Privacy Policy

Effective date: October 2, 2026

Last updated: October 9, 2026

This policy explains what information is and is not collected when you use xdme.com, the xdme Printables store, our dashboard sign-in, and apps published by xdme.com. "We" and "us" mean xdme.com. We try to keep this simple and in plain English.

What we collect

The store. The store website itself does not collect personal information. It has no account system, no forms and no tracking tools. When you press Buy now, you go to Whop. Checkout, payment and receipts are handled by Whop, and Whop collects the details it needs to complete your purchase. Whop has its own privacy policy: https://whop.com/privacy/. We do not see or store your card details.

Server logs. Like most websites, our servers may keep standard logs, such as your IP address, browser type, the page requested and the date and time. These logs are used to keep the site running and secure.

Dashboard sign-in. Our dashboard (reached from the older xdme.com home page) lets you sign in with Google. When you do, we collect only your name, email address and profile picture. We use them only to authenticate you and give you access to your dashboard. We also keep session logs to maintain your dashboard access and see how the dashboard is used.

Affiliate programs. Some dashboard features connect to third-party affiliate programs, such as Amazon, TikTok Shop and Impact.com. Those services have their own privacy policies and handle your data on their own platforms. Please read their policies.

Cookies

The store itself does not use cookies for tracking. When you visit Whop to check out, or sign in with Google, those services may set their own cookies under their own policies. The dashboard may use a session cookie to keep you signed in.

How we use data

• To run, secure and fix the website and the dashboard.
• To sign you in to the dashboard and keep your session active.
• To answer your emails and handle requests you send us.

We do not use your information for advertising profiles.

Sharing

We do not sell personal data. We only share information with service providers that help us run the site, and only as needed for that purpose:

• Whop, for checkout, payment, receipts and downloads.
• Google, for dashboard sign-in.
• Our hosting provider, which stores the website and its server logs.

We may also share information if the law requires it.

Data retention and deletion requests

We keep server logs and dashboard session logs only as long as needed to run and secure the site. Purchase records are kept by Whop under its own policy. You can ask us to delete the personal data we hold about you, including your dashboard account information, by emailing craftyclover@xdme.com. We will respond within 30 days. For data held by Whop, Google or an affiliate program, please contact them directly.

Children

Our website and products are not directed to children under 13. The products, including kids' printables, are meant to be bought and used by parents and other adults. We do not knowingly collect personal information from children under 13. If you think a child has given us personal information, email us and we will delete it.

For the Million Whys kids pages (videos, question pages, games and activities), see our plain-language kids' safety and privacy guide for parents and teachers.

Million Whys Press pages for kids and families

The A Million Whys pages on xdme.com and millionwhypress.xdme.com (the videos, question pages, Listen pages, games, puzzles, activities, printables and the Kids corner) are made for children to enjoy with a grown-up. This section explains exactly what happens on those pages. For a short guide written for parents and teachers, see our kids' safety and privacy page.

Children's privacy: no accounts, no ads, no tracking

• There are no accounts or sign-ins on the Million Whys pages.
• There are no ads.
• We do not use analytics, advertising pixels or other tracking tools, and our own pages do not set cookies.
• Kids: please ask a grown-up before you type anything into a form on this site, and never type your last name, address, school, email or phone number.

The weekly activity email (newsletter)

• The sign-up box (for example on the home page and the parents and teachers page) is for parents, teachers and other grown-ups only. It asks you to tick a box to confirm you are a grown-up. That box is checked in your browser and is not sent to anyone.
• The only thing you type is your email address. It is sent to MailerLite, the email service we use to keep the list and send the emails. MailerLite also records technical details of the sign-up, such as the date and time and the IP address used. MailerLite's privacy policy: https://www.mailerlite.com/legal/privacy-policy.
• We use the list only to send one short email a week with a simple science activity. We do not sell the list.
• To unsubscribe, use the unsubscribe link at the bottom of any of our emails, or email craftyclover@xdme.com and we will remove you.

The Ask Crafty Clover form

• The form on the Ask Crafty Clover page sends: a first name (optional, up to 40 characters), an age picked from a list (optional), the question (up to 500 characters) and the tick box saying a grown-up said it is OK. It also sends two hidden fields that help block spam: an empty "trap" field that people never see, and the time the page was opened.
• The form will not accept a question that contains an email address, a phone number or a web link.
• The first name, age and question are emailed to us at craftyclover@xdme.com, along with the time it was sent. The question is not saved on the website or in any database. We use questions only to get ideas for future books and videos. To have a question deleted from our inbox, email us.
• To stop anyone sending too many messages, the server keeps a scrambled code made from the sender's IP address (a one-way SHA-256 hash, so the IP address itself is not saved) together with the times of recent sends. It is kept in the server's private temporary folder, which cannot be reached from the website. Only sends from the last hour count toward the limit of 5 per hour.

Things saved only in your own browser

• My badges (the reading tracker). When you open a question page or watch its video, the page saves the book number, question number and date in your browser's local storage (key mwp_tracker_v1) so the My badges page can show your progress. It is never sent to us. You can clear it with the Start over button on the My badges page, or by clearing this site's data in your browser.
• Subtitle choice. On Books 13 and 14, your choice of English or English and Chinese subtitles is saved in your browser's local storage (key mwp_subs). It is never sent to us.
• Local storage is not a cookie. We cannot see or read it.

Videos, audio, sharing and YouTube

• The videos on our pages and the audio on the Listen pages play from our own servers (xdme.com and socialmedia.xdme.com), so no other company sees what you watch or listen to.
• Some pages have a "Watch on YouTube" link. If you tap it, you leave our site and YouTube's own privacy policy applies.
• A few older pages, such as videos.html, have an embedded YouTube player. When one of those pages loads, YouTube (Google) may receive your IP address and browser information and may set cookies under Google's privacy policy: https://policies.google.com/privacy.
• Question pages have share links for grown-ups (Email, WhatsApp, Facebook and Copy link). Nothing is sent anywhere unless you tap one. If you do, that service's own privacy policy applies.

Google Fonts

Most Million Whys pages load their fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). To download the fonts, your browser connects to Google, so Google receives your IP address and basic browser information. Google explains how it handles this here: https://developers.google.com/fonts/faq/privacy.

Server logs

As described above, our hosting servers keep standard logs for every request, including requests for pages, pictures, videos and audio. A log entry can include your IP address, browser type, the file requested and the date and time. These logs are used only to keep the site running and secure.

Questions about privacy

Email craftyclover@xdme.com with any question, or to ask us to delete anything we hold about you or your child.

Security

The site is served over HTTPS. We take reasonable steps to protect the limited information we hold. No method of storing or sending data is completely secure, so we cannot promise absolute security.

Changes to this policy

We may update this policy from time to time. When we do, we will change the effective date at the top of this page. Please check back now and then.

Contact

Operator: xdme.com
Email: craftyclover@xdme.com