Privacy Policy

Last updated: 11 October 2026

ChipiBot is a free quiz game for everyone that teaches how artificial intelligence works. It is suitable for all ages, including children. This policy explains, in plain words, what information the game uses and why. It is written for players, parents, guardians and teachers, with a short summary for children.

For children: use a fun nickname, never your real name. Do not write your address, school, phone number or email anywhere in the game. Ask an adult before you play, and tell an adult if anything worries you.

1. Who is responsible

ChipiBot is created and run by Toni Molina in Jersey, Channel Islands, trading as AURA by Toni Molina (Jersey business licence 006521). Toni Molina is the data controller and is registered with the Jersey Office of the Information Commissioner (JOIC), registration number 104148. The relevant law is the Data Protection (Jersey) Law 2018. You can reach us using the Contact link.

2. What we collect

Nickname chosen by the player. It must not be a real name.
Secret PIN of 4 numbers. We store it only in encrypted (hashed) form, so nobody can read it.
Game data: language (English or Spanish), level, phase, score, games played, answers given in each game, which questions were shown (so they are not repeated), challenges between players, and the dates of these actions.
Technical data: the IP address and browser information that every website receives. We use it for security, for example to block repeated attempts to guess a PIN. Our hosting provider may keep short technical logs.
Data saved on the device: a sign-in token, the chosen language and sound settings, kept in the browser's local storage. We do not use advertising or tracking cookies.

We do not ask for real names, email addresses, phone numbers, addresses, photos, voice recordings or location. There is no chat between players.

3. Why we use it

To let the player sign in with a nickname and PIN and keep their progress.
To show the Top 3 leaderboard and let signed-in players challenge each other.
To avoid repeating questions and to adapt difficulty to the level.
To keep the game safe: preventing abuse, spam and attempts to break in.

We use this information because it is needed to provide the game that the player and their parent or guardian choose to use. We never sell it and we never use it for advertising or profiling.

4. What other players can see

The Top 3 leaderboard on the home page is public and shows the nickname, level, score, games played and language flag. To send a challenge, a player must type the exact nickname of a friend; there is no public list of players. That is why nicknames must never be real names.

5. AI hints and questions

Some questions and the hint button use an external AI service. We send it only the text of the quiz question and instructions. We do not send the nickname, PIN or any other player data. Obvious emails, phone numbers and links are removed before sending. AI answers can sometimes be wrong, so we encourage children to think critically and to check with an adult.

6. Children and parental consent

ChipiBot is for all audiences and is designed to be safe for children. Children under 13 should only play with the permission of a parent or guardian, who should help choose a nickname and keep the PIN. Because we do not collect contact details, we cannot contact parents directly. If you are a parent or guardian and want to see, correct or delete your child's game data, use the Contact link and tell us the nickname. We may ask a few questions to check that the request is genuine before acting.

We design the game with children's interests first: no advertising, no payments, no chat, no public profiles beyond the nickname, no location, and safety filters for nicknames and AI hints.

7. How long we keep it

Player accounts that are not used for 60 days are deleted automatically, together with their games, answers and challenges. Our database provider keeps automatic security copies for a limited time so the service can be restored after a fault; deleted data disappears from them when those copies expire. Data saved on the device stays until it is cleared in the browser.

8. Who helps us

We use trusted service providers to run the game: a cloud hosting and database provider, and an AI service for questions and hints. They process data only to provide their service to us. Some of them may process data outside Jersey (for example in the United Kingdom, the European Union or the United States).

9. Your rights

Depending on the processing, the law gives you rights to access, correct and erase data, to restrict or object to processing, and to data portability. Parents and guardians can exercise these rights for their children. To use them, use the Contact link. You also have the right to complain to the Jersey Office of the Information Commissioner (jerseyoic.org). We would appreciate the chance to help first.

10. Security

The site uses HTTPS. PINs are stored encrypted, sign-in attempts are limited, and administrative tools are protected. No system is perfect: if we learn of a security problem that affects players, we will act quickly and inform the JOIC when the law requires it.

11. Changes

If we change this policy we will update the date above. If a change is important, for example if advertising were ever added, we will show a clear notice in the game first.