Privacy

How we handle your family's information

Last updated November 8, 2026

The short version: we ask for as little as we can, we never sell anything about you, and if you add a photo of your child, we delete it automatically within about a day.

What we collect

A first name or nickname for your child, their age group and the world you pick. We need these to make the sheet.
A guest session. We don't ask for an email or a password. Your browser keeps a small cookie so you can come back and download your sheet again. Clearing your cookies ends it.
A photo, only if you choose to add one (see below).
Basic technical logs that every website keeps, such as the time of a visit and the type of browser, to keep the site running and safe.

We don't ask for your child's last name, birthday, school or address, and there are no ads or advertising trackers on this site.

Your child's photo

Only a parent or guardian may upload a photo, and only after ticking the consent box. Children should not use this site on their own.
It is stored privately. Nobody else can see it. When it arrives, we remove hidden details such as location and camera information.
It is used for one thing only: making your child's sheet. It is never used for advertising, never shown publicly, never sold and never used to train AI.
We delete it automatically 24 hours after you upload it. Our cleanup runs every hour, so it can take up to an hour longer. You can also delete it straight away with the “Delete it now” button.
Today, your photo is not sent to any AI drawing service. Sheets currently use our own sample scenes. Before we start drawing children into the scenes, we will name the drawing service here and explain what it does with the photo.
Deleting the photo does not remove a sheet you already downloaded. Those files live on your device.

Who helps us run GoodPath

A few trusted services do the behind-the-scenes work. They only get what they need for their job:

Vercel hosts the website.
Supabase stores sheet details and photos, in a private, locked-down database in the United States.
Inngest runs the steps that make each sheet. It sees an order number, not names or photos.
Stripe handles payments if you buy something. Stripe collects your card details and email; we never see your full card number. With a purchase we also pass Stripe your child's first name, the world and the age group, so we know which sheet to make. Stripe has its own privacy policy.
Tally runs our optional feedback survey. The survey only receives the world and age group you picked, never your child's name. Tally has its own privacy policy.

How long we keep things

Photos: 24 hours after upload (plus up to an hour for the cleanup to run).
Sheet details (nickname, age group and world): kept so you can download your sheet again. Email us and we'll delete them.
Technical logs: kept for a short time by our hosting provider for security.

Children's privacy

GoodPath is made for parents, grandparents and teachers, not for children to use on their own. We only collect a child's first name or nickname and, if a parent chooses, a photo, and only from that parent. If you think a child has given us information without a parent, email us and we'll delete it.

Your choices

You can ask us to show you, correct or delete anything we hold about your family. Email hello@goodpath.earth and we'll reply within 30 days, usually much sooner.

Changes

If we change how we handle your information, we'll update this page and the date at the top. For anything important, especially about photos, we'll say so clearly on the site first.

Questions? Email us at hello@goodpath.earth. A real person reads every message.