How Dino Munch handles data. Short version: nothing leaves your browser unless you personally tick a box.
localStorage.This policy covers the Dino Munch website, which consists of the game (index.html), the information pages beside it, and any copy of them placed on another host. The operator is:
| Detail | Value |
|---|---|
| Operator | Tomorrowly |
| hello@tomorrowly.co.za | |
| Legal domicile (country of establishment) | [legal domicile to be added] |
| Company registration number | [company registration number to be added] |
| Physical / postal address | [physical address to be added] |
| Information Officer / Data Protection Officer | [name and contact to be added] |
Until those placeholders are replaced, email hello@tomorrowly.co.za and it will reach the same person.
Nothing is collected. Not your name, not your email address, not your device identifiers, not your location, not your screen contents, not your IP address as a stored record.
The game has no login, no account system, no payment step and no server-side database. When you play, everything that happens — the dinosaur, the fruit, the score, the sound — is drawn and calculated on your own device by the page you already downloaded.
The game uses your browser's localStorage, which is a small storage area that belongs to the site inside your browser. It never leaves your device and is not transmitted to us. It holds exactly three items:
| Key | What it holds | Why |
|---|---|---|
dmHigh | Your best score, as a whole number. | So the menu can show you your personal best. |
dmSettings | Your preferences: sound on or off, the length of the timed session (1, 2, 3 or 5 minutes), and whether touch controls are automatic, on or off. | So you are not asked the same questions every time. |
dmConsent | Your analytics choice: granted or declined. | So the consent banner is not shown again after you have answered it. |
There is nothing else in there. In particular, we do not store the questions you answer, the facts you have seen, the contents of the quiz, or anything about the person using the game.
Analytics are disabled unless you actively opt in. A consent banner is shown on first use, and until you choose, nothing is sent anywhere. Declining has no effect on the game: it plays exactly the same either way. If your browser sends a Do Not Track header, analytics stay off even if the banner is ignored.
If — and only if — you consent, the game sends anonymous play counts to Google Analytics 4. The purpose is narrow and practical: to find out roughly how many children play, whether the game works on older phones and tablets, and whether one of the six science topics is being missed. We cannot see who you are, and we would not want to.
The analytics tag is configured to disable the features that could turn anonymous counts into something identifying:
| Setting | Value | What it prevents |
|---|---|---|
allow_google_signals | false | Google Signals, which can derive demographics and interest segments from a device. |
allow_ad_personalization_signals | false | Ad personalisation signals. Dino Munch runs no advertising of any kind. |
ads_data_redaction | true | Advertising identifiers being attached to events. |
anonymize_ip | true | Full IP addresses being recorded with the events. |
Only these eight aggregate game events. Each one is a count of something that happened:
| Event | Fired when | What it contains |
|---|---|---|
game_start | A timed session begins. | The session length you chose (1, 2, 3 or 5 minutes). |
game_end | A session ends, whether by the timer or by you leaving early. | Final score, number of fruit caught, best combo, number of facts shown, and the reason the round ended. |
fruit_catch | The dinosaur catches a piece of fruit. | Which of the six science topics the fruit belongs to, and the current combo size. |
fact_shown | A science fact appears on screen. | The topic name and the fruit that carried it. |
quiz_start | The end-of-session quiz opens. | How many questions the quiz contains. |
quiz_answer | A true-or-false question is answered. | Whether it was correct and which question number it was. |
quiz_complete | The quiz finishes. | The quiz score and the total number of questions. |
setting_change | You change a setting. | Which setting (sound, session length or touch controls) and its new value. |
No name, no email address, no username, no account ID, no advertising ID, no precise location, no device fingerprint, no IP address, no free text, and no questions or answers from the quiz are included. A child playing Dino Munch produces numbers in the same shape as an adult playing it. The data is not joined to any other dataset by us, and we do not attempt to re-identify anyone.
A note on children's privacy law. If a child plays on a device where they are not signed in to a Google account, an advertising identifier is not available to the tag and none is attached. The game is not directed at children under 13 as a data subject, and the consent banner is designed to be answered by an adult. See Dino Munch for parents and guardians for the plain-language version.
