Privacy Policy
WonderWatch is a family app run by a parent. We collect the smallest amount of information we can, we never show ads, and we never sell or share data for advertising. This page explains what we do collect and why.
Who we are
WonderWatch is made by Firmin Labs (Ontario, Canada) and lives at wonderwatch.firminlabs.com. You can reach us at support@firminlabs.com.
WonderWatch uses YouTube API Services
Videos are played through YouTube's own embedded player, and we look up video details (titles, thumbnails, durations and whether a video is marked “made for kids”) using the YouTube Data API. By using WonderWatch you are also agreeing to the YouTube Terms of Service, and Google's handling of data is described in the Google Privacy Policy. We load the player in YouTube's privacy-enhanced mode (youtube-nocookie.com) for every video, and for videos YouTube marks as made for kids we run no tracking of any kind on that player.
What we collect
| About | What | Why |
|---|---|---|
| Parents | Email address; the family name and timezone you choose; your content choices (creators, categories, limits). | To sign you in with a magic link, run your family's settings and send you the daily and weekly report emails. |
| Children | A first name or nickname, a chosen avatar and colour, and an optional PIN (stored only as a one-way hash). No email, no photo, no date of birth, no account. | So each child has their own screen-time clock and profile. Children never create accounts and never enter personal information. |
| Watching | Which videos were started and finished, how many minutes were played, where a video was left off, and when the hop/skip limits were used. | To enforce the screen-time clock and the anti-hopping rules, to resume videos, and to show parents what their kids watched. |
| Devices | Two signed cookies on a device a parent sets up for the kids (which family it belongs to, and which child is watching), plus the parent's sign-in cookie on the parent's own device. | To show the right profiles and keep the right clock running. They contain no personal details and are not used to track anyone across other sites. |
| From YouTube | Public video and channel metadata fetched through the YouTube Data API. | To build the catalogue. This cached data is refreshed or deleted within 30 days, as YouTube's policies require. |
What we do not do
- No advertising of our own, and no personalised or remarketing ads, ever. (YouTube may show its own ads inside its player; we cannot control those.)
- No analytics or tracking scripts in the child area or in the signed-in parent and owner areas. The only thing the child's screen sends us is the playback heartbeat that runs the clock.
- No selling, renting or sharing of personal information with anyone for their own purposes.
- No comments, chat, search or social features for children.
Visit statistics on our public pages
The public pages a grown-up sees before signing in (the home page, How it works, sign-up, this policy and the terms) use Google Analytics only if you click Accept on the banner. It counts visits and which pages are read, and whether someone starts signing up. If you choose No thanks, nothing from Google loads. Google Analytics is never loaded in the child area, the parent area or the owner area, even if you clicked Accept. Advertising features and ad personalisation are switched off. Your answer is kept for a year in a cookie called fl_consent, shared by the Firmin Labs websites, and explained in more detail here.
Who helps us run it
Data is stored with Supabase (database and sign-in, hosted in Canada), the site runs on Vercel, and emails are sent by Resend. Each of them processes data only on our instructions to provide the service. Video playback and metadata come from Google/YouTube under the policies linked above.
Children's privacy
WonderWatch is built for children to use, under a parent's account and settings. We collect no personal information from children beyond the first name and avatar a parent enters, we do not allow children to share information, and we treat the child area as child-directed for the purposes of laws such as COPPA. A parent can see everything recorded about their child on the parent dashboard and can edit or delete a child profile at any time, which deletes that child's watch history with it.
Your choices and your rights
- See, change or delete any child profile and its history from the parent dashboard.
- Turn report emails off in your settings.
- Ask us to delete your whole family account and everything in it by emailing support@firminlabs.com. We will do it.
- Google lets you manage the data it holds about you at Google security settings; WonderWatch does not connect to your Google account.
How long we keep things
Your family's settings and watch history are kept while your account exists. Cached YouTube data is refreshed or deleted within 30 days. Sign-in cookies last a session; the kids' device cookie lasts up to a year unless a parent forgets the device; the child's watching cookie lasts a few hours.
Changes
If this policy changes in a way that matters, we will say so in the parent report email and update the date at the top of this page. See also our Terms of Service.