Bon's Kingdom · הממלכה של בוןBon's Kingdom · הממלכה של בוןUpdated: 27 October 2026 · version 2026-10. The Hebrew version is the binding one.
"Bon's Kingdom" (הממלכה של בון, formerly "Number Heroes") is an educational math game for children in grades 1–9. Controller: הממלכה של בון בע"מ (123456). Contact: shlomigu110@gmail.com.
Children can play without signing up. Progress is then stored only on the device. If the "short code" is used to move to another device, the progress code (numbers only, no name) is kept on our server until it is used or for up to 24 hours, then deleted. To improve the game we receive anonymous usage data only: a random id created on the device (not linked to a name, email or phone), grade, stages, whether answers were right and how long they took, and the device and browser type. The child's nickname is not sent, no email or location is collected, IP addresses are not stored with the data, and no profile of a child is built. This data is deleted automatically after 18 months.
Only a parent or legal guardian aged 18+ can create an account, and gives consent on behalf of their children. Children never sign up themselves and are never asked for an email, phone number, password, photo or location.
To run the game and sync progress across devices; to show parents where their child is strong or needs practice; to improve questions and fix bugs (using aggregated data); to secure the service; and, only with explicit opt-in, to email the parent about news. We do not sell data, show ads, profile children for marketing, or make automated decisions with legal or similarly significant effects.
Sign-in with Google requests only basic scopes (email, profile). We use this data solely to identify the parent and create the account. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. It is not shared with third parties, used for advertising, or used to train AI models.
Supabase (authentication and database, EU, Frankfurt); Google (sign-in; Cloud Text-to-Speech receives only the text being read aloud, with no user identifier); Cloudflare (hosting); Google Fonts and jsDelivr (fonts and a code library, which see the device IP address when loading); an email delivery provider; and, in the future, a payment processor (we never see card details). Transfers outside Israel follow the Israeli Privacy Protection (Transfer of Data to Databases Abroad) Regulations.
While the account is active. Detailed answer-level data is deleted automatically after 18 months; summaries remain. Deleting the account removes everything immediately, and from backups within 30 days.
Access (download all data from the Parent Area), correction, deletion of a child or of the whole account (in the Parent Area), and withdrawal of marketing consent at any time. Email us and we will reply within 30 days. You may also complain to the Israeli Privacy Protection Authority.
HTTPS everywhere; database row-level security so each parent sees only their own children; restricted admin access; incident reporting as required by law.
The game uses the device's localStorage for progress, settings and sign-in. No third-party or advertising cookies.