The short version
- If you don't sign in, we don't know who you are. There are no adverts here and no tracking cookies.
- Most games and apps run on your machine — your photos, drafts and progress stay in your browser, and nothing is uploaded.
- When you sign in with Google, we keep your email, name and profile picture, plus whatever you choose to save or share.
- We never sell, rent or trade anyone's data.
- You can delete your data yourself on Your profile, or message us and we'll delete the whole account.
On this page
1.Who looks after your data
YouUseAI (youuseai.com) is built and run by one person, Mark Nguyen, in Vietnam. In this policy, “we” means Mark Nguyen — the person who decides what data is collected and what it's used for, and so the data controller and processor under Vietnam's Law on Personal Data Protection (No. 91/2025/QH15) and Decree 356/2025/ND-CP.
This policy covers every page on youuseai.com, in both Vietnamese and English. If you have any question about your data, message us on YouUseAI's page on Facebook — the full contact details are at the end of this page.
2.What stays on your device
Most of this site runs inside your browser. The things below are kept in your browser's own storage (localStorage, IndexedDB) on the device you're using, and are never sent to our server:
- progress and settings for the games and for everything in the kids' corner;
- drafts in the apps and developer tools, including Route Board drafts;
- photos you open in Photo Lab, family photos you add to Little Puzzle, and videos you export from Run Along.
We can't see any of it. To clear it, go to Your profile and use “On this device”, or clear this site's data in your browser settings. On a shared computer, it's worth clearing before you leave.
Microphone. Tiny Band asks for the microphone so a child can blow into it to play an instrument. It only reads how loud the sound is at that moment — nothing is recorded, stored or sent anywhere. You can withdraw the permission in your browser settings at any time.
3.When you sign in with Google
You don't need an account to use this site. Signing in is only for keeping progress on your account, sharing links and sending feedback, and there is one way to do it: with your Google account, through a service called Supabase.
From Google we receive only your email address, display name, profile picture and account ID. We never see your password, and we have no access to your Gmail, Drive, contacts or anything else in your Google account.
| Data | When we get it | What it's for |
|---|---|---|
| Email, name, profile picture | The first time you sign in | Recognising you when you come back, showing your name at the top of the page, replying to your feedback |
| Game progress (stars, stages cleared, best scores) | When you play a game that saves progress while signed in | Keeping your progress the same across your devices |
| Routes and the Markdown, JSON and timetable links you share | When you press share | Letting anyone with the link see that content |
| Feedback you send | When you send it | So we can read it, reply and fix things |
| Whether the account is blocked, and why | Only if the account breaks the Terms of service | Stopping that account from signing in and sending feedback |
| Sign-in log (time, possibly an IP address) | Every sign-in, recorded by Supabase | Security, and looking into problems |
We process this data because you agree to it when you choose to sign in, and to deliver what the Terms of service describe. If you never sign in, none of the rows above exist for you.
4.When you look up addresses and share a route
Route Board has to know where an address is and how the roads connect, so this is where what you type leaves your device even when you're not signed in:
- Looking up addresses and directions. Our server sends the address or coordinates you search for to OpenStreetMap's open services (Nominatim, Photon, FOSSGIS), and expands any shortened Google Maps link you paste. The request comes from our server, without your IP address or identity. The answer (coordinates and a place name) is cached so the same address isn't looked up twice; the cache isn't linked to anyone and an entry is deleted after 90 days without use.
- The map. Map tiles and satellite imagery are loaded by your browser straight from OpenFreeMap and Esri, so those services see your IP address, as any website you visit would.
- Share links without an account. When you make a short link, the route's title and its stops (addresses and coordinates) are stored so anyone with the link can open it. A link is deleted after 90 days without being opened.
- Opening in Google Maps or Apple Maps. You move over to that service, and its own privacy policy applies from then on.
5.Visitor statistics, cookies and server logs
Visitor statistics. We use Umami Cloud to count page views. Umami sets no cookies, stores no IP addresses and doesn't follow you across other websites. It records the page viewed, the page that sent you here, your browser, operating system and type of device, your country (worked out from your IP address, which is then discarded), a few events such as opening a game or starting and finishing a round, and how quickly the page loaded on your device (a handful of timings, nothing more). Nothing you type, none of your progress and no email address ever goes into these statistics. The numbers tell us which pages get used and where people give up, so we know what to fix.
