Indi&Vega

Leer en español

In one sentence: this game collects no data at all. Not about the child, not about the grown-up, not about the device. No accounts, no ads, no usage tracking, and the game talks to no server while you play: it runs entirely on the device, even with no internet. (Since 27 August 2026 the whole game is stored on your device so it can be played with no connection. The only thing asked of our server, and only when there is a connection, is whether a newer version exists. It is all set out below, under «The whole game is stored on your device».)

And a second sentence, needed since 27 August 2026: on the website — not inside the game — there are two forms a grown-up may fill in if they feel like it: telling us how it is going, and leaving an email address so we can announce the launch. Both are voluntary, both live outside the game, and neither has anything to do with the child. They are described one by one further down, under «What a grown-up writes on purpose».

Who is responsible

Indi&Vega was made by a father, for his daughters. It is published as a private individual: this is not a company, and today it is used by a handful of invited families.

Since 27 August 2026 an access code can also be bought. The party that charges you, invoices you and answers for the purchase is the sales platform (a merchant of record such as Gumroad or Lemon Squeezy): they are the legal seller, they handle VAT and refunds, and they are the only ones who see your payment details. None of that reaches us — not your name, your email, your card or your country. The only thing that crosses over is a six-letter code. That platform has its own privacy policy, shown on its own checkout page.

For anything on this page — questions, deleting something, withdrawing your invitation — write to hola@indiyvega.com. Replies are written by hand, so not instant, but they come.

Who the game is for

Children aged 3 to 6, playing with a grown-up nearby. The person who receives the invitation and opens the door is always the parent or legal guardian: that is why entering requires ticking a box saying so. The game is not meant for a child to open or install on their own.

What data is collected

None. Nothing about the person playing is asked for, sent anywhere, or received by anybody. The game does remember your progress inside your own device, without it ever leaving the device and without identifying anyone: the whole story is a little further down, under «The game's progress is saved on your device».

Specifically, none of this happens inside the game — which is where the child is, and therefore where the list has to be strictest:

No sign-up, no accounts, no passwords, no email addresses, no phone numbers. (On the website, outside the game, a grown-up may leave an email address to be told about the launch; described below.)
No name, age, gender, photo or voice of anyone is requested.
No measurement of which games are opened, how long they are played, or how far anyone gets. This did happen until 14 August 2026, to learn which games children liked; it has been removed completely and everything previously stored has been deleted from the server.
The game stores no IP address in any file. The server sees it — as every server on the internet does, otherwise it could not reply to you — and uses it only, in memory and for at most one hour, to slow down anyone trying to guess invitation codes. Separately, the program that serves the pages keeps a technical connection log like any website (date, address requested, IP). It is not read, not combined with anything, never used to work out who plays what, and nobody else sees it.
No advertising, no in-game purchases, no nudges to spend money, no links that lead elsewhere on the internet.
No third-party services: no Google Analytics, no social networks, no share buttons, no fonts or libraries loaded from outside. Nobody but this server sees anything, and this server sees no more than a request for the game file.
No access to the camera, microphone, contacts, photos or location.
The game's voices are recorded inside the file itself. No text is sent to Google, Apple or anyone else to be spoken aloud. The game blocks all outgoing internet access from the inside, and an automated check refuses to publish it if that block is ever removed.
No profiling, no automated recommendations, no likes, nothing designed to keep a child playing longer.

The game's progress is saved on your device

It is saved only on this device, and it never leaves the device. Since 27 August 2026 the game remembers where you got to. That is written into the memory of the phone, tablet or computer itself, with the same mechanism a browser uses to remember your preferences on a website. Nobody else sees it: not the server, not the person who made the game, not any third party. It is sent nowhere, because the game blocks all outbound internet access from the inside.

