FOR PARENTS, GUARDIANS & PLAYERS
Privacy Policy
Effective November 2, 2026
KYKAAI is a spelling-practice project operated by Wayne O. McDonald in Huntsville, Alabama. It has no accounts, ads, analytics trackers, public leaderboards, or purchases. This policy describes the current game at kykaai.com.
Children and personal information
The game is intended for children with guidance from a parent, guardian, or teacher. It does not ask for a child's full name, email address, birth date, location, photo, or contact details. Player names are preset choices, not registered accounts. Please use ordinary spelling words and avoid adding names, addresses, passwords, or other personal or sensitive information to custom lists.
Words, scores, and settings on your device
Custom spelling lists and their titles, per-player mission scores and best flights, and sound-effect preferences are saved in your browser's local storage. Lists and scores are separate for each selected player, but anyone using the same browser profile can see them. They are not password-protected accounts and do not automatically sync between devices or browsers.
Typed answers are checked in the browser. Text and JSON files selected for importing words are read in the browser; the original file is not uploaded to our server. The game does not submit your answers, list files, or scores to an online account or scoreboard. However, individual words can appear in audio requests as explained below.
The game does not set advertising or tracking cookies. Browser-saved lists and settings remain until you replace or remove them, clear site data, or your browser removes them. Private browsing and browser storage restrictions can prevent persistence.
Audio and spelling-word requests
The game downloads weekly words and prerecorded audio from this website. When a list is loaded or a word is played, it may request a recording whose URL contains the word, such as /assets/narration/example.mp3. This includes custom words, even when no recording exists. Those URLs may appear in server and security logs, so custom words should not be treated as confidential.
If a recording is unavailable, the game uses your browser or device's text-to-speech feature. It prefers a local English voice when available, but some voices may send text to the browser or operating-system provider for speech processing under that provider's privacy policy. We cannot guarantee that all device speech is processed offline. The game does not use your microphone or record your voice.
Website hosting and security logs
Our hosting and security systems process technical information needed to deliver and protect the site, including IP addresses, request times, requested URLs, response codes, and, depending on the log, browser information and referring pages. Security logs may also contain request headers and details of blocked requests. We use these records for operation, troubleshooting, and abuse prevention, not advertising or behavioral profiling.
The site is hosted on Amazon Web Services. Routine web-server logs are configured for daily rotation with 10 retained archives; firewall logs use daily rotation with 14 retained archives. Rotation schedules, active logs, backups, or records retained to investigate an incident can mean some records remain longer. These settings are not a guarantee of deletion on an exact date.
Sharing and external links
We do not sell personal information or share it for targeted advertising. Hosting providers process technical information to operate the service. Information may also be disclosed when legally required or necessary to investigate abuse and protect the service. Links to antibodycyber.com or other websites take you to services governed by their own privacy policies.
Your choices and deleting saved data
Use the game's weekly-word reset to replace a selected player's custom list. To remove all saved KYKAAI lists, scores, and preferences, clear website data for kykaai.com in your browser settings. This affects that browser only and does not erase server logs. Data saved on a previous domain must be cleared separately for that domain. Closing a tab alone does not normally delete local storage.
For privacy questions or requests concerning a child's information, use the contact options at Antibody Cyber. A parent or guardian should make the request without sending unnecessary information about a child. We cannot remotely access or delete your browser's local storage; technical logs may require information about the approximate visit time to locate a relevant record.
Policy updates
We will update this page and its effective date when these practices change. Please review it before adding information to the game.