Privacy Policy
Last updated: October 2, 2026
The short version
- 🗑️ We never keep the photo. It's used once to draw the cartoons, then dropped.
- 🤖 To draw the cartoons, the photo goes to OpenAI, our AI image service, which may hold it for up to 30 days for its safety checks.
- 🏠 Your child's first name never leaves your browser.
- 🧹 The games forget the cartoons when you close their tab.
- 🚫 No ads, no accounts, no tracking cookies, no analytics.
Who we are
Rocko & Me (rockoandme.com) is part of Rocko's World, the family of Rocko sites and games that includes Super Rocko (superrocko.com) and Where's Rocko? (wheresrocko.com). In this policy “we” and “us” mean Rocko's World. Questions: [email protected].
Who this site is for
Rocko & Me is for parents and legal guardians. Only a grown-up should use it, and only with a photo of their own child (or a child they're the guardian of). Before a photo is sent, you have to confirm that you're the child's parent or guardian and agree to the photo being sent to our AI image service. Kids play with the finished cartoons in the games; they don't use this site.
What happens to the photo
- In your browser first. When you pick a photo, your browser shrinks it and re-saves it as a new image. That removes hidden details stored in the original file, such as the location where it was taken.
- Sent once to make the cartoons. When you tap “Make my cartoon”, the shrunk photo goes over an encrypted (HTTPS) connection to our server, which runs on Cloudflare. The server holds it only in memory while it asks OpenAI to draw two cartoons (one flying, one standing).
- Then dropped. We don't save the photo anywhere: not in a database, not in file storage, not in logs. Once the cartoons come back, it's gone from our side.
OpenAI, our AI image service
The cartoons are drawn by OpenAI's image service. To do that, OpenAI receives the photo, a drawing of Rocko as a style guide, and our drawing instructions. It doesn't receive your child's name. Under OpenAI's policies for its business services:
- OpenAI may keep the photo and the cartoons for up to 30 days to watch for abuse, and then deletes them.
- OpenAI says it does not use data sent through its business service to train its models.
- Like other image services, OpenAI automatically scans images for child sexual abuse material and keeps any image its system flags for review by its safety team.
We're working to switch on OpenAI's “Zero Data Retention” option, which would stop the 30-day hold. We'll update this policy when that happens. OpenAI's own privacy policy is at openai.com/policies/privacy-policy.
Your child's first name
The first name you type is used only inside your browser: to write “Go, Maya!” on the page, to name the files if you save the cartoons, and to greet your child in the games. It is never sent to our server or to OpenAI.
The cartoons
- The cartoons come back from our server straight to your browser. We don't keep a copy.
- If you tap “Save flying” or “Save standing”, they're saved on your own device. That copy is yours.
- “Start over”, or closing the page, clears the photo, the name and the cartoons from the page.
Playing in the games
When you tap “Play Super Rocko” or “Play Where's Rocko?”, the game opens in a new tab and this page hands it the cartoons and your child's first name directly inside your browser. They aren't uploaded and don't appear in the web address. Super Rocko keeps them only in that tab's memory; Where's Rocko? keeps them in that tab's temporary session storage so they survive moving between its games. Either way, they're gone when you close that tab, and Where's Rocko? also has a “Stop playing as” button. Those sites have their own privacy pages: Super Rocko and Where's Rocko?.
The access code
Rocko & Me is invite-only for now. The code you type is sent with your request and checked by our server; it isn't stored. To stop people guessing codes, when a wrong code is entered we keep a scrambled, one-way fingerprint of the internet address it came from, plus a count, for one hour. After five wrong codes in an hour that connection has to wait. The fingerprint can't be turned back into the address, and it deletes itself after the hour. Nothing is kept when the code is right.
What we don't do
- No accounts, sign-ups or profiles.
- No advertising, and no selling or sharing of personal information.
- No tracking cookies, analytics or third-party scripts. Our fonts and images are served from our own site.
- We don't create or keep faceprints or any other biometric identifiers.
- We don't ask for or keep last names, email addresses, ages or locations.
Hosting
The site and our server code run on Cloudflare. Like any web host, Cloudflare handles each visit to deliver the page and protect the site, which involves your internet address and basic technical details such as your browser type. Because our server code runs on Cloudflare, the photo passes through Cloudflare's systems while the cartoons are being made; we don't turn on any logging of what you send. See Cloudflare's privacy policy.
Children's privacy (COPPA)
We don't knowingly collect personal information directly from children under 13; this site is for grown-ups. A photo of a child is personal information, so we only accept it from a parent or guardian who confirms that role and agrees to how it will be used, and we use it only to make the cartoons and then drop it. Because we don't keep the photo, the name or the cartoons, there's nothing stored with us to review or delete. If you have a question or a concern, email [email protected] and we'll help, including with any request to OpenAI about the photo.
Security
Everything travels over encrypted HTTPS connections, the site only runs its own scripts, and the photo is never written to storage on our side.
Changes to this policy
If we change how Rocko & Me handles photos, names or cartoons, we'll update this page and the “Last updated” date before the change takes effect.
Contact
Rocko's World · [email protected]