The Promise · COPPA-compliant · Last updated April 2026

The Promise · Last updated April 2026

A few things we will not do.

We do not collect identifying data from children. Ever.

We do not run ads. We do not sell your data. We have no advertiser partners.

The game pages do not set cookies that identify a person. The aggregate analytics we use, Cloudflare Web Analytics, does not record IP addresses or generate a fingerprint.

Kids do not sign up for OnLit. Only parents do. The Parent Portal stores one thing: your email. It's encrypted at rest, used only to send you reports, and deleted within seven days of unsubscribing.

01 Introduction

This Privacy Policy describes the information practices of OnLit ("OnLit," "we," "us," or "our"), a Computer Science Capstone project of Riverdale Country School, with respect to the website located at onlit.riverdale.edu and the Dino Party Patrol browser-based application (collectively, the "Services"). The Services are directed to children between the ages of seven and twelve and to the parents, caregivers, and educators who support them.

By accessing or using the Services, you acknowledge that you have read and understood this Policy. This Policy does not form a contract between you and OnLit.

02 Information we do not collect

OnLit does not knowingly collect personal information from children. The browser-based games do not require account registration or authentication. Specifically, we do not collect from children:

  • Names or usernames;
  • Email addresses or other contact identifiers;
  • Photographs, audio recordings, or video recordings;
  • Geolocation data, precise or approximate;
  • Telephone numbers or other direct identifiers;
  • Persistent identifiers associated with advertising.

The optional Parent Portal collects information only from the parent or guardian who opts in, and only as described in Section 07.

03 Cookies and tracking technologies

The game pages do not set cookies and do not employ any tracking technology that identifies individual users. The optional Parent Portal uses standard authentication cookies to keep a signed-in parent's session active; these are first-party, expire on logout, and are not used to track behavior across other websites. OnLit does not participate in behavioral advertising networks, and OnLit does not sell, license, or otherwise commercialize user data.

04 Aggregated analytics

OnLit uses Cloudflare Web Analytics to measure aggregate traffic to the Services. Cloudflare Web Analytics is a privacy-preserving analytics service that does not use cookies, does not collect Internet Protocol (IP) addresses, and does not generate a user fingerprint or any identifier capable of associating activity with a specific individual. The data collected is limited to aggregate measurements such as page views and referrers.

05 Feedback submissions

OnLit makes an anonymous feedback form available at onlit.riverdale.edu/feedback.html. The feedback form does not request, and we do not accept, any personal information. Submissions are used solely for the purpose of improving the Services.

06 The game

Dino Party Patrol is executed entirely within the user's web browser. No gameplay data, progress information, or performance metrics are transmitted to OnLit or to any third party. Game state is not persisted on our servers.

07 Parent Portal (opt-in)

OnLit operates a Parent Portal currently in private beta. The Parent Portal is opt-in for the parent or guardian and is used to send short notes by email about which level a child has finished and which skill the level worked on. The email address is the only personal information collected, is encrypted at rest in our database, and is used solely to send the notes the parent has requested. One link in every note unsubscribes the email address; once unsubscribed, the address is deleted within seven days. We do not transmit the child's name, image, voice, location, social graph, or any other identifying information.

08 Children's privacy (COPPA)

OnLit is designed to comply with the Children's Online Privacy Protection Act of 1998, 15 U.S.C. §§ 6501–6506, and the regulations promulgated thereunder (collectively, "COPPA"). Because the Services do not collect personal information from any user under the age of thirteen, verifiable parental consent is not required to access the Services. The Parent Portal collects information only from the parent or guardian, not from the child, and only upon the parent's express opt-in.

10 Changes to this Policy

OnLit may amend this Policy from time to time. Any amendment will be reflected by an updated "Last updated" date at the top of this page. Material changes will be indicated prominently on the Services.

11 Contact

Questions regarding this Policy may be directed to onlit@riverdale.edu. OnLit is a Computer Science Capstone project of Riverdale Country School, located in the Bronx, New York.