You can change your mind at any time. Clearing the stored consent choice removes it completely, and the next time you open the game the banner will ask you again.
dmHigh, dmSettings and dmConsent together.Clearing your browser's overall cache or site data for all sites also works, and is often the quickest option. Because there is no account and no server copy, deleting the browser data is a complete deletion — there is nothing left behind on our side to delete afterwards.
On a shared device, clearing site data is sometimes awkward. If the concern is only the high score, leaving the game through the menu and declining the consent banner is enough: the stored high score is a number on that device and is never transmitted. To remove it fully, clear the browser's data for this site, or clear all browsing data on the device.
Cookies. Dino Munch does not set any cookies of its own. The only browser storage it uses is the three localStorage items listed above. If you opt in to analytics, Google's own tag may set cookies or use similar storage under Google's policies to count visits; those are Google's, they are governed by Google's terms, and you can block or delete them in your browser like any other cookie.
Do Not Track. The game respects the navigator.doNotTrack and window.doNotTrack signals. If your browser or extension sends one, the analytics tag is not initialised and no events are sent — even if a consent banner is displayed and dismissed without a choice. Turning Do Not Track on in your browser is therefore a complete way to guarantee that nothing is transmitted.
Advertising blockers and tracking protection. Most privacy browsers block the analytics tag outright. Blocking it has no effect on the game itself, which is entirely self-contained and makes no other network requests.
Dino Munch is designed to be played by children around the age of nine or ten, usually with an adult nearby. It currently has no chat, messaging, user-generated content, in-game purchases or social features, and it is not directed at children under 13 as a data subject. By default nothing is collected from a child at all.
We have written a separate, plain-language notice for parents and guardians: Dino Munch for parents and guardians. It covers what a child sees, what is collected, and how to switch the optional analytics off.
These rights depend on where you live, and in practice most of them are satisfied by clearing your browser data, because there is no account and no server-side record.
| Law | What it means for Dino Munch |
|---|---|
| POPIA — Protection of Personal Information Act 4 of 2013 (South Africa) | POPIA applies to personal information. Dino Munch does not process personal information by default. If you opt in to analytics, the counts are not linked to an identifiable person and IP addresses are anonymised, which is consistent with POPIA's approach to anonymous and de-identified information. POPIA also sets rules for children's information, and for the promotion of the processing of a child's personal information; Dino Munch never asks for a child's information and never processes it, so those provisions are not engaged. |
| GDPR / UK GDPR (European Union and United Kingdom) | These apply where an individual is in the EU or UK. There is no personal data processed, analytics are consent-gated, consent can be withdrawn at any time, and data is not transferred outside the region by us. If the site is made available in the EU or UK, the operator details above identify the controller. |
| COPPA — Children's Online Privacy Protection Act (United States) | COPPA applies to child-directed online services aimed at under-13s and to operators with actual knowledge of under-13 collection. Dino Munch is not directed at under-13s as a data subject, collects nothing by default, and is intended for supervised use. If analytics are enabled, no personal information is collected, no account is created and no personal information is disclosed to any third party. |
Whatever the applicable law, you can simply email hello@tomorrowly.co.za and we will help you understand what exists, correct it, or arrange for it to be deleted. Because there is no account, in practice the only thing that can exist is the anonymous, opt-in analytics data.
Dino Munch is a static site with no database to breach. The page you play is a file downloaded from a web host; nothing sensitive is submitted from it. Anyone with access to the host can see the page source, which is why no secret is ever embedded in it.
Everything on this page is written in good faith to describe accurately what the software does, so that families and schools can make an informed decision. It is not legal advice, and it is not a compliance certificate. Before Dino Munch is used in a school, distributed commercially, or relied on to satisfy a duty under POPIA, GDPR or any other law, the operator should obtain a formal review from a qualified data-protection lawyer and insert the real entity, address and registration details that are currently marked as placeholders above.
If this policy changes, the Last updated date at the bottom of this page will change too. A material change — for example, if analytics became non-optional or a new item of storage were added — will also be reflected in the consent banner the next time you open the game. Continuing to use the game after a change is shown means you accept the updated policy.