Privacy
Last updated 23 August 2026
This page describes what the site actually does. It is short because the site does very little.
Right now this site collects nothing about you. There is no analytics, there are no cookies, there is no sign-up form and there is no account to make. You can read every page and work through Week 0 without telling us anything.
Two things are worth knowing anyway. Your web host can see that you visited — that is true of every website, and ours is named below. And Week 0 remembers your answers in your own browser, where we cannot read them.
What we collect when you read the site
Nothing.
There is no analytics script on any page — not ours and not anyone else's. There are no cookies. There is no tracking pixel, no session recording and no advertising tag. Nothing on the page reports back that you were here.
The typefaces are served from this website rather than from a font service. That is a privacy decision before it is a speed one: loading a font from a third party sends that company your address on every page load, and a German court has held that arrangement to breach the GDPR. Reading this site makes no request to any other company at all. There is exactly one exception, it is Paddle, and it happens only if you press a button to buy something — see below.
What your browser stores
Week 0 asks your child to commit to an answer before it shows them anything, and it has to remember that they did. It keeps that in your browser’s local storage — the choice, and the reason they typed — under keys beginning cc:.
That data never leaves your device. It is not sent to us, it is not backed up, and we cannot read it. Clearing your browser’s site data deletes it, and doing so costs you nothing except that Week 0 forgets where you were.
It is not a cookie and it is not used to recognise you. It is a notebook your browser keeps for one week of activities.
Who can see that you visited
One company, and it is the one that serves you the page:
Cloudflare — hosts this website and delivers it to you. Like any web host, it processes your IP address and your browser’s request in order to answer it, and keeps short-lived logs for security and abuse prevention.
That is the whole list. We have deliberately kept it to one company, and we would rather remove a service than disclose it — which is why the fonts are served from here and why there is no analytics.
If you email us
The only address the site publishes is [email protected]. If you write to us, we have your address and whatever you chose to put in the message, and we keep the correspondence so we can answer you and remember what was said.
There is no form anywhere on this site and no mailing list in a database. An address reaches us because you wrote to us, and it is used to reply to you. We do not sell it, share it or add it to a marketing list without you asking.
Ask us to delete the correspondence and we will, unless we have to keep it for a tax or legal record.
When you buy
Paddle.com Market Ltd is the merchant of record for every order — the legal seller to you, not a payment gateway we route a card through. Paddle runs the checkout, collects payment and billing details, calculates and remits sales tax, and its name is what appears on your statement.
Paddle handles that information as its own data controller, under its own privacy policy. We never see your card number. What reaches us is an order record: an email address, what was bought, and whether it is still active. That is what unlocks the content you paid for.
The checkout runs on code loaded from Paddle’s own servers, and that code is fetched when you press the button, not when you open the page. It is the only request this site ever makes to a company other than its host, and it is why the section above can say what it says: a reader who never starts a checkout never reaches Paddle at all.
Children
This is a product for children aged 8 to 11, and the way it handles that is structural rather than promised: there are no child accounts and no fields anywhere for a child’s personal information. The only login that will ever exist is a parent’s email address. A child is referred to by whatever name or nickname the parent types, and that is the only thing about them the system holds.
Nothing on this site is collected directly from a child. Week 0 needs no account at all, and what a child writes in it stays in the browser as described above.
What we have not built yet
Parent accounts and the evidence loop — where a parent uploads a photo of the week’s work — are not in operation. This section describes what will happen, so that it is written down before it is true rather than after. This page will be updated in the same change that ships them.
Uploads will be private to your family. They are not published, not shown to other families, and there is no public gallery.
The upload screen will ask you to photograph the work and not your child’s face.
Audio will be transcribed and the recording deleted within seven days. What is kept long-term is text, so nothing kept long-term is a voice.
Only the transcript and the photograph of the work are sent to an outside model provider to generate follow-up questions. Audio is not sent. That provider will be named here when it is in use.
Where the information is
The business is in Australia. The companies named above operate internationally, so information handled by them may be processed outside Australia — that is inherent in using them, and it is why the list is kept as short as it is.
Your rights, and complaining
Write to [email protected] to ask what we hold about you, to correct it, or to have it deleted. One person reads that address and will answer you.
If we handle it badly, you can complain to the Office of the Australian Information Commissioner (OAIC). If you are in the UK or the EU, your local data protection authority can take a complaint too.
Changes to this page
The date at the top is the date the words last changed. When the site starts doing something new, this page changes in the same release as the code — not afterwards.