Privacy Policy

1. Overview

Wonderlit (“we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, and protect information when you use our children’s book discovery platform at wonderlit.co (“the Service”).

2. Information We Collect

Account Information

When you sign in with Google, we receive your name, email address, and profile picture from Google. We do not receive or store your Google password.

Child Profiles

You may create child profiles containing a first name, birth year, reading level, and interest tags. We intentionally minimize data collection for children—we do not collect last names, photos, exact birth dates, school names, or other identifying information about children.

Usage Data

We collect information about how you use the Service, including pages visited, searches performed, books saved, and reviews submitted. We use Vercel Analytics for aggregate traffic metrics.

Affiliate Click Data

When you click an affiliate link (Bookshop.org, Amazon), we log the click for analytics. We do not track purchases or receive purchase data from booksellers.

3. How We Use Information

We use your information to:

• Provide and personalize the Service (book recommendations, reading lists)
• Authenticate your account and maintain your session
• Moderate user-submitted reviews
• Improve the Service through aggregate analytics
• Send important account-related communications

4. Information Sharing

We never sell your data to third parties. We may share information only in these limited circumstances:

• Service providers: Infrastructure partners (Vercel, Neon, Cloudflare) that help operate the Service, bound by confidentiality agreements
• Legal obligations: When required by law or to protect our rights
• Public content: Reviews and public reading lists are visible to other users

5. Children’s Privacy (COPPA)

Wonderlit is designed for parents, teachers, and caregivers—not for children to use directly. We do not knowingly collect personal information from children under 13. Child profiles are created and managed by authenticated adult account holders and contain only minimal, non-identifying information.

If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

6. Data Security

We use industry-standard security measures to protect your data, including encrypted connections (HTTPS), secure authentication (OAuth 2.0), and access controls. Data is stored in secured, encrypted databases.

7. Data Retention

We retain your account data as long as your account is active. You may request deletion of your account and associated data at any time by contacting us. Child profile data is deleted immediately when removed by the account holder.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your account and personal data
• Export your data in a portable format
• Opt out of non-essential data processing

9. Cookies & Tracking

We use essential cookies for authentication (session management). We use Vercel Analytics for privacy-friendly, aggregate traffic metrics that do not use cookies or track individual users across sites.

10. Third-Party Links

The Service contains links to third-party booksellers and websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via the Service. Continued use after changes constitutes acceptance.

12. Contact

Questions or concerns about your privacy? Contact us at hello@wonderlit.co.