Wander Haven
Privacy Policy
Last updated 14 September 2026
The short version
- There is no advertising, no tracking and no analytics in this app. Nothing your child does here is sold, shared or used to target them.
- A grown-up makes the account. I ask for your email, your phone number, and your child’s first name, last name and birthday.
- While your child reads, the app records how far they got and how the reading went, so I can tell which chapters work.
- Your child can type a message to me. I read those. I reply to your email, never to your child.
- Your phone number is used to text you when a book or cards are on the way, and occasionally to ask how it is going. Nothing else.
- Email me at hello@wanderhavenworld.com and I will show you everything I hold about your family, or delete it.
Who I am
Wander Haven is made and run by Wei Wang, an individual operating as a sole proprietor in the United States. I am the person who wrote the books, and I am the person who reads your child’s messages. There is no team and no third party doing any of this on my behalf beyond the service providers named below.
For anything in this policy — a question, a request to see your data, a request to delete it — write to hello@wanderhavenworld.com.
Who this service is for
Wander Haven is offered in the United States only, and it is intended for children, with an account held and paid for by a parent or guardian. Because it is directed to children under 13, it is covered by the Children’s Online Privacy Protection Act (COPPA), and the section on children’s privacy below describes your rights as a parent.
What I collect
From the grown-up
- Email address and password. Passwords are handled by Supabase Auth and I never see them. If you sign in with Google instead, I receive your email address and the name on your Google account, and no password at all.
- Phone number. Asked for when you create your child’s profile. Used only for the texts described below.
- Whether you have a subscription, and which chapters your account has been given access to.
About the child
- First name and last name. The first name is shown in the app so a child knows the account is theirs.
- Date of birth. Used to know how old the reader is, which is what the stories and puzzles are pitched at.
- Reading progress — which chapter they are in, which page, which puzzles they answered and whether they got them right.
- The cards they have earned, so the right ones can be put in the post.
- How the reading went. The app records events such as a reading session starting and ending, a chapter being opened or finished, a puzzle being opened, attempted and solved, a hint being shown, and a reading being interrupted or left idle. This is how I find out that a puzzle is too hard or a chapter loses people halfway, which is the only thing it is used for.
- Anything they type into the message box at the end of a book. See below.
If you joined the waiting list
The signup form on the beta page collects your name, email address, phone number, whether your child reads independently, how you heard about Wander Haven, and the moment you agreed to be texted. Those rows are kept separately from accounts and are used to tell you when there is something to read.
The message box
Please tell your child not to put their address, phone number, school or passwords in a message. The box is free text and a child can type anything into it. If something like that arrives, I delete it.
At the end of a book a child can write to me. That message is stored with your name and email, your child’s name, and the time it was sent, so I know who I am replying to. I read every one.
I reply to the grown-up’s email address, never to the child. There is no inbox in this app and no way for anyone to send a message to your child through it. Children cannot message each other, and there is nothing public: nothing your child writes or does is visible to any other user.
What I do not do
- No advertising of any kind, and no advertising networks. There are no ads in this app and none are planned.
- No tracking pixels, no analytics service, no third-party cookies. There is no Google Analytics, no Meta pixel, and no product-analytics tool in this app. The reading events described above are recorded by me, into my own database, and go nowhere else.
- I do not sell or share your data, or your child’s, for money or for anything else. I have never done this and it is not a business I am in.
- No profiling and no behavioural targeting. Nothing about your child is used to decide what to advertise to anyone.
- Your child is not required to give me anything in order to read. The only things asked for are the ones listed above, which the grown-up provides.
Who else sees this
These are the companies whose software this product runs on. They hold data on my behalf in order to provide their service, and are not permitted to use it for anything else.
Supabase
Hosts the database and handles sign-in. Everything described above is stored there.
Vercel
Hosts and serves the app itself, and therefore handles the ordinary web-server records that come with that, such as IP addresses.
Only if you choose “Sign in with Google”. Google tells me your email address and the name on your account. If you sign in with an email and password instead, Google is not involved.
Stripe
Takes the payment, on Stripe's own pages. Card numbers go to Stripe and never reach me or this app.
Beyond these, information is disclosed only if the law requires it — for example a valid legal request — or to protect someone’s safety.
Texts and emails
I text the number you gave when your next book and cards are on their way, and once in a while to ask how it is going. That is the whole of it — no marketing blasts and no third-party offers. You can stop them at any time by replying STOP or by emailing me, and message rates from your carrier may apply.
Emails you receive are the ones the product needs to send: confirming your address, resetting a password, and my replies to your child’s messages.
Cookies and what is stored on the device
There are no advertising or tracking cookies here. The app sets a sign-in cookie so you stay signed in, which is what makes an account work.
The app also keeps a few things in your browser’s own storage, on your device: which child’s profile is selected, the page your child had reached so the book reopens in the right place, and any reading progress that has not been saved yet because the tablet was offline. Clearing your browser’s data for this site removes all of it.
Children’s privacy, and your rights as a parent
A child cannot create an account here. An account is made by a grown-up who gives their own email address and phone number, and the subscription is paid for with a payment card through Stripe. I treat that — an adult creating the account and completing a card transaction — as the verifiable parental consent COPPA asks for, given before anything is collected about a child.
As the parent or guardian, at any time you can:
- See everything I hold about you and your child.
- Correct anything that is wrong, including a name or a birthday typed in a hurry.
- Have it deleted. This includes your child’s profile, their reading history, and any messages they sent me.
- Refuse any further collection — you can ask me to delete the account and stop, and I will.
Email hello@wanderhavenworld.com from the address on the account and I will do it. Exercising any of these will not cost you anything; deleting the account does, of course, end access to the stories.
How long it is kept
I keep your account and your child’s reading history for as long as the account exists, so that a family who comes back finds their progress and their cards where they left them. There is no automatic deletion after a subscription ends, for the same reason.
Ask me to delete it and I will, whether or not the subscription is still running. Some records may persist briefly in routine backups after that, and in the records I am required to keep for tax and accounting — payment records, not reading records.
Security
The app is served over HTTPS, passwords are hashed by Supabase and never visible to me, and the database is configured so that an account can only ever read its own family’s rows. Card details never touch this app at all.
No system is perfectly secure, and I would rather say that than promise otherwise. If something ever goes wrong in a way that affects your family’s information, I will tell you.
If you live in California
California residents have the right to know what personal information is collected and why, to have it corrected, and to have it deleted, and not to be treated differently for asking. Those are the same rights offered to everyone above, by the same email address.
I do not sell personal information and I do not share it for cross-context behavioural advertising — including, and especially, the information of anyone under 16.
Changes to this policy
If this changes, the date at the top changes with it. If a change means collecting something new about your child, or using what I already hold for something new, I will email you and ask first rather than quietly editing this page.
Contact
Wei Wang — hello@wanderhavenworld.com