Privacy

Playing without an account Always possible

For parents

Without an account Vilago runs entirely in the browser. What your child makes and learns is stored on the device itself and is never sent to us or to third parties. The exceptions (recorded voices, error reports and counting visits) are described under With and without an account.

What is stored on the device

In the browser’s local storage (IndexedDB and localStorage), per player:

• The player profile: name or nickname, the character’s clothes and looks, language, and optionally the age, the school year (groep), the birthday (day and month only, no year) and whether the character is a boy or a girl.
• The islands with everything built on them, collected souvenirs and coins.
• Progress: answers given (on their own or with help), the level per subject and the daily play time.
• Letters, editions of the Kwebbelkrant (the island paper) and what your child tells Kees when wrapping up the day.

The game asks the browser to keep this data, even when the device is short of space. That way the island doesn’t just disappear.

What the parents’ corner stores

• The parent code: not the code itself, but a secure, irreversible hash, plus a counter for wrong attempts.
• The chosen settings, such as active subjects, the starting level, help and the daily play time.
• Things from home: questions, facts and letters you add yourself.

The progress and core-objectives overview is calculated locally in the browser from the game data. Nothing goes to a server.

What isn’t there without an account

• No email address and no password.
• No connections to other websites to follow you: fonts, images and code are served straight from vilago.nl. The exceptions are speech recognition through the browser’s own service (see below), recorded voices and error reports (see under With and without an account).

Speech: Say it! and read-aloud

Answers can also be spoken aloud with Say it!. This is always a choice; tapping or typing always works. For speech recognition the game uses the browser’s built-in feature. In Chrome, Google turns the sound into text; Safari uses Apple’s dictation. Vilago itself never stores sound. Only the converted text of an answer is stored locally, just like a typed answer.

Read-aloud uses the speech voices available on the device and in the browser. Some voices (such as in Chrome) work over the internet; then only the text being read goes to the provider.

Wiping everything

• In the parents’ corner: choose Start again for a player (their own island, a country, the level or everything) or Delete player.
• In the browser: clear the site data for vilago.nl in the browser’s privacy settings. That wipes everything Vilago stored on this device, including the parent code.

If you save a player as a file through the parents’ corner, that file is in your own downloads and you manage it yourself.

Playing with an account Now available

As a parent you create an account when Kees asks in the game whether your child wants to keep the island. After that you manage everything at vilago.nl/en/account. You can always play without an account, exactly as above.

For parents

You create the account and give consent

The account belongs to the parent, not to the child. You create it with your email address and sign in with a link or a code you receive by email: no password. At some point Kees asks in the game whether your child wants to keep their island. Then your child (or you) enters a parent’s email address, and you get one email. It says what is stored, why and for how long, and that is where you give consent yourself.

Until you give consent, only your email address goes from the device to us, to send that email, together with what kind of device it is (for example ‘iPad · Safari’), so you can see where the request comes from. None of your child’s data is sent to us yet. If you don’t give consent within 7 days, the request lapses and everything simply stays on the device.

What is stored in the account

• your email address;
• for each child a profile with a nickname, the character’s looks, the school year (groep) and the progress in the game: the islands, the coins, the answers and the level per subject. A child has no email address of their own;
• free text that belongs to the profile: what your child tells Kees at the end of play time, and the things from home and letters you write yourself;
• which devices are linked, so that you can see them and unlink them.

The birthday, the age and whether your child is a boy or a girl stay on the device. They are not sent to the account.

Why

So that your child can carry on playing at school or at a friend’s house, there is a backup if the browser is cleared, and you can see the progress. That is what we use it for, and nothing else: no advertising, and we sell nothing on.

Logging in on another device

On a school computer or at a friend’s house your child signs in with a player name and a picture password: three pictures in the right order. With a QR card the player name fills itself in; the pictures are still needed. After such a visit, none of your child’s data is left on that device.

Where it is stored and for how long

• The data is stored with Supabase, in the EU (Frankfurt). With Supabase and the other services we use for it, we enter into data processing agreements.
• After 12 months without playing, the profile is wiped.
• If you ask us to wipe everything, we do so within 7 days. It may remain in the backups for another 7 days after that.

Withdrawing consent

We record when you gave consent. If you withdraw it, we wipe the account with everything that belongs to it. You can do that yourself, in your account at vilago.nl/en/account. After that your child can carry on playing on the device without an account.