Venom Wiki: Privacy Policy
Version 2026-10-09.
Changes announced: none.
The short version. Venom Wiki has no accounts, no ads, no cookies and no tracking. It is built so that it needs no personal data from a child, or from anyone. On the website we count visits, without cookies, as totals only.
1. Who is responsible
4V3D OÜ (registry code 17515961), Tallinn, Estonia, is responsible for the personal data described on this page (in legal terms, the controller). Contact: hello@venomwiki.app, +372 5444 0211. The full company details are in the Terms of Use.
The law does not require us to appoint a data protection officer and we have not appointed one. Your message goes straight to the person who runs the company.
2. The rules we hold ourselves to
These rules are the same in everything 4V3D OÜ makes.
- Only what is needed. We collect the least the product needs to work, and we build features so that less is needed.
- Never sold, never used for ads, never used to train anything. Data is used to run Venom Wiki for you, in the ways this page lists, and for nothing else. We do not analyse you to predict or influence anything, and no machine makes decisions about you. We hand data to an authority only when a law or a court order obliges us to.
- No ads and no tracking. Nothing follows you from site to site. The app has no analytics at all. On the website we count visits, without cookies, and see totals only.
- Named helpers only. Every company that handles data for us is listed below. We give 30 days' notice on this page before adding or replacing one.
- Kept in the EU where we can. Where a helper is outside the EU, the list says so and says what protects the data there.
- One person has access. Only the board member of 4V3D OÜ can reach our systems. There is no employee, contractor or support agent with access.
- Gone when you say so. When you ask us to delete something we hold, it is gone from our live systems within 30 days, and from the last backup at the latest 90 days after that. The exception is the records the law makes us keep.
- Told if something goes wrong. If a security incident is likely to put you at high risk, you hear from us without undue delay.
3. What we handle, why, and for how long
| What | Details | Why | Legal basis | How long |
|---|---|---|---|---|
| Visiting the website | Your IP address and basic browser details, handled by our host to deliver the page | To show you the page and keep it safe | Our legitimate interest in running the site | Kept by Cloudflare only as long as it needs to deliver and protect the page. We keep no copy |
| Counting visits | The page viewed, the site you came from, your country, browser and device type, as totals | To see which pages are read | Our legitimate interest in knowing what is used | Kept by Cloudflare for up to 6 months. Nothing in it says who you are |
| What the device remembers | Units (metric or imperial), quiz progress, the sticker album. In the app also: that a grown-up agreed to the terms, with the version and the date | So the game picks up where you left it | None needed. Nothing reaches us | Until you clear the site data or delete the app |
| Unlock all dinos | Google or Apple take the payment. The app asks the store, on your device, whether the unlock exists. Apple's sales report shows us each sale without a name: date, price, country and device type. Google Play's sales report shows us each order: date, amount, order number, phone model and the buyer's country, and in some countries the town and postcode. No name, no email address, no card | To open the dinos you paid for, to keep our accounts and to handle refunds | Contract with you, and accounting law | 7 years from the end of the financial year, as Estonian accounting law requires |
| What the stores show us | Totals: downloads, purchases, and crash reports from devices whose owner chose to share them with app makers. We see no names and cannot tell who anyone is | To see whether the app works | Our legitimate interest in keeping the app working | Kept by the store |
| Tips | Stripe takes the payment. It shows us the amount, the date, its reference, and the name, email address, country and last four card digits you gave | To receive the gift, send it back if asked, and keep our accounts | Our agreement with you about the gift. For the records: accounting law | 7 years from the end of the financial year, as Estonian accounting law requires |
| Emails you send us | Your email address and whatever you write | To answer you | Our legitimate interest in answering, or steps towards a contract | Deleted when no longer needed, at the latest 2 years after the last message |
The website and the app contain no advertising tools. The app has no analytics and works offline. The only outside party it talks to is the store, to check, buy or restore the unlock.
On the website: We count visits with Cloudflare Web Analytics. It sets no cookie, stores nothing on your device, does not follow you from site to site and shows us totals only: pages, countries and browsers.
