Privacy Policy

Last updated: June 16, 2026

CodeQuest Arcade ("CodeQuest", "we", "us") is an online coding learning platform designed for children aged 10 to 14. We take the privacy of young learners seriously and aim to comply with the U.S. Children's Online Privacy Protection Act (COPPA), the EU General Data Protection Regulation including children-specific provisions (GDPR / GDPR-K), the UK Age Appropriate Design Code, and California's CCPA/CPRA where applicable.

1. Who can use CodeQuest

CodeQuest is intended for children aged 10–14, with verifiable consent from a parent or legal guardian, and for adult users (parents, teachers, guardians). Children under 13 may only register and use the service after a parent or guardian has reviewed and consented to this Privacy Policy and the Terms of Use.

2. Information we collect

Account info: display name / handle, email of the parent or guardian (for under-13 accounts), and an encrypted password.
Learning progress: lessons completed, quiz answers, XP, trophies, and code submitted inside in-app exercises.
Technical data: device type, browser, approximate (city-level) location derived from IP, and error / diagnostic logs.
Optional content: profile avatar choice, friend connections inside the app.

We do not knowingly collect: precise geolocation, government IDs, biometric data, full payment card details (handled by our payment processor), or any special-category data. We do not require a real name or photograph from a child.

3. How we use information

To create and secure the learner's account.
To deliver lessons, save progress, and award badges/trophies.
To keep the service safe (abuse prevention, fraud detection).
To send essential service emails (e.g. account recovery, payment receipts).
To improve the product through aggregated, non-identifying analytics.

We do not use children's data for behavioural advertising, profiling, or to build advertising audiences. We do not sell or rent personal information.

4. Parental rights & consent

Parents and guardians may, at any time: review the personal information we hold about their child, request correction or deletion, withdraw consent, or close the account. To exercise these rights, email privacy@aurahacks.com from the email used at sign-up. We respond within 30 days.

5. How we share information

We share data only with vetted processors that help us run the service (hosting, authentication, email delivery, payment processing). They act on our instructions and are contractually bound to protect the data. We may disclose information if required by law or to protect the safety of our users.

6. Data retention

We keep account data for as long as the account is active. After account closure we delete or anonymise personal information within 90 days, except where law requires longer retention (e.g. tax records).

7. Security

Data is encrypted in transit (HTTPS/TLS) and at rest. Access is restricted to authorised personnel. No system is perfectly secure, so we encourage strong, unique passwords.

8. International transfers

CodeQuest is operated globally. Data may be processed in countries other than yours. Where required, we use Standard Contractual Clauses or equivalent safeguards.

9. Cookies

We use a small number of strictly-necessary cookies for login/session and security. We do not use advertising or cross-site tracking cookies on accounts known to belong to children.

10. Changes to this policy

If we make material changes we will notify the parent/guardian email on file and require renewed consent where the law requires it.

11. Contact

Privacy questions: privacy@aurahacks.com
Data Protection contact: dpo@aurahacks.com