The boring-but-important bit
Privacy policy
What we keep
Your name, email, school, class and teacher (your school gives us these). Your phone and goal only if you add them.
Your learning: lessons opened, quiz and game scores, videos watched, and the work you save. In class sessions: your country, speeches and votes.
Which pages you visit, deleted after 120 days.
Who sees it
You, your teachers, your principal, and the mun.kids admins. People in a session see what you do in that session.
We never sell it, never show ads, and use no tracking or analytics.
Your rights
You can see, download, fix or delete your data. Download it on your profile page, or email privacy@mun.kids.
A parent or guardian can ask on your behalf.
Do I have to?
No law says you must give us this. But mun.kids needs an account to save your work, so without one you can't use the course. Your teacher can suggest another way to learn.
Everything marked optional really is optional.
- Who we are
- The short version
- What we keep, why, and for how long
- Who can see it
- Cookies and storage on your device
- YouTube videos
- Who else gets data
- Where it is stored
- How we keep it safe
- Your rights
- Students under 18
- Do you have to give us this?
- Changes to this policy
1. Who we are
mun.kids is a free Model UN course and debate tool for schools. It is run by WebNetCom Ltd., a company registered in Israel ("we", "us").
We decide how the information on mun.kids is used, so under Israel's Privacy Protection Law we are the database controller, and under the EU and UK GDPR we are the controller. Schools decide who gets an account, and their teachers use what they see on mun.kids for teaching.
Contact us about privacy at privacy@mun.kids. For anything else: mun@mun.kids or the contact page.
2. The short version
- We keep only what the course needs: who you are (name, email, school, class), what you did (lessons, scores, saved work, sessions) and when you were last on.
- No ads, no selling, no tracking. No analytics, no social media pixels, and our fonts and pictures come from our own server.
- Your teachers and principal can see your progress and your work. Nobody else outside mun.kids can.
- You can download your data from your profile, and ask us to fix or delete it.
3. What we keep, why, and for how long
| What | Why | How long |
|---|---|---|
| Account: email, name, role, school, class, teacher | So you can log in and your work lands with the right teacher. Your school or teacher gives us these. | Until your account is removed |
| Profile extras: phone, your MUN goal; for teachers, a note for students | Only if you add them. Your phone is shown to your teachers; a teacher's email and phone are shown to their students only if the teacher switches that on. | Until you delete them or the account is removed |
| Login codes | To log you in without a password. We store a scrambled (hashed) version, never the code itself. | Codes work for 10 minutes; records are deleted within a day |
| Learning progress: lessons opened and how far you got, quiz and game scores, videos opened | To save your place and show your teachers how you're doing. | Until your account is removed |
| Saved work: speeches, resolutions, position papers and other drafts; your conference prep (conference, committee, country, topic) | So your work is kept and follows you between devices, and lessons can use your conference's topic. | Until you clear it or the account is removed |
| Class sessions: the country you represent, speakers lists, speaking times, motions, votes and summaries | To run a Model UN session. Everyone in that session sees it. | Until a teacher or admin deletes the session |
| Activity: which pages you opened and when, last login, last seen | So teachers can see who is active, and to spot misuse. | 120 days (last login and last seen: until the account is removed) |
| Roll call: the days you were on mun.kids (first and last time), and your teacher's marks (present, late, absent, excused) with a short note | So teachers can take attendance and export it for school records. | Days online: 120 days. Teacher's marks: 2 years |
| Messages: conversations you start or answer on mun.kids or through the contact page (subject, text, who wrote each reply and when, and who has read it), and short notes staff add for each other | To answer you and keep the whole conversation in one place. | 365 days after the last reply |
| Parent reply slips: the parent's or guardian's name and email; the student's name, email, class and school; the answers and a typed signature | To record a parent's answers and pass them to the student's teacher. We first email the parent a link, so we know the address is really theirs. | Until the student's account is removed. Unconfirmed: 7 days. Matching no student: 365 days |
| Parents and guardians: their name, email and relation to the student (mother, father, guardian), who added them, when they log in, and the consent they give from their account | So a parent or guardian can follow their child's progress and give consent online. A student or their teacher adds them; parents who ask for access themselves wait for the teacher's yes. | Until the link is removed by staff or the student's account is removed (their account is deleted a week after their last child leaves) |
| School galleries: photos (re-saved without hidden data such as location), video links and captions, added by the school's principals | To share class and conference moments with the school. "School only" galleries are seen by the school's students, staff and parents; "public" ones by anyone, on the school's public page. | Until the principal deletes them or the school leaves mun.kids |
| Conference certificates: the award, conference, date and a photo or PDF of the certificate | To celebrate what students win. Private to the student, their parents and teachers, unless the student chooses to show it to their school. | Until it's deleted or the account is removed |
| Access requests: the name, email and note of someone asking to join, and the teacher or student they named | So the teacher can say yes or no. | 365 days |
| Email choices: which summaries and alerts you get (weekly summary, roll call sheet, absence alerts) | To send only the emails you want. | Until you change them or the account is removed |
| Your privacy choices | To show what you agreed to, and when. | Until the account is removed |
| IP address, with each login or contact attempt | To stop people guessing codes or sending spam. | 24 hours |
| Web server logs (kept by our host) | Security and keeping the site running. | As set by our host, usually a few weeks |
Legal basis (for people covered by GDPR): running the course your school signed you up for (contract and legitimate interests of the school and of us in teaching); your consent for optional things like playing YouTube videos without asking; and legal obligations where they apply. You can withdraw consent any time on My privacy choices.