4. Children
Venom Wiki is made for children and is built so that a child never has to give any personal detail. There is no sign-up, no profile, no chat and nothing to fill in. Venom Wiki never asks a child to agree to anything about data, because it asks a child for none. That is why there is no age question and no consent box.
If a child's personal details reach us by email, we answer the grown-up where we can and delete the child's details.
For parents in the United States. Venom Wiki is made for children. The app collects no personal information from a child. The website asks a child for nothing. Our host sees an IP address to deliver the page and keep it safe, and we count visits as totals. None of it is used to contact a child, build a profile or show ads. We make sure of that in two ways. The counter gives us totals only. We keep no copy of any IP address. Questions: hello@venomwiki.app. Our postal address is in section 1 of the Terms of Use.
5. Who helps us, and where the data is
| Who | What they do | Where |
|---|---|---|
| Cloudflare, Inc. (USA) | Delivers the website through its network, protects it from abuse and counts visits. To do that it receives your IP address and basic browser details | Worldwide network, including the EU. Transfers to the USA are covered by the EU-US Data Privacy Framework and standard contractual clauses |
| Stripe Payments Europe Ltd (Ireland) | Takes the card payment. It receives your name, email address, card and billing details, and your IP address and device details for fraud checks. Stripe decides for itself how to handle them, under its own privacy policy | Ireland (EU). Stripe may also process data in the USA, under the EU-US Data Privacy Framework and standard contractual clauses |
| Forward Email LLC (USA) | Receives email sent to our venomwiki.app addresses and passes it on to our mailbox | USA. Covered by its data processing agreement with standard contractual clauses |
| Proton AG (Switzerland) | Our mailbox. It holds the emails you send us and our replies | Switzerland, which the European Commission recognises as protecting personal data adequately |
| The store (Google or Apple) | Takes the payment for purchases made in the app, under its own terms and privacy policy. Apple shows us each sale without a name: the date, price, country and device type. Google Play shows us each order: its number, date, amount, phone model and the buyer's country, and in some countries the town and postcode. Both show totals for downloads, and crash reports from devices whose owner chose to share them. Neither shows us a name, an email address or card details | See the store's own policy |
Nobody in this list may use your data for their own purposes, except where the table says a company acts under its own policy. You can ask us for a copy of the safeguards that cover a helper outside the EU.
6. How we protect it
Venom Wiki holds no accounts and no database of visitors, so there is very little to protect. Our mailbox and our payment records are behind two-step sign-in, and only the board member of 4V3D OÜ can open them.
7. If something goes wrong
If a security incident with your personal data is likely to put you at high risk, we tell you without undue delay: what happened, what we know and what we recommend you do. We write to the email address we have for you. Where the law requires, we also report it to the Estonian Data Protection Inspectorate within 72 hours. We keep a written record of every incident.
8. Your rights
You can ask us what we hold about you, have it corrected, get a copy you can take elsewhere, have it deleted, and have its use restricted. Where something is based on your consent, you can withdraw the consent at any time. What the game remembers is on your own device, so you see and delete it there.
Your right to object. Where this page gives our legitimate interest as the reason, you can object at any time, by writing to hello@venomwiki.app.
For anything else write to hello@venomwiki.app. We confirm within 5 working days and answer in full within 30 days. It costs nothing.
If you are not happy with our answer, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or to the data protection authority of the country where you live.
9. Cookies and what the device remembers
Venom Wiki sets no cookies. The small notes listed in section 3 stay on your device and never reach us. Clearing the site data in your browser, or deleting the app, removes them.
The tip page belongs to Stripe and is on Stripe's own site. Stripe uses its own cookies there to take the payment safely and to stop fraud.
10. Changes to this policy
The version and date at the top change with every edit. If a change matters, we announce it on venomwiki.app at least 30 days before it takes effect. The copy inside the app changes with the next app update. A change never reduces the protection of data we already hold, unless the law requires it.