive.
- No location is requested, and no child profiles exist.
The Android build
- No permissions. The app manifest declares none at all — including no internet permission. Android will not let it open a network connection.
- No network code. There is no HTTP client, no web view and no networking library in the app.
- No analytics, crash reporting or advertising SDK.
- No account and no sign-in.
- Saves stay on the device, in the app's own storage. Settings has a Reset my progress control, behind a confirmation.
- Nothing personal is asked for. The doctor name shown in the game is a title the game gives you, not something a child is asked to type about themselves.
- Shift codes are nine characters encoding a place, a random seed and a score. They are typed by hand between people and are not sent anywhere.
The parts that are not up to us
Two things sit outside this site's control, and pretending otherwise would be dishonest.
Server logs
This site is a set of static files served by a web host. Web hosts generally keep request logs — typically the IP address, the time, the page requested, and the browser's user-agent string. That happens at the hosting layer, not in anything this site does, and it is outside our control.
If the site is served from GitHub Pages, GitHub's own privacy statement covers those logs.
The download host
The Android build is a file, and whoever serves that file will see the same kind of request metadata: an IP address, a time, and a user-agent string. If the download is hosted somewhere other than this site, that host's privacy policy applies to the download.
Nothing about the download is tied to a person, an account, or a previous visit by us.
Feedback, and what not to send
Playtest feedback is the only thing anyone is ever asked for, and only from testers the project already knows. It should be plain notes about the game.
Please do not send:
- Children's names.
- Photographs or video of children's faces.
- Voice recordings.
- Home addresses, schools, or any location.
- Medical information about anyone, child or adult.
- Any other personal information.
Anything of that kind that arrives anyway will be deleted rather than kept. Useful feedback describes what happened on the screen — not who was holding the phone.
How these claims were checked
Each statement above has a source you can check yourself.
| Claim | Checked against |
|---|---|
| No analytics, ads, trackers or third-party requests on this site | The site's own source. Every page loads one stylesheet, one script, images and fonts, all from this domain. Nothing else is referenced. |
| No cookies or local storage | The site's script sets neither. There is no other script on any page. |
| No forms and no accounts | No page contains a form element or a sign-in. |
| The app declares no permissions | The Android manifest of the linked build. It contains no permission entry of any kind. |
| The app has no network access | The same manifest — without the internet permission Android blocks network use — and the app's source, which contains no HTTP client, web view or networking library. |
| Saves stay on the device and can be erased | The app stores progress in its own on-device storage, and Settings offers Reset my progress behind a confirmation. |
| Server and download logs | Not verifiable by us. Stated as what web hosts generally do, rather than as a promise. |
If a future build changes any of this, this page changes with it, in the same release. A claim that cannot be checked will be removed rather than softened.