Privacy
Your family's privacy
Wonder Together helps grownups answer a child's questions and get ready for big days together. This page explains what we collect, why, who helps us, how long we keep it, and what you can ask us to do.
Last updated October 1, 2026
Who we are
Wonder Together is made by Kevin Bolander. You can reach a real person at kevinbolander@gmail.com.
What we collect and why
When you visit the site. We use Vercel Web Analytics to count page visits without cookies. It records the page, the site that sent you, your approximate country, and your device and browser type, and shows them to us only as totals. Our host, Vercel, also handles standard request details such as your IP address and browser type so it can deliver pages and keep the site secure.
When you use Curiosity in ChatGPT, Gemini, or another AI tool.Using our GPT, Gem, or copied prompt happens inside that service, under your account and its privacy settings. We don't receive those conversations.
When ChatGPT uses the Wonder Together plugin.The plugin is in testing and not yet public. This is how it works. To lay out a printable page, ChatGPT sends us the child's question, the child's age, and the explainer words written in your conversation. We use them to answer that one request and don't store them. The printable page keeps those words inside its own link, after the #, so they are read by your browser and are not sent back to us. Anyone you share that link with can read it. ChatGPT may also send technical details with each request, such as an anonymized user ID and your language; we don't store those either.
When you make a Send-a-why card.Send-a-why cards are in a small, limited preview. When you make one, we send the question, the child's age, and your optional one-line note to OpenAI to write the card and draw its picture. We save the finished card, including your note, in our database so its share link keeps working. Anyone with the card's link can see the question, the age, and the card itself. Your note isn't shown as its own line on the shared card, but the card's words and picture may reflect it, so leave out anything you wouldn't want shared. Your browser also keeps a copy while the tab is open. To limit abuse, our server keeps your IP address and the times of your recent card requests in memory. This isn't saved to our database and clears when the server restarts.
When you buy a Wonder Situations pack.Stripe runs checkout and collects your payment details and email address. We never see your card number. Stripe tells us the purchase went through, along with your email address and which pack or plan you chose, so we can unlock it. We save that unlock in a cookie on your browser for 45 days. We don't keep purchase records in our own database; Stripe keeps them. Our host's logs record Stripe customer and subscription IDs when Stripe notifies us about a purchase.
For dental practices.Practice staff enter the practice name, address, phone, provider names and credentials, the guide's wording, and a logo plus office and team photos. We store these in our database along with a history of edits and publications. We send the entrance and waiting-room photos to OpenAI to make illustrations. Guides must not include patient information or patient photos. Once a guide is published, anyone with its link can see the guide, including the practice details and staff names and photos it shows. Families who open a guide link aren't asked for anything. Our database keeps a practice's private staff key only as a one-way hash. When staff open their private link, the browser keeps the key for that tab until it is closed.
When you email us. We receive your email address and whatever you write, and use it only to help you.
Who helps us
Besides the shared links described above, we share information only with services that help us run Wonder Together:
- Vercel hosts the site and provides page-visit totals and short-lived request logs.
- Neon hosts our database (Send-a-why cards and practice guides).
- OpenAI writes and draws Send-a-why cards and practice illustrations.
- Stripe handles Wonder Situations payments.
- Sentrymay receive technical error reports, such as the page address and browser type, if we turn on error monitoring. When a Send-a-why card fails to generate, the error report and our host's logs can include part of the failed card's text, which may reflect your question or note.
- Google hosts our support email.
We may share information if the law requires it. We don't sell personal information or share it for advertising.
How long we keep it
- Page-visit totals and request logs: kept by Vercel for the limited time its service allows.
- Error reports: kept by Vercel and, if error monitoring is on, Sentry, for the limited time their services allow.
- Plugin requests: not stored.
- Send-a-why cards:kept so their links keep working. We don't delete them automatically yet. Send us the link and we'll delete the card from our database.
- What we send to OpenAI:OpenAI may keep requests and results for up to 30 days under its own API data policies. Deleting a card or guide from our database doesn't remove OpenAI's copy.
- Situations unlock cookie: 45 days on your browser. Stripe keeps payment records as its own policies and the law require.
- Practice guides:kept while the practice uses Wonder Together. We remove a practice's workspace and its history when the practice asks.
- Support email:kept as long as we need it to help you. Ask and we'll delete it.
Your choices
- Email kevinbolander@gmail.com to ask what we hold about you, or to correct or delete it.
- Leave optional family fields blank. Curiosity and Send-a-why cards work without a name or personal details. Practice guides need the practice and provider details listed above before they can be published.
- Clear cookies in your browser at any time. This removes a Situations unlock from that browser.
- Manage AI conversations, including any that use our GPT, Gem, or plugin, with the settings of the service you use.
Children
Wonder Together is made for grownups to use with children, not for children to use on their own. We don't knowingly collect personal information from children. If you think a child has shared information with us, email us and we'll delete it.
Keeping it safe
We use encrypted connections and store as little as we can. No system is perfect, so please don't send us anything you wouldn't want stored.
Changes
When this page changes, we update the date at the top. If a change matters for how we use your information, we'll say so here.
Questions
Email kevinbolander@gmail.com or visit Support. See also our Terms.