Privacy Policy
Last updated: April 4, 2026
What 67Quest Does
67Quest is a Chrome extension and web dashboard that turns kids' screen time into a learning game. Parents set educational quests, and kids earn XP and coins by browsing educational content. A parent creates the account and links the child's device. Children do not create accounts independently.
What We Collect
The Chrome extension collects the following data from the child's browser:
- Page URLs and domain names to track which websites are visited
- Page titles to help classify content as educational or not
- Page content snippets (first 500 characters of visible text) to improve classification accuracy
- Time spent on each page
- YouTube video IDs when watching YouTube, to classify video content
The web dashboard collects parent email addresses for authentication and child names and ages provided by the parent during setup.
How We Use This Data
- Page content is sent to Google Gemini AI for educational classification. Gemini classifies whether content is educational and matches it against parent-defined quests.
- Browsing activity is stored in our database to calculate XP, coins, quest progress, and daily screen time summaries shown to parents.
- We do not use browsing data for advertising, marketing, or any purpose other than the educational gamification features of 67Quest.
Children's Privacy (COPPA)
67Quest is designed for use by children under parental supervision. We comply with the Children's Online Privacy Protection Act (COPPA):
- Only parents can create accounts and link children's devices
- Children cannot sign up, log in, or create accounts on their own
- Parents have full visibility into all data collected about their children via the parent dashboard
- Parents can revoke device access at any time, which stops all data collection
- We do not sell, share, or disclose children's personal information to third parties, except as needed for content classification (Google Gemini API)
Data Storage and Security
- Data is stored in a Supabase PostgreSQL database hosted on AWS (US East)
- Device authentication uses signed JWT tokens with expiration
- Parent authentication uses Supabase Auth (email/password)
- All data is transmitted over HTTPS
Third-Party Services
- Supabase for database hosting and parent authentication
- Google Gemini AI for content classification (page content snippets are sent to Google's API)
- Vercel for web application hosting
Data Retention and Deletion
Browsing activity data is retained for as long as the parent account is active. Parents can request deletion of all data associated with their account by contacting us. When a device link is revoked, the extension stops collecting data immediately.
Site Ignore List
Children can choose to hide 67Quest tracking on specific pages or entire domains using the “Hide on this site” feature. Ignored sites are not tracked and no data is collected from them.
Changes to This Policy
We may update this privacy policy from time to time. Changes will be reflected on this page with an updated date.
Contact
For questions about this privacy policy or to request data deletion, contact the 67Quest team at the email associated with your parent account.