Privacy

Sunupo is used by families with young children, so it is built to know as little as possible. This page describes what it stores and where.

Who signs in

Only grown-ups sign in. Kids never have an account, an email address or a password. To Sunupo a kid is a nickname and a colour that a grown-up types in. We suggest nicknames, not full names.

What we store

• Your sign-in: your email address, or the Google account you choose to sign in with. This is kept by Clerk, the service that runs the sign-in for us. We do not ask for your name, phone number or a password. If you sign in with Google, Google passes your name and profile picture to Clerk. Sunupo shows your first name to the other grown-ups in your family account, so they can tell who is who. We do not store it ourselves and do not use the rest.
• Your family's setup: the kids' nicknames and colours, your routines, jobs and times, which kid is captain next, and what the kids have collected in their clubhouse (which movie endings and surprise missions they have seen).
• Surprises you set: a short message you type for the next mission, and where you hid a treasure. Both are deleted once the game has used them.
• Finished routines: the short list grown-ups see under Week (date, routine and times, the most recent 80).
• Who belongs to your family account: an account number for each grown-up who joined, and any invite codes you created.

The family's setup and history are stored in a database at Cloudflare, the company that hosts this website. A copy stays in the browser of each device you play on, so the game works offline. Display choices such as bigger text stay on the device only.

What we don't do

• No ads.
• No tracking scripts, and we don't sell or share your data.
• No birthdays, photos, addresses or locations.
• Nothing is loaded from other companies except the sign-in form, which comes from Clerk and uses the cookies it needs to keep you signed in. Paying happens on Stripe's own page.

Sharing with another grown-up

You can invite another parent or guardian with a one-time code. They sign in with their own email address and see the same kids and routines. In the list of grown-ups you see each other's first name if the sign-in has one (it does with Google). The owner of the family account can remove them again.

Deleting your data

On your account page, under Sign-in, choose Delete my account. This deletes your sign-in. If you are the only grown-up in the family account, the kids, routines and history are deleted with it and a membership ends at once. Signing out removes the family's setup from that device.

What the website itself sees

Like every website, the server receives the technical details needed to deliver a page, such as the address of the page and your device's internet address.

Payments

The membership is paid on a page run by Stripe, a payment company. Your card details go to Stripe only; we never see or store them. Stripe also receives the email address you enter there. We keep a customer number from Stripe and whether your membership is active, so the right worlds are open for your family.

Last updated November 14, 2026.