Privacy for little explorers

Guest exploration needs no name, birthday, email or password. Enter as a guest. Pip searches a prepared space library in your browser. Your questions are not sent to an AI model or saved as chat transcripts.

Reading is always available. Optional Pip narration uses installed English device voices marked local by your browser. Only prepared introductions are read; microphone recording stays disabled. Voice availability varies, and the browser or operating system controls its speech service. Show or hide Pip from the Pip dropdown. Your visibility choice follows your Remember progress setting.

Remembering progress is optional and off at first. You can change your mind or erase local data in Your choices.

Notes for parents and teachers

This is a restricted educational pilot. The learning experience uses guest visits only. It does not ask children or grown-ups for login details, email addresses, phone numbers or an OTP. The hosting platform’s access restriction is separate; it remains unchanged until the owner approves publication.

What stays on your device?

A necessary visit cookie records that you entered and your saving choice. Mission answers, badges, games, flight level, Pip preferences and discovery-journal choices, test measurements, world discoveries and optional personal findings use temporary session storage by default. Personal findings and test measurements stay in this browser; they are not sent to the cloud. Please keep names and contact details out of notes. Downloading a journal creates a file on your device that you control and may choose to share. Browsers may restore a session after closing. Remember progress is optional and uses local storage until erased or browser data is cleared. Progress does not sync between devices in a guest visit.

Use Your choices to change remembering, erase device data or end your visit. Device erasure also removes recordings from earlier pilots. No microphone recording is available. Narration starts only after you choose voice mode; you can mute it or return to reading at any time. Your voice and volume preferences follow your saving choice.

Optional feedback

The idea box sends three prepared choices: how the visit felt, the favorite feature and the requested next feature. You may also send an optional suggestion of up to 600 characters. Please exclude personal information. Obvious contact patterns and markup are rejected, but automatic checks cannot detect every personal detail; the operator must review and remove inappropriate data. Choices and suggestions are private and retained up to 90 days when the required maintenance job runs. Request-rate protection stores a salted, rotating hash for up to one hour, rather than retaining raw IP addresses in the feedback database. Hosting providers may separately process network security records.

We do not publicly display submissions. The administrator can review, filter and export feedback in a protected dashboard. If storage or abuse protection is not configured, the form reports failure and does not pretend a response was saved.

Existing accounts and administration

Earlier account records have not been deleted. Their protected backend and operator tools are retained for recovery and management, without public login links in the guest learning experience. Guest visits do not upload discoveries to those accounts. Historical account retention and deletion procedures still require operator review.

Guest usage analytics are off. Previously configured adult statistics and historical reports remain access-controlled. The hosting provider handles requests and security records; its retention, processors, international transfers and contract terms still need operator verification. External NASA and ESA links open only after a click and have their own privacy notices.

Privacy and support contact

Public operator name and contact: not yet configured. During this private pilot, contact the person who invited you. Download a support checklist to describe an issue without personal details. Downloading this checklist does not submit it.

Public-launch review is still required

The operator must identify the controller, publish a monitored privacy/support contact and response process, determine the applicable legal basis and child-consent requirements, verify consent where required, and document hosting/authentication terms, retention, deletion and international transfers. Device choices alone do not complete this review. No claim of legal compliance is made.

Reference: European Commission: safeguards for children’s data.

Updated 20 October 2026 · Back to welcome · Your choices