Privacy, explained clearly

Who is responsible

Minds Play L.L.C. Contact: hallo@wondermaths.app.

Minds Play L.L.C. is the controller for personal data it processes to operate Wondermaths and respond to you.

What this notice covers

This notice covers wondermaths.app: catalog pages, browser games, downloads, and adult contact by email. It does not describe an account service, checkout, paid membership, or camera-based AR; those features are not active in this version.

The Guide blog runs separately on WordPress. Follow the notice on that site for its actual plugins, cookies, and forms. The parent email form sends a seven-day access link for full parent e-books and PDF downloads using our existing Wondermaths mail system. It does not automatically subscribe you to marketing. The separate invitation in the email requires explicit confirmation.

Information and purposes

The portal contains no advertising pixels, behavioral analytics, chat, child profile form, or child email form. Technical information is still exchanged when your browser loads pages and files.

Legal bases

For people in the EEA, we process an adult’s request for access to materials to provide the requested service (Article 6(1)(b) GDPR). We use consent for our optional newsletter (Article 6(1)(a)); you can withdraw it using the unsubscribe link in any newsletter.

We rely on legitimate interests to protect the service, prevent abuse, answer general inquiries, and keep necessary records of consent and opt-out choices (Article 6(1)(f)), subject to your rights. Applicable legal obligations may require processing under Article 6(1)(c). Requesting a book or PDF does not subscribe you to marketing.

Service providers and external links

OVHcloud provides website hosting and the Wondermaths email service. These services process technical requests and email information needed to operate the site and deliver messages. Authorized Wondermaths staff can access support and request records.

Administrative notifications of adult material requests are also sent to our Google Gmail mailbox. These notifications include the adult’s email address, the requested collection, the request time, and the mail-handoff result. Google therefore processes the information in those notifications. Our service providers may process information outside your country; you can contact us for information about the relevant processing locations and safeguards.

We do not sell personal information or use it for behavioral advertising. The Guide blog runs separately on WordPress. When you follow a link to that blog or another external site, its own privacy notice applies.

Retention and deletion

Your emailed access link expires after seven days. Opening it saves a separate signed access cookie for up to one year, renewed when you return to the portal or use protected materials. The cookie contains no email address. Clearing cookies or browser expiry removes remembered access. Request records are separate from that expiry: they contain the adult email, request time, requested collection, source, and confirmation or opt-out status. New form records do not store raw IP addresses or browser user-agent strings. Earlier records and hosting logs may contain those technical details; contact us about reviewing or deleting them. We retain records while needed to deliver and support the requested service, handle abuse or disputes, or meet legal obligations. Newsletter contact details are used while the subscription is active. After an opt-out, we retain the limited records needed to honor that choice and demonstrate consent history; unsubscribing does not automatically erase all earlier records.

Support correspondence is retained for resolving the inquiry and any related obligations or claims. Hosting and mail services also maintain operational and security logs under their service settings. Retention depends on the purpose, whether an issue remains open, and applicable obligations. Contact hallo@wondermaths.app to request access or deletion or to ask about a particular record. Information no longer needed for these purposes should be deleted or anonymized.

The form’s rate limiter uses keyed hashes of IP and email addresses. Entries older than one hour are removed when the ledger is next updated. Drawings, coloring, bookmarks, and supported game progress remain on your device until you remove them or clear site data. Downloaded files remain on your device until you delete them.

Your choices and rights

Where applicable, you can request access, correction, erasure, restriction, portability, or object to processing. Rights depend on the legal basis and circumstances; a request does not require a Wondermaths account. Contact the address above.

You may complain to your competent data protection authority. In Poland this is the President of the Personal Data Protection Office (UODO). GDPR requests are normally handled within one month, subject to the extensions and exceptions provided by law.

Children and future changes

Games are intended for children with adult support. The absence of a child account does not remove children’s privacy obligations. See Children’s privacy.

Before introducing accounts, payments, marketing tools, or WebAR, we must review the new data flows and update the notices and any necessary controls. The date at the top will change when this notice changes.