Your child’s world. Your controls.

What we collect

For parents, we store the account email, sign-in records and permission history: the notice you received, your choices, dates and email delivery records. Email links let you sign in without a parent password.

For each game nickname, we store the invented nickname, a protected password hash and expiring sign-in sessions. We do not ask for a child’s real name, email, birthday, school, address, photograph or location. Please leave personal details out of nicknames and builds.

Saved play includes the world’s seed and changes, player position, building pieces, inventory, progress, rewards and settings. We keep the current and previous cloud save for recovery. Each nickname has its own world.

Math records include practice level, questions and choices, correctness, submitted choices or a protected representation of an answer, and dated attempt receipts. Building-time records track minutes earned, spent or returned. These records make the math and time controls work and prevent the same answer from earning time twice.

Your browser also keeps game settings and local save data. Hosting and database services process technical information such as IP addresses, requests and security logs to deliver and protect the service.

How we use and share it

We use these records for sign-in, saved play across devices, math practice, earned building time, parent controls, recovery and service security. Outpost has no player chat, public profiles, publicly shared worlds, advertising or AI features in this version. We do not sell children’s information or use it for targeted advertising.

Vercel hosts the site, Supabase provides the database and account services, and Resend delivers parent notices through our transactional email service. Our configured mail service may provide fallback delivery when needed. These providers process the information needed to operate the service. Outpost pages and game screens do not run the site’s analytics or speed-insight components. We may disclose records if legally required or necessary to protect the service and its users.

Passwords are protected with hashes; session tokens are stored in protected form. Access controls separate families’ records. No security measure is perfect. Contact us if something looks wrong.

Permission and parent rights

We send a direct notice to your parent email. If you agree, we send a separate confirmation email after a pause of at least ten minutes. You must return and explicitly confirm. Opening a link alone does not give permission. The pause is part of our setup process.

You can refuse permission. Participation does not require information beyond what is reasonably needed for the game. Withdrawing permission stops further Outpost access and updates for your family.

In Family accounts, you can review nicknames and controls, download a nickname’s game records, change its nickname or password, and delete its saved world and records. Downloads contain personal game information; keep them somewhere private. For access, correction or deletion help, contact us using the details below. We verify your relationship to the account before releasing records.

Review or withdraw Outpost permission. Withdrawal keeps Outpost records available for you to download or delete for 30 days. Deleting a shared game nickname also removes that nickname’s other connected game records, so review the deletion message carefully.

Keeping and deleting records

Worlds, game progress, math receipts and building-time records support continued play, recovery and the time balance. Scheduled cleanup removes these Outpost records after 12 months without Outpost activity or renewed parent confirmation, or 30 days after permission is withdrawn. The next scheduled cleanup performs removal. Download anything you want to keep before that deadline. You can delete a nickname and its game records sooner in Family accounts.

Outpost cleanup resets its earned-time balance and practice settings. It keeps the shared nickname, sign-in credentials and other games’ records. Returning players can start a new Outpost world after the parent completes any required permission. For existing worlds, the inactivity period starts no earlier than this policy’s deployment.

Unfinished permission requests expire after 30 days. We keep minimal permission and delivery evidence while permission is active and for up to three years after withdrawal to document choices and handle privacy requests. Parent accounts may support other Made for Homeschool services. Removing Outpost records does not close your parent account.

Deleting records removes them from the active service. Restricted backups and provider security logs follow the providers’ retention schedules and may remain temporarily after active deletion. We do not promise immediate erasure of every backup copy. A downloaded file or a local browser copy is outside the cloud deletion process; remove those copies separately if desired.