Privacy: Skelly – Candy & Sugar Counter
Last updated: October 27, 2026 (Gemini added). Covers this website and its installable web app.
The short version
- No accounts, no sign-up, no ads, no tracking, no selling of data. Skelly never asks for a name, email address, phone number or location.
- Kids can use Skelly without anything personal leaving the device. Dances, moves, jokes, riddles, Skelly's voice, the sample candy bag and Count by hand all run on your phone.
- Skelly never stores your candy photos. If you choose to scan one, it is sent to Google Gemini (with Cloudflare Workers AI as a backup) only to count the candy, then thrown away.
- The only thing we keep is feedback a grown-up chooses to send.
What happens with each feature
| Feature | What is sent | To whom | Kept? |
|---|---|---|---|
| Candy photo scan (optional) | The candy photo you take or pick. Your browser first shrinks it to about 1200 pixels and re-encodes it, which removes location and camera data (EXIF). If you lose signal, the shrunk photo waits only in the open page's memory (never saved to the phone or our server) and sends when you're back online; it is dropped if you tap Cancel, close the page, or after 1 hour. | Our server on Cloudflare, which sends it to Google Gemini (a Gemini Flash model) to read the wrappers. If Gemini is busy, Cloudflare Workers AI vision models are the backup (Qwen, then Llama 4 Scout, then Mistral Small 3.1). | Not stored or logged by us. The server returns the candy list and throws the photo away. Google handles the request under its Gemini API terms and may keep it for a limited time only to detect abuse. Cloudflare states it does not use Workers AI inputs to train models. |
| Photo scan backups (not active now) | The same shrunk photo, only if Gemini and all the Cloudflare models above fail | Groq (AI model): (1) through our server, only when our Groq connection is working, which it is not at the moment; or (2) straight from your browser, only if a grown-up has added their own Groq key in Settings › AI brain (advanced). | Not stored by us. Groq processes requests in real time and may keep inputs for up to 30 days, only for abuse or reliability checks. |
| Sample bag and Count by hand | Nothing | n/a | n/a |
| Age you type for the sugar math | Nothing. The sugar math runs on your device. | n/a | n/a |
| Chat with Skelly | Nothing by default: Skelly answers from her built-in joke book on your device. | n/a | n/a |
| AI chat and voice input (off by default; a grown-up can turn it on in Settings behind a grown-ups question) | The messages typed or spoken in Chat | Groq (AI model), through our server | Not stored by us. |
| Pro Voice (off by default; grown-ups only) | Only Skelly's own sentences, never anything a child types or says | ElevenLabs (voice service), through our server | Not stored by us. ElevenLabs may keep a history of generated audio. |
| Feedback (behind the grown-ups question) | Your rating, your message and your email only if you add one | Our server (Cloudflare storage) | Up to 12 months, then deleted automatically. |
| Settings (sound, look, personality) | Nothing. Saved only in your browser. | n/a | n/a |
Skelly's voice is pre-recorded clips or your device's built-in voice. If a grown-up turns on voice input, some browsers use their own speech service to turn speech into text.
Visit statistics (no cookies): we use Cloudflare Web Analytics, which counts page views without cookies, without fingerprinting and without storing IP addresses, so we can see roughly how many people visit and which pages they read. When you arrive through a link that carries campaign tags (for example ?utm_source=newsletter), our server also adds one to a daily total for that tag. Those totals contain only the tag and the page, nothing about you. No advertising or tracking cookies are used.
Abuse protection (rate limiting)
To keep the free photo scan from being abused, our server counts requests using: - a random code your browser creates for each visit (stored only for that tab and gone when you close it), and - a one-way, date-salted scramble of your internet (IP) address, which changes every day and cannot be turned back into the address.
These counters delete themselves within 2 days and are used only to limit requests, never to identify or profile anyone.
Children
Skelly is designed for families. The parts kids use do not collect personal information. Features that send anything off the device (photo scan, AI chat, feedback) are either free of personal information or sit behind a grown-ups question, and are meant for parents and guardians. We do not knowingly collect personal information from children under 13. If you think a child sent us something (for example in feedback), contact us and we will delete it.
What we do NOT do
No advertising, no selling or sharing of personal information, no cross-site tracking, no cookies for tracking, no location, no contacts, no accounts, no purchases.
Your choices
- Use the sample bag or Count by hand to use Skelly without sending anything.
- Leave AI chat and Pro Voice off (the default).
- Deny camera or microphone permission. Everything else still works.
- Ask us to delete feedback: send another feedback note quoting what you wrote and we will delete it.
- Depending on where you live (for example California, Texas or the EU/UK), you may have rights to access or delete data. Contact us and we will respond within 30 days.
Security
All traffic uses HTTPS. API keys for AI services stay on our server and are never sent to your device.
Changes
If we change this policy, we will update the date above, and announce material changes in the app first.
Contact
Use the 💬 feedback button in Skelly (it opens after a quick grown-ups question). More help: Support page