Privacy Policy
Last updated: 2 October 2026
Kid & Kid ("the App") is a collection of mini games for children, published by Ariamax, Rijswijk, the Netherlands ("we", "us"). This policy covers this website (KidNKid.com) and the App at KidNKid.com/play/, also when you add it to the home screen of a phone, tablet or computer. It tells you, the parent or guardian, what we store, why, for how long, and what you can do about it.
The short version: a parent creates one family account with an email address. Children get a profile inside it with a nickname, a picture from our own set and an age: no email, no real name, no photo. We store what the children play so the games can remember their progress and so your limits work. There are no ads, no tracking and no analytics companies, and we never sell or share anything about your family.
1. Who is responsible
Ariamax, Rijswijk, the Netherlands, registered with the Dutch Chamber of Commerce (KvK) under number 42005482, is the controller for the personal data described here. Email: contact@ariamax.nl.
2. This website
The pages of KidNKid.com (everything except the App itself at /play/) set no cookies, run no scripts and load nothing from other companies: fonts and pictures come from our own server. Like every web server, ours keeps access logs with the IP address, the browser type, the page that was asked for and the time. We use them only to keep the site secure and running and to count how many visits a page gets, and delete them after a short time.
3. The family account (the parent)
Only an adult can create an account. We store:
| What | Why |
|---|---|
| Email address | To sign in, to confirm the account with a code, to reset the password and to answer you. Nobody else sees it. |
| Language | The language you chose for the App. The App uses it on all your devices and we write our emails to you in it. |
| Password | Stored only as a one-way hash (BCrypt). We cannot read it. |
| The codes we mail you (to confirm the address or reset the password) | Stored as a hash until they are used or run out. |
| When the account was made and last used, and the time zone of your device | To know where a "day" ends for the daily limits, and to remove accounts that were never confirmed. |
| The family's coins and every change to them (gift, use in a game, purchase, refund) | To run the App and to show you where the coins went. |
| Purchases, if you buy coins: what you bought, the price, the time and the payment provider's reference numbers | To deliver what you paid for, to answer questions about a payment, and because the tax law makes us keep sales records. We never receive your card number or bank details. |
4. The kid profiles (your children)
Children do not have accounts. You create a profile for each child inside the family account, and we store only what you enter there and what the child does in the games:
| What | Why |
|---|---|
| Nickname | So the child finds their own profile. It does not have to be the real name, and we suggest it is not. |
| Picture | One of the drawn portraits that come with the App. Photos cannot be uploaded. |
| Age (a number, not a birthday) | To show you which games fit. |
| PIN, if you set one | Stored only as a one-way hash. It keeps brothers and sisters out of each other's profiles. |
| Your settings for the child: hidden games, coins per day, minutes of play per day | To apply your limits. |
| Play data: which games were opened on which day, scores, finished levels, puzzles and pictures, saved things such as the pet and its name, and the minutes played per day | So every game remembers where the child was, and so the daily limits work. |
That is all we know about a child. We do not ask for or collect a child's real name, photo, voice, address, location, school, contacts or anything they type: the games have no text fields for children besides the name they give their pet. Nothing a child does is shown to other families: there are no public profiles, no chat and no leaderboards.
You, the parent, give us this information and can see, change or delete it at any time in the parent area. The legal ground is the contract with you (running the App you signed up for). Where the law asks for a parent's consent for a child's data, you give it by creating the profile yourself, and you can take it back by deleting the profile.
5. What we do not do
- No advertising. The App and this website show no ads and contain no advertising software.
- No selling or sharing. We never sell, rent or give away data about your family, your children, their interests or what they play. Not to advertisers, not to anyone.
- No tracking. No analytics services, no social-media plug-ins, no cookies, no advertising identifiers, and no profiles of children for marketing.
- No contact with others. Children cannot send or receive messages and cannot be found by anyone.
6. What the App keeps on your device
The App stores a few things in the browser's storage for this site: the sign-in token of the family, the email address you last signed in with (so you do not type it again), the language you chose and the sound setting. It sets no cookies. See the cookie page for the details.
7. Security
Everything travels over an encrypted connection. Passwords and PINs are stored as one-way hashes, sign-in tokens only as hashes too. To stop break-in attempts, the server counts wrong passwords, codes and PINs per account and per IP address; these counters live in the server's memory only and are gone within an hour. The parent area opens only after the parent's password is typed again.
8. Who else handles data
- Hosting: the App and its database run on servers in the European Union rented from a hosting company, which only provides the machines.
- Email: the codes to confirm your address or reset your password are sent through an email provider, which therefore processes your email address and that message.
- Payments: if you buy coins, you pay on a page run by Stripe (Stripe Payments Europe Ltd., Ireland). We send Stripe your email address, our number for the purchase and what you are buying; Stripe collects your payment details itself, under its own privacy policy (stripe.com/privacy), and tells us only whether the payment succeeded. Nothing about your children is sent to Stripe. Families who never buy anything are never sent there.
That is the whole list. We only hand data to authorities when the law requires it.
9. Our own staff
A small number of our administrators can see family accounts to help you with a problem, correct coins or stop abuse. Every such action is written to a log with the administrator's name.
10. How long we keep it
- The family account, the kid profiles and their play data: for as long as the account exists.
- A kid profile you delete: removed at once, with its scores and play data.
- A family account you delete: removed at once with everything in it; from our backups within 90 days.
- An account whose email address is never confirmed: removed automatically after one day.
- Purchase records: 7 years, as Dutch tax law requires, even after the account is deleted. They hold no name and no email address.
- The log of administrator actions keeps the email address of an account it was about.
11. Your rights
Under the GDPR you may ask us for a copy of your family's data, have it corrected or deleted, restrict or object to its use, and receive it in a portable format. You can exercise these rights for your children too. Write to contact@ariamax.nl from the email address of your account; we answer within one month. You can delete a kid profile or the whole account yourself in the parent area; the delete-my-data page explains how. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
12. Children
The games are made for children, but the account belongs to an adult. If you believe a child has created an account without a parent, write to us and we will delete it.
13. Changes
When the App changes in a way that touches this policy, this page changes first and the date at the top moves with it.
14. Contact
Ariamax, Rijswijk, the Netherlands
contact@ariamax.nl