For parents and carers

Privacy policy

Updated 14 October 2026. This page explains how Treasure Trail uses information when a parent opens a family account and children learn within that account.

Who to contact

Treasure Trail is operated by Bastiaan. For account questions or to request access, correction or deletion of your family’s information, email basbelt15@gmail.com. Account ownership must be checked before a request can be handled.

Information the app stores

• Parent account: Google account identifier, name, verified email address and profile image when supplied by Google. Google sign-in uses only basic identity permissions: openid, email and profile. It does not request access to Gmail, Drive or your Google password.
• Family learning: child profile nicknames and avatars, lesson progress, code, custom missions, uploaded Scratch projects and saved versions. Use a nickname rather than a child’s full name; avoid putting personal information in projects or mission stories.
• Sign-in and security: session records, Google authorization credentials, temporary sign-in state, IP addresses and browser information used for session security and request limits. Stored Google access and refresh tokens are encrypted by the authentication library.

Why it is used

Account information identifies the parent and keeps each family’s saved work separate. Learning information lets children resume lessons and parents manage missions across devices. Security information supports sign-in, sign-out, abuse prevention and troubleshooting.

Storage and service providers

The app runs on Cloudflare Workers, with account and learning records in Cloudflare D1 and saved project files in Cloudflare R2. Cloudflare processes requests and may keep operational logs. Google handles Google sign-in under its own privacy policy. Opening links to other services lets those services handle the resulting visit under their own policies.

Family records are not published as a public gallery. Access through the app is limited to the signed-in parent’s family; the operator may need to access records to support the service or handle your requests. This app does not sell account or learning data or include advertising.

Cookies and this device

Necessary cookies keep the parent signed in and protect the Google sign-in flow. Sessions expire after seven days; signing out revokes the current session. Browser storage also keeps preferences, progress and local project copies so work can be saved and synced.

Signing out does not automatically erase local project copies or downloaded files. On shared devices, sign out and clear this site’s browser data when needed. Each family should use its own parent account.

Keeping and removing information

There is currently no automatic deletion period for saved family accounts, projects or earlier versions. Archiving a child profile hides it from active choices and does not erase its saved records. Contact the address above to request deletion. Signing out or removing Treasure Trail’s access in Google does not by itself delete family data stored by Treasure Trail.

Children and changes

An adult creates and manages the account. Children do not need a separate email address or Google login. Adults should supervise use and decide what information to include. Changes to this policy will be published here with an updated date.