When an account is removed, its saved work, progress, activity and choices are deleted straight away. Copies can stay in backups for up to 30 days before they are overwritten.
4. Who can see it
- You see everything about yourself, and can download it from your profile.
- Your teacher sees your details, progress, scores, saved work and activity.
- Your principal sees the same for everyone at your school.
- mun.kids admins (people at WebNetCom Ltd. who run the site) can see everything, and only look when they need to: to help, fix a problem or answer a request.
- Your parents or guardians, once you or your teacher adds them, see your lessons, badges, days online and roll call, and your teachers' names. They don't see your messages, drafts or saved work.
- Messages are seen by the people in the conversation and anyone it's handed to. Principals can read conversations that involve people at their school, and admins can read all of them, to keep everyone safe. Staff notes are seen only by staff.
- Your school sees a certificate only if you tick "show to my school", and sees gallery photos the principal posts. A school's public page shows no student names.
- Other students see only what you do in a session you're both in (your country, speeches, votes), and your name on that session's screens.
5. Cookies and storage on your device
We use one cookie, called munkids. It keeps you logged in (for up to 30 days, or until you log out). The site can't work without it, so we don't ask for it.
We also save your drafts in your browser's storage (localStorage) so nothing is lost if the Wi-Fi drops. They sync to your account, and are wiped from the device when you log out. A few small settings stay only on your device too: your best globe game scores, what you typed into the AI prompt helper, and which badges you've already seen.
The Research with AI page only gives you prompts to copy. mun.kids doesn't send anything to AI companies.
No advertising or analytics cookies, ever.
6. YouTube videos
Videos come from YouTube. Pages show a picture stored on our own server, so nothing loads from YouTube until you press play. The first time, we ask before loading the video. When it plays, YouTube (Google) gets your IP address and may store cookies or similar data on your device, under Google's privacy policy. We use YouTube's privacy-enhanced mode (youtube-nocookie.com).
You can choose to skip the question on My privacy choices, or watch on youtube.com instead.
7. Who else gets data
We never sell personal data, rent it, or use it for advertising. We share it only with:
- Our hosting company, 20i, which runs the server and sends our emails (login codes, contact messages). They act only on our instructions.
- Hetzner Online GmbH (Germany), which stores videos a school uploads to its galleries, on servers in the EU. They act only on our instructions.
- YouTube, only when you play a video (see above).
- Authorities, only if the law requires it.
Links to other sites (the UN, the World Bank, news sites) are just links: we send them nothing about you.
8. Where it is stored
On our host's servers in the United Kingdom. The UK is a party to the Council of Europe's data protection convention (Convention 108) and the EU treats its data protection as adequate, which is what Israel's rules on sending data abroad and the GDPR require. Videos uploaded to school galleries are stored in the European Union (Germany or Finland).
9. How we keep it safe
- Everything travels over HTTPS. There are no passwords to leak: you log in with a one-time code.
- Codes are stored scrambled, tries are limited, and so are code requests.
- Each role sees only what it needs: teachers see their own students, principals their own school.
- The database is kept outside the public part of the server.
If something ever goes wrong in a way that puts your information at risk, we'll tell the people affected and the regulator as the law requires.
10. Your rights
You can ask to see the information we have about you, correct it, or delete it. Under the GDPR you can also ask us to limit how we use it, object, get a copy to take elsewhere, and withdraw consent at any time.
- Download it yourself: My profile → Download my data.
- Fix it: change your name, phone and email on your profile, or ask your teacher.
- Anything else: email privacy@mun.kids or use the contact page. We reply within 30 days. We may check it's really you first.
You can also complain to a regulator: in Israel, the Privacy Protection Authority; in the UK, the ICO; in the EU, the data protection authority where you live. We'd like the chance to fix things first, though.
11. Students under 18
mun.kids is made for high school students, so most of our users are under 18. That's why we keep so little and show no ads. Accounts are created by schools, and we ask schools to tell parents and guardians about mun.kids (our page for parents helps with that). A parent or guardian can use any of the rights above for their child, and can send the reply slip online, by email or on paper from that page. Once linked to their child, a parent or guardian can also log in, follow their progress and give consent from their own account.
12. Do you have to give us this?
No law requires you to give us any of this information. But the course runs on accounts, so without your email and name you can't use the parts that need logging in. Your phone number, goal and optional choices are up to you: leaving them out changes nothing else.
13. Changes to this policy
If we change this policy, we'll update the date at the top. If the change matters, everyone sees the "Before you start" page again and confirms their choices.
Version 2026-09-29.2.