DRAFT — not legally published. Counsel review pending. Do not rely on this text as a published policy.

Cookie & Tracking Notice

What is stored in the browser and what is deliberately not tracked.

PHASE B — DOCUMENT 9: COOKIE & TRACKING NOTICE

Status: draft for review. Public location: kidchat.io/legal/cookies, linked from /trust.

A. THE RULE THAT GOVERNS EVERYTHING HERE

No analytics or tracking SDK may receive a child's conversation content, personal data, typed queries, or sensitive interaction content. (C-10)

B. KID MODE

Kid Mode uses only what is strictly necessary to run the service: a session/authentication cookie and local storage for the child's own settings (buddy, voice preference, screen-time state).

Kid Mode has none of the following: third-party behavioral analytics, session replay, heatmaps, advertising identifiers, cross-site tracking, behavioral profiles, or raw prompt analytics. [TECHNICAL CONTROL REQUIRED — automated assertion that no analytics SDK loads on child routes]

C. SERVER-SIDE TECHNICAL TELEMETRY (not cookies, not third-party)

Minimal and content-free: route, feature used, errors, latency, safety category, AI cost, internal/anonymous profile ID, timestamp. No prompt or answer text.

D. PARENT MODE AND THE MARKETING SITE

Surface	What may run	Conditions
Kid Mode	Strictly necessary only	Rule in §A, no exceptions
Parent Mode	Strictly necessary; error monitoring possible	PII scrubbing on, session replay disabled, no child content
kidchat.io marketing pages	Analytics evaluated separately	Consent banner where required; no child data involved

Any tool (for example an error monitor or product analytics tool) must clear vendor review, run with PII scrubbing enabled, exclude child content, disable session replay on child surfaces by default, and be contractually barred from using the data for advertising or model training. [TECHNICAL CONTROL REQUIRED — vendor configuration evidence]

E. YOUR CHOICES

Strictly necessary cookies cannot be turned off without breaking sign-in. Where a non-essential tool is used on parent or marketing surfaces, you can refuse it, and refusing does not degrade your child's experience. Questions: privacy@kidchat.io.

F. AVISO DE COOKIES Y RASTREO — español (México)

En el Modo Niño solo usamos cookies estrictamente necesarias y almacenamiento local para las preferencias de la niña o el niño. No hay analítica conductual de terceros, repetición de sesión, mapas de calor, identificadores publicitarios ni rastreo entre sitios.
Ninguna herramienta de analítica recibe el contenido de las conversaciones, los datos personales ni las preguntas escritas por la niñez.
La telemetría técnica del servidor es mínima y no incluye contenido.
La analítica del sitio de marketing y del Modo Padres se evalúa por separado, con supresión de datos personales y sin contenido infantil.
Dudas: privacy@kidchat.io.

G. JURISDICTION DIFFERENCES

Topic	Mexico	United States
Cookie consent banner	Notice-based; disclosure in the aviso de privacidad	Notice-based; state laws may add opt-out for sale/share — none applies since we neither sell nor share
Child surfaces	Same rule: strictly necessary only	Same rule; COPPA prohibits behavioral advertising to children

UK/EU ePrivacy consent requirements are out of scope while the region is blocked.

Who operates KidChat

KidChat is a technology service operated by NOXON, LLC, a Texas limited liability company.

KidChat es un servicio tecnológico operado por NOXON, LLC, sociedad de responsabilidad limitada constituida en Texas, Estados Unidos.

NOXON, LLC — Texas, United States. privacy@kidchat.io · safety@kidchat.io · security@kidchat.io · legal@kidchat.io