Cookies. This site sets only two kinds of cookie, both there to make it work the way you asked:
| Cookie | What it does | How long it lasts |
|---|---|---|
youuseai_theme | Remembers whether you chose the light or dark look | 1 year, set only when you switch the look |
Supabase sign-in cookie (its name starts with sb-) | Keeps you signed in as you move between pages | Until you sign out or the session expires |
When Vercel's firewall needs to check that a visit isn't a bot, it may set a short-lived security cookie as well. There are no advertising or third-party tracking cookies, which is why you don't see a cookie banner. Your language is part of the address (/en for English) rather than a cookie.
Server logs. Like any website, Vercel — which hosts this site — keeps a technical log of each page request: IP address, browser, path and time. The logs keep the site running and help block attacks, and are kept only briefly under Vercel's own policy. For a share of visits Vercel also measures how quickly the page loaded (Vercel Speed Insights): the page, browser, type of device, country and a few timings — no cookies, no IP address, and nothing that links the pages you view.
6.Children and the kids' corner
The kids' corner is made for young children to play with an adult, or with an adult keeping an eye on them. In it:
- there are no children's accounts, no questions about a child's name, age, photo or voice, no chat and no adverts;
- a child's progress stays on the device. If a parent is signed in on that device, it syncs to the parent's account;
- family photos in Little Puzzle and the microphone in Tiny Band are used on the device only, as described above;
- the spoken instructions are recordings stored on this site. When one is missing, the page falls back to the browser's built-in voice; some browsers send the sentence to their maker's servers to be read aloud — it's only the game's instruction, never anything about the child.
Signing in is for people aged 16 and over. Children under 16 need a parent's or guardian's permission, and it's best for the adult to sign in with their own account. If you're a parent and find your child has created an account here, tell us and we'll delete it.
8.How long data is kept
| Data | Kept until |
|---|---|
| Email, name, profile picture, feedback | You ask us to delete your account |
| Game progress, the account's route and share links | You delete them on Your profile, or delete the account |
| Route links made without signing in | 90 days without being opened |
| Address lookup cache | 90 days without use |
| Data on your device | You clear it |
| Server and sign-in logs | A short time, under Vercel's and Supabase's policies |
Deleting an account deletes everything attached to it at once: progress, share links, feedback and the profile.
9.How we protect your data
- Every connection to the site uses HTTPS.
- Your browser never talks to the database directly: every read and write goes through our server, and each account can only read its own data.
- Only the site's administrators can see feedback and the list of accounts.
- Shared content is cleaned before it's shown, so a link can't run harmful code on the reader's machine.
No system is perfectly safe, and there are two risks worth knowing. Anyone with one of your share links can see what it contains, so keep sensitive details out of shared routes and documents. And anyone who takes over your Google account can get into your account here too.
If a data breach happens, we will report it to the specialised personal data protection authority within 72 hours, as Article 23 of the Law on Personal Data Protection requires, and email the people affected.
10.Your rights, and how to delete your data
Under the Law on Personal Data Protection, you have the right to know how your data is processed; to give, refuse or withdraw consent; to see and correct your data; to ask for a copy, or for it to be deleted, restricted or no longer processed; and to complain, report a breach, take legal action and claim compensation.
Things you can do straight away:
- Open Your profile to see everything stored, delete progress game by game, remove share links one at a time, or press “Delete everything” to clear both your account data and this device.
- Sign out at any time.
- Remove YouUseAI's access in your Google account connections.
Ask us to delete the account itself (including your email, name, profile picture and feedback), to get a copy of your data, to correct it, or to withdraw consent: send the request through Feedback & feature requests while signed in to that account, so we know it's really you — other ways to reach us are under Contact. We'll reply within 2 working days and finish a deletion within 20 days, as Decree 356/2025/ND-CP requires.
Withdrawing consent doesn't undo processing that has already happened. If you feel your rights haven't been respected, tell us first, or complain to the personal data protection authority under Vietnam's Ministry of Public Security. If you live in the European Union or the United Kingdom, you have equivalent rights under the GDPR and can complain to your local data protection authority.
11.When this policy changes
The date of the last update is at the top of the page. If something important changes — collecting a new kind of data, or using data for a new purpose — we'll say so on this page before it takes effect, and ask for your consent again where the law requires it.
12.Contact
For questions or requests about your personal data, contact us in this order:
- Message YouUseAI's page on Facebook — write here first, for any question, complaint or report of content that breaks the rules.
- Requests about your account — deleting it, a copy of your data or a correction — go through Feedback & feature requests while signed in to that account, so we know it's really you. If the account is blocked, use the Facebook page.
- Email: marknguyen1990it@gmail.com — for formal requests about your personal data under the law, or if neither of the above works for you.
Vietnamese or English are both fine, and we reply within 2 working days. The Contact page has all of these in one place.
For a bug or a feature you want, use Feedback & feature requests as well.
Operator: Mark Nguyen, Vietnam.