Privacy
What we keep, why, and how to make us stop
We keep a handle, one email address, and what somebody did on the course. Nothing else. We do not track anybody, we do not advertise, and we have never sold anything to anyone.
What we keep
- The handle your child chose, such as pixelfox. Not their real name.
- One email address. A parent's by default. If you told us to use your child's instead, that is the one we have. Never both.
- What was done on the course: which sessions, what was built, what was fixed, and anything sent in for the arcade.
That is the list. No surname, no date of birth, no address, no phone number, no photograph, and nothing about a school.
What we do not do
- No analytics, no tracking pixels, no advertising, and no third party scripts watching anybody read a page.
- We never sell or share anything with anybody. There is no partner, no affiliate and no data broker.
- We do not profile children, and nothing here makes an automated decision about anybody.
Cookies
One cookie, set when you sign in, so the site knows it is still you. It is signed so it cannot be faked, it cannot be read by any script including ours, and it lasts thirty days. There is no other cookie and nothing that follows you to another site.
That one is necessary: without it, signing in does not stay done. So the bar on your first visit is not about that cookie. It is about anything optional we might add later, and until you say otherwise the answer is no. Nothing optional is loaded today, and nothing will be added that ignores what you chose here.
Who else sees it
Three companies, each doing one job:
- Cloudflare hosts the site and the database.
- Resend sends our email, which is how sign in links and article notices reach you.
- Telegram carries a message to the facilitator when somebody asks to join, stops the article emails, or deletes their account. It sees a handle and an email address.
Nobody else. Work shown in the arcade is visible to anybody signed in, which is the point of a wall, and it goes up under a handle.
How long we keep it
While your child is on the course, and then until you ask us to remove it. Sign in links are deleted automatically once they expire, because a spent link is somebody's business for no reason.
What you can ask for
Email hello@zaalyo.ai and ask for any of this. No form, no account, no waiting on hold.
- A copy of everything we hold about your child.
- A correction to anything wrong.
- Deletion. We remove the lot, including work on the wall. We do not keep a copy afterwards.
- To stop the emails. Every article email has a one click unsubscribe. Sign in links keep working, because those are how you get into your own account.
You do not need a reason and we will not ask for one. We answer within a week, usually the same day.
Children
This is a school for children, so the whole policy is written with that in mind. A parent sets up the account and a parent can end it. If you would rather your child's work never appeared on the wall, say so and it will not.
If something goes wrong
If we ever lose control of anything we hold, we will tell the people affected directly and quickly, in plain words, and say what we are doing about it.
Questions about any of this go to hello@zaalyo.ai and a person reads them. Last changed 29 August 2026.
