Privacy Policy
Last updated 5 October 2026.
The short version. Dino Wiki has no accounts, no ads, no cookies and no tracking. We do not know who you are and we do not want to. Ask Rex questions are not saved by us. If you send a tip, Stripe handles the payment.
1. Who is responsible
4V3D OÜ, registry code 17515961, Asula tn 5-26, 11312 Tallinn, Estonia, tel. +372 54440211, is the controller for the website dinowiki.app and the Dino Wiki app. Email: [email protected].
2. What happens when you visit
The site is served by Cloudflare. Like every website, the server receives your IP address and basic technical details (browser, device type, the page asked for) so it can send you the page and protect the site against attacks. Cloudflare may keep short-lived security logs. We do not use this to identify anyone.
To know which pages are read, we use Cloudflare Web Analytics. It sets no cookies, does not follow you to other sites, does not build a profile of you and does not use your IP address to identify you. We only see totals, such as how many visits a page had and from which country.
No cookies. Your browser keeps two small notes on your own device, which never reach us: your choice of metres or feet, and where you got to in the quiz. You can clear them in your browser settings.
3. Children
Dino Wiki is made for children and is built so that it does not need any personal data from them. There is no sign-up, no profile, no chat between users and nothing a child can publish. We do not knowingly collect personal data from children. If you think a child has sent us personal data, for example in an email, write to us and we will delete it.
4. Ask Rex
When someone asks Rex a question, the question and the name of the dino page it was asked on are sent to an AI model to write the answer. That goes through OpenRouter's European endpoint with zero data retention switched on and data collection for training refused, to model providers that accept those conditions.
- We do not save the questions or the answers. Not in a log, not in a database.
- To keep the free monthly limit fair, we count questions per visitor with a scrambled code made from the IP address, the month and a secret. The code cannot be turned back into the address, and it expires after the month.
- Please do not type personal details into the chat. If a child does, nothing about it is kept by us.
Ask Rex is an AI, not a person, and it says so in the chat.
5. Tips
If you send a tip, the payment is made through Stripe (Stripe Payments Europe Ltd, Ireland), which handles your card details under its own privacy policy. We never see your card number. Stripe tells us the amount, the date, the country and, if you entered them, your name and email address. We keep that record for as long as Estonian accounting law requires (seven years) and use it only for bookkeeping and, if you ask, for a refund. We never use it for marketing.
6. Emails
If you write to [email protected], we use your email address and message only to answer you. Email is received by our mail providers (Forward Email and Proton). We delete the conversation when it is no longer needed, at the latest two years after the last message, unless it is part of the accounting records.
7. The app
The Dino Wiki app shows the same content as the website and keeps your settings (language, units, quiz progress) on your device only. The app contains no advertising or analytics tools. Where the app offers Ask Rex, it works exactly as described in section 4.
8. Why we are allowed to do this
- Delivering the site and keeping it secure, the anonymous visit counts and the Ask Rex limit: our legitimate interest in running a safe, free site (GDPR art. 6(1)(f)).
- Ask Rex answers: providing the feature you asked for (art. 6(1)(b), and art. 6(1)(f) where the visitor is a child).
- Tips: the legal obligation to keep accounting records (art. 6(1)(c)).
- Emails: answering you (art. 6(1)(f)).
9. Who else handles data
| Who | What for | Where |
|---|---|---|
| Cloudflare, Inc. | Hosting, security, cookieless visit counts, the Ask Rex counter | Global network, under the EU-US Data Privacy Framework and standard contractual clauses |
| OpenRouter, Inc. | Passing Ask Rex questions to an AI model, with zero data retention | Its EU endpoint |
| Stripe Payments Europe Ltd | Tip payments | Ireland (EU) |
| Forward Email, Proton AG | Receiving email | United States (under standard contractual clauses) and Switzerland (adequacy decision) |
We do not sell or share data with anyone else.
10. Your rights
You can ask what data we have about you, and ask us to correct or delete it, restrict it or object to it. Because we hold almost nothing that identifies anyone, there is usually nothing to hand over, but you are always welcome to ask at [email protected]. We answer within a month. You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or to the authority where you live.
11. Changes
If this policy changes in a way that matters, we update the date at the top and say so on the site.