We don't know who you are — and we like it that way.
Here, you're your animal name (like GoldFalcon77). We never ask for your real name, your birthday, your school, or your email. Your teacher or parent knows which wizard is you — we don't, and we can't. We remember your spells, your stars, and your sparks, so you can keep going on any computer. That's it. Keep your secret pictures secret, and enjoy the realm! 🧙
Wiz Kids is built so that we never collect personal information from anyone — not students, not teachers, not even in hashed form.
This is every category of data in our database. There is nothing else.
| Record | Fields | Why |
|---|---|---|
| Teacher account | Chosen username; hashed password; hashed one-time recovery codes | Sign-in and account recovery (there is no email to recover with — by design) |
| Class | Class name (e.g. "3B"); class code; hashed rescue code; the pinned quest realm (if the teacher set one) | Lets students find their class and lets a lost class be recovered |
| Student seat | Generated animal username; hashed picture-password; skill progress, stars, sparks, streak, cosmetic items; per-skill practice counters (attempts, accuracy averages); daily pace counters (lessons/skills/reviews per day); Olympics personal bests (times and stars); a placement-done flag; last-active timestamp | Saving progress across shared computers and showing teachers who needs help. The mapping from animal name to real child exists only on the teacher's paper roster — never with us |
| Admin audit log | Which admin account did which support action, when | Accountability for support operations |
We do not store: names, emails, dates of birth, photos, addresses, phone numbers, IP addresses in application data, free-text chat, or anything typed outside of lesson exercises. Lesson exercises run in your browser; we record outcomes (pass/fail, accuracy, speed), not keystrokes.
No cookies. No third-party analytics, advertising, tracking pixels, or social embeds — on this site or in the app. Your browser keeps a sign-in token and small preferences (like the sound mute) in its own local storage; they never leave your device except to authenticate you with us. Aggregate, anonymous system counts (how many wizards were active today) are computed on our servers.
Data is stored with Amazon Web Services (our infrastructure provider) in the US-West region, encrypted in transit and at rest. We do not sell, share, rent, or transfer data to anyone. Infrastructure logs are minimal and expire within 30 days. A web application firewall (AWS WAF) screens traffic at the edge for abuse; it rate-limits by IP address and keeps a short-lived (~3 hour) sample of request metadata inside AWS for debugging — none of that ever reaches Wiz Kids' application or database.
Teachers can delete any seat or a whole class at any time; deletion is immediate and real. Fine-grained practice counters exist only inside a seat's record and go with it.
Laws like COPPA regulate collecting personal information from children. Our approach is to not collect any — a student's entire footprint is a pseudonymous animal name and game progress, with the link to a real child held offline by their teacher or parent. If you believe we hold personal information about a child, contact us via the person who provided your invite code and we will investigate and delete it.
If this policy changes, the date above changes, and material changes will be announced via the in-app banner before they take effect. During the invite-only pilot, questions and requests go through whoever gave you your invite code.