Children's Privacy Policy

1. Who we are (operator contact)

This site is operated by James Brandon Mathews. Parents, guardians, and schools can reach the operator about any privacy question or request:

• Email: jbrandonmathews@gmail.com
• Mailing address: 260 N Dixie Drive Unit 533

2. What information we collect from students

Provided by the school or the student directly:

• Name, student ID, grade level, and class periods
• School the student attends
• Email address (optional — only if the school uses email-based sign-in or gradebook sync)
• A password (stored only in securely hashed form)
• Practice-test answers, flags, highlights, scores, and per-question timing
• Problem reports a student submits about a question

Collected automatically (passively):

• A session cookie that keeps the student signed in; it expires after a period of inactivity, and signing out clears it
• Count of times the student switches away from the test tab during a timed test (test-integrity proctoring; no browsing content is ever seen or recorded)
• Display preferences (dark mode, text size, highlight settings) stored only on the student's own device, never sent to us
• IP addresses and timestamps in operational logs kept for a limited time by our hosting and error-monitoring providers, used only to run and secure the service
• On math sections, the built-in Desmos calculator loads in the student's browser directly from Desmos's servers, which receive the student's IP address and browser type in order to deliver the calculator (see section 4)

We do not collect geolocation, photos, audio, video, contacts, or browsing history, and the site contains no advertising or third-party analytics trackers.

3. How the information is used

Student information is used solely for educational purposes authorized by the school: scoring practice tests, showing progress to the student, generating reports for teachers and parents/guardians, recommending existing practice material, and maintaining test integrity. It is never used for advertising, marketing, profiling for non-educational purposes, or building profiles unrelated to the school's purpose, and it is never sold or rented to anyone.

4. Who can see it (disclosure)

• The student's school: teachers and school staff see scores, progress, and proctoring information for their students.
• Parents and guardians: through printed/shared progress reports the school generates.
• The school's gradebook, if the school connects one: scores are sent to Google Classroom or the school's LMS (e.g., Canvas, Schoology, Moodle) only when the school sets that up.
• Service providers that run the site: our hosting provider (Railway) stores the database; an error-monitoring service (Sentry) and an email provider may process limited technical data (such as IP addresses in logs) strictly to operate the service; Desmos receives the student's IP address and browser type when its calculator loads on math sections, solely to deliver the calculator. These providers may not use student information for any other purpose.
• Legal requirements: we may disclose information if required by law or to protect the safety and security of students or the service.

Students cannot make personal information public through this site: there are no profiles visible to other students, no chat, forums, or messaging.

5. Consent: how COPPA works at school

Accounts are created by schools for their students. Under the FTC's COPPA guidance, a school may consent to the collection of students' personal information on parents' behalf when it is used only for an educational purpose the school has authorized — which is the only way this site uses it. The school receives this policy, and parents can review it here at any time without signing in.

6. Parents' and guardians' rights

A parent or guardian may, at any time:

• Review the personal information held about their child;
• Have it deleted;
• Refuse further collection or use of their child's information (which may mean the child can no longer use the site).

To exercise these rights, contact the school (which can view, export, and permanently delete a student's account and records using built-in tools) or the operator directly at jbrandonmathews@gmail.com. We will verify that the requester is the child's parent or guardian (typically through the school) before providing or deleting information.

We will