Exactly six things are saved, and there is no seventh:

The sticker album: which stickers have been earned and at which level (bronze, silver or gold).
The difficulty: which step each game is on, so that every morning does not start again from the easiest one.
Personal bests in the skill games. They are against yourself: there is no leaderboard and no comparison with anyone.
Which colouring pictures have been finished, so the same ones do not come round again and again.
The chosen language, Spanish or English.
The sound settings: what you left switched on of music, effects and voice. If you mute the music, it stays muted next time; the game will not argue with you about it.

And this is what is not saved, there or anywhere else: names, ages, photos, voices, device identifiers, dates, how many times it has been played, for how long, or on which days. None of that even has a place to be written: the program carries a closed list of those six things and refuses to store anything else. Since nothing identifies anyone and nothing leaves the device, this is not data collection: it is what a toy does when it remembers which song it stopped at.

You can delete it whenever you like, with one button. Inside the game, on the progress screen, there is a round button at the bottom right: press and hold it for three seconds — so that a child cannot open it — and inside you will find «Delete this device's progress». Everything above is deleted on the spot, with nothing asked in return. It is also deleted if you clear your browser data or uninstall the app. And if your browser does not allow saving at all (private mode, for instance), the game works exactly the same: it simply remembers nothing after you close it.

The whole game is stored on your device, so that it works with no internet

Since 27 August 2026, the first time you come in, a copy of the game is stored on your device. After that it works with no connection at all: in the car, on a plane, on the underground, or anywhere with no signal. That copy is the game itself — drawings, voices and music, about 6 MB — and nothing else. It carries nothing about you and nothing about the child, because there is nothing to carry.

This is done by a service worker: a small program of ours that the browser keeps alongside the game and that serves the game to you from your own device when there is no network. It is worth being precise about what that does and does not mean:

The game still cannot talk to any server. Its internal block on outbound internet access has not been touched, and the automated check that refuses to publish it if that block is ever removed is still in place. The service worker is not the game: it lives outside it, and the game gains no new permission.
The only thing that program asks our server is whether a newer version of the game exists. That is all, and only when there is a connection. The answer is two values: the version number and the date your invitation expires. Nothing about the child is sent, nothing about the session is sent, and no line is written anywhere: there is still nowhere to write one.
The copy never outlives your invitation. It is stored together with the same expiry date your access cookie already carries, and it stops serving the game once that date has passed. If your code is withdrawn, the copy deletes itself the next time the device has internet.
It is deleted with your browser data, like everything else, or by uninstalling the app from your home screen. In your phone or browser settings it shows up as storage used by indiyvega.com.
If a new version ever appears, the notice is shown to the grown-up, inside the grown-ups' corner on the progress screen. An «update» button never appears on a screen a child is touching.

Cookies

There are exactly two, and both are strictly necessary: without them the invitation would not work. Neither is used to track anyone or for advertising, which is why there is no cookie banner to accept.

iv_pase: remembers that you already entered your code, so it is not asked for every time. Expires after 90 days. It contains only your invitation label, an expiry date and a signature.
iv_inv: holds the code you can give away to another family, so it can be printed on the drawing if you choose to share it. Expires after 90 days.

They delete themselves when they expire, and you can clear them from your browser at any time. If you do, the only effect is being asked for the code again.

The only thing stored — and it is not a child's

To hand out invitations there is a list holding two things per family: a label written by whoever invites («Marta», «the cousins») and a six-letter code. When a family first uses its code, that label and the date are recorded.

There are no surnames, addresses, emails or phone numbers there, and nothing about any child. But the person who wrote the label knows who it refers to, so it is treated as personal data of the invited adult — which is the honest reading. It exists so the code works and so it is possible to know who has not used their invitation yet. It never leaves the server and is not combined with anything else.

Legal basis, if you want the technical name: legitimate interest in managing the guest list of a private trial (GDPR art. 6(1)(f)). It is deleted as soon as you ask.

What a grown-up writes on purpose

The difference with what was removed on 14 August is the whole difference. That was taken from a child while playing, without the child knowing or being able to decide. This is two web forms that an adult opens, reads and fills in if they want to. None of it is inside the game and none of it is ever asked of a child.

The pulse (indiyvega.com/pulso). Three faces, a favourite game and a free-text box. It is stored on the server in a file called pulso.ndjson, and each line holds exactly four things: the day (the day only, not the time), the face, the game you picked and whatever you wrote. There is no identifier of any kind: no family code, no cookie, no IP address, no time of day, no browser language. It is genuinely anonymous, not «anonymous except for one detail»: two of your answers cannot be linked even on purpose — which is also why they cannot be deleted on request, since there is no way to tell which ones are yours. If something written there troubles you, say so and the whole file is deleted. It is voluntary, and sending just the face is fine.
«Tell me when it launches», on the front page. This one does store a personal detail, and it is the only one in the whole project: your email address, together with the day you left it, in a file called avisos.ndjson. Nothing else: no name, no IP address, no referrer. It is used for one thing — writing to you when the game can be bought — and it is deleted as soon as you ask, or once that message has been sent. The legal basis is your consent (GDPR art. 6(1)(a)): nothing is stored without ticking the box, and you can withdraw it at any time by writing to the address above. It is a detail of an adult who asked for it, not of a child.
Codes handed out. When someone buys a code, which code was handed over and on which day is recorded in entregas.ndjson, so the same one is never given twice. Of the purchase itself, what is stored is a mathematical result of the order number — not the number — used only so that reloading the page gives you the same code instead of spending another one. Your name, email and payment stay with the platform that charges you; they never reach us.

Who it is shared with

Nobody. Nothing is disclosed or used for advertising, and nothing leaves the server, which is hosted in Germany (European Union). There are no transfers outside the EU from here either.

The one exception runs the other way: if you buy a code, you give your details to the sales platform on its own page, not here, and none of it comes back to us. We send that platform no data about you, because we hold none.

How long things are kept

Your label and code: for as long as this private trial lasts, or until you ask for them to be deleted. When the trial ends, the whole list is deleted.
Your «tell me when it launches» email: until that announcement is sent or until you ask for it to be deleted, whichever comes first.
Pulse answers: for as long as they help decide what to improve. Since they carry nothing that identifies anyone, they do not expire out of risk — they expire when they stop being useful.
Usage data from the game: none exists. What existed was deleted on 14 August 2026.

Your rights

You can ask to see what is held under your name, correct it, delete it, object to it being held, or withdraw your invitation, at any time and without explaining why. In practice the only things that exist are your label, your code and the date you first entered: write to hola@indiyvega.com with your code and it is deleted. Once deleted you will no longer be able to enter, which is exactly what withdrawing means.

And if you left an email under «tell me when it launches», say so in the same message and it goes too. Pulse answers cannot be deleted «yours only», for a reason that works in your favour: nothing was stored saying they were yours.

If something does not sit right, you can complain to the data protection authority in your country. In Spain that is the Agencia Española de Protección de Datos (aepd.es); in the UK, the Information Commissioner's Office (ico.org.uk).

About children, seriously

This game is directed to children, so the strictest rules apply: the EU General Data Protection Regulation, the United States Children's Online Privacy Protection Act (COPPA), and the UK Age Appropriate Design Code. The chosen way to meet all of them is the simplest and safest one there is: collect nothing. With no data there is nothing to consent to, nothing to lose and nothing to misuse. Because no personal information is collected from children, no verifiable parental consent is required under COPPA — the grown-up's confirmation at the door is there anyway, so that an adult, not a child, is the one who decides.

If you still believe some data about your child may have reached here, write and it will be looked into and deleted the same day.

If this changes

If anything ever were collected, invited families would be told beforehand, the date at the top of this page would change, and permission would have to be given again. Nothing will be switched on quietly.

This page also exists because app stores require every app to have a public privacy policy, whether it collects data or not. Any store version of this game will declare "Data Not Collected", which is what it does.