Privacy & children’s privacy notice

You can read every page, play every simulation and finish every lesson on this site without an account, and we do not run analytics, advertising or third-party tracking scripts. If you choose to sign in — with Google, or with Apple in the iOS app — we save your XP and day streak so they follow you between devices; that is the only reason an account exists, and the only personal data we hold.

• If you sign in. We ask Apple or Google for a name and an email address, and nothing else. Google also sends a profile picture, which appears on your own account row and nowhere else. Sign in with Apple lets you hide your real address, and if you do we only ever see the relay one — nothing here needs to reach you by email. Sign in with Apple is offered in the iOS app only, so an account made with it cannot be opened on the website. We store the name against your progress, and the address is held by our authentication provider so you can sign back in.
• Your progress, once signed in. Total XP, your day streak, the date of your last completed lesson, and for each lesson your best score, how many times you have finished it and when. No answers, no timings, nothing about how you played.
• Server logs. Our host records standard request logs — IP address, timestamp, requested path, user agent — to keep the service running and to block abuse. These are retained for 30 days and then deleted.
• Nothing from the simulator. The slider, the readouts and the lending chain all run in your browser. Your inputs are never sent to us.

• No cookies for advertising, profiling or cross-site tracking.
• No analytics or session-recording services.
• No home addresses, phone numbers or card details. We never ask for a password: Apple and Google handle sign-in, so there is none for us to hold.
• No selling, renting or trading of any data, ever.

OpenMacro is written for young adults and kids, so we treat children’s privacy as a design constraint rather than a policy page.

• No account is needed to learn. Every lesson, on the site and in the app, plays in full without signing in, and while you are signed out progress stays on the device and is never uploaded.
• Signing in is optional, and we ask the provider for a name and an email address and nothing else. Neither Apple nor Google tells us how old anyone is, so sign-in is not an age check and we do not treat it as one. What protects a child here is that there is nothing to collect: no advertising, no profiling, no free-text field, and no way to reach another person from inside the product. Where a child does sign in, a family-managed Apple ID or a Google Family Link account exists only with a parent’s approval.
• We do not knowingly collect personal information from children under 13. If you believe a child has signed in, write to privacy@openmacro.org and we will delete the account and everything attached to it.
• MacroXP and MintBucks are a learning score. They are not currency and cannot be bought, exchanged or transferred. There is no purchase path anywhere in the product.
• Skill credentials are issued only when a learner asks for one, and for anyone under 13 only with a parent or guardian. We do not publish a child’s attainment, name or identifier to any public ledger or third-party registry.
• A parent or teacher can choose to pay a learner in euros (EURC) for the XP and active time they earn. Only for those learners do we record the minutes they were active on the website and the payout address they enter, and we send each withdrawal from the wallet that funds it. Payments on the blockchain are public. All of this happens on the website only, entry is always free, and nothing in the product is a wager.
• There is no advertising, no in-app purchasing, and no chat or other child-to-stranger communication anywhere in the product.
• No proof of identity is required to ask for a deletion, and we never ask a child to prove anything before honouring one.

The website runs on Google Cloud Run. Accounts and progress are stored with Supabase, in their West EU (Ireland) region — learner data does not leave the EU. Sign-in itself is handled by Apple and by Google, whichever you chose.

Every row is protected by database row-level security keyed to your account, so one learner cannot read another’s progress, and the key shipped in the website can only ever reach your own rows. We keep your progress until you ask us to delete it.

• Sign out at any time. You can keep using every lesson signed out.
• Email privacy@openmacro.org to see, correct or delete what we hold, including your whole account. We answer within 30 days.
• You can also revoke OpenMacro’s access from your Google account permissions, or, if you signed in with Apple, under Sign in with Apple in your Apple Account settings.
• Delete the app to erase on-device progress. If you never signed in, nothing survives on our side.

Material changes will be posted here with a new date. This notice lives in the same open-source repository as the site, so its full history is public — read it on GitHub. Questions go to privacy@openmacro.org.