Our Privacy Promise
Last updated: 26 August 2026
Cannon Quiz is a learning game built for children. This page explains, in plain English, exactly what we store and what we do not. If anything here is unclear, please tell us — a privacy policy that a parent cannot understand is not doing its job.
The short version
- There are no accounts. We do not ask for an email address, a password, or a real name.
- Children do not need to give any personal detail to play.
- We show no advertising and use no analytics, tracking pixels, or third-party trackers.
- We have nothing to sell, rent, or share, because we do not collect it.
- Playing on your own works entirely on your device and sends nothing over the internet.
What stays on your device
Learning progress is stored in your browser's local storage on the device you are using. This includes the questions answered, round progress so a child can pick up where they left off, the Achievement Vault, Gold-Sealed verses, grade completion, the name typed into the player box, and small settings such as where the music player sits on screen and whether reading out loud has been used before.
None of this is sent to us unless a progress code is created, and even then only the learning progress is backed up — never the player name. Clearing your browser data removes everything stored on the device.
The read-aloud option
When a question is missed, a child can unlock the next one either by highlighting the explanation or by reading it out loud. Reading out loud is always optional, and highlighting does exactly the same job.
Nothing is ever recorded. No audio file is created, saved, or sent anywhere — not to us, not to Google, not to Apple, not to anyone. There is no recording to delete because none is made.
On most devices the browser simply measures how loud the microphone is, moment to moment, and watches for the rhythm of someone reading a sentence. That measurement happens inside the page and is thrown away as it goes. The words themselves are never identified, and no voiceprint is created or stored. We never use a voice to recognise who someone is.
On a few browsers that can recognise speech entirely on the device, we use that instead, because it can follow along word by word. That also keeps the child's voice on their own device.
The browser always asks permission the first time. After a child has used reading out loud once and given permission, the panel will start listening on its own the next time a question is missed — so they can simply read instead of pressing buttons. A clear Listening indicator shows whenever the microphone is on, and your browser shows its own recording indicator too.
The microphone is only ever on while that reading panel is open. Tapping the listening button, switching to highlighting, or moving to the next question switches it off immediately.
It also takes no for an answer. If a child switches the microphone off, or chooses highlighting instead, on two missed questions in a row, the panel stops opening the microphone by itself and goes back to asking. Reading out loud once more turns it back on. There is no setting to hunt for — it simply follows what the child does.
To switch it off for good, withdraw the microphone permission for this site in your browser settings, or use Delete all my progress.
Multiplayer
Multiplayer needs a connection, because players share a room. When a child joins a room we store the room code, a first name only, the grade level and subjects chosen for the game, the questions in that round, and the running score and answers. The name is automatically shortened to a single first name, so a full name cannot reach a room even if one is typed into the name box. We ask children to use a first name or a made-up nickname.
Rooms are temporary. A random anonymous device identifier is used to keep scores attached to the right player during a game; it is not linked to a real identity and is used only to make the game work.
Reporting a problem with a question
If a question looks wrong, there is a button to report it. That report is the one place where a child can type free text, so please tell them not to write anything about themselves in it.
A report sends the question and answers involved, which answer was picked, the grade and subject, the reason chosen and any note typed, the page address without its web address options, the browser and version (so we can fix display problems), and a random anonymous device identifier. It does not include the player name.
Progress codes
Children often use this on more than one device — a school laptop, a computer at home, a phone. To carry progress between them we use a progress code: three ordinary words, such as sun-frog-cake.
A progress code names a save file, not a child. Nothing personal is stored against it. No name, no email, no password, no age, no school, no location. If somebody guessed a code, all they would find is a list of quiz results belonging to nobody in particular. The name typed into the player box never leaves the device it was typed on — it is not part of the synced record.
The code is typed once per device and remembered after that. It can also be bookmarked as a link, which is useful on school computers that clear their browser data. A code can be abandoned at any time from the welcome screen, and a new one generated.
Because a code is the only key to that progress, anyone who has the three words can load it. We suggest treating it like a library card: fine to write in a notebook, not something to post publicly.
The ordinary plumbing of the internet
Being honest about the part nobody can switch off: to load a web page at all, your device has to ask a server for it, and that request carries your IP address. Cannon Quiz is hosted on Google Firebase, and two small drawing libraries load from a public code service, so those companies see the request in the same way they do for any website you visit.
We do not use that information, we do not combine it with anything, and we have added no advertising, analytics, or tracking of any kind on top of it.
Deleting everything
On the welcome screen there is a button labelled Delete all my progress. It erases the backup held under your progress code and everything saved on the device you are using. It cannot be undone.
If you never created a progress code, there is nothing on our side to delete at all — clearing your browser data removes everything. To ask a question, contact us at brokainbrothers@gmail.com.
Children under 13
Cannon Quiz does not collect personal information from anyone, of any age. There is no sign-up, no email address, no password and no real name anywhere in the service. A progress code identifies a save file, not a child.
Because there is nothing personal to collect, there is nothing for a parent to consent to, review, or ask us to delete on our side. Parents can erase all stored progress themselves at any time using the delete button described above.
Changes
If this promise changes we will update the date at the top of this page. We will not start collecting more than described here without saying so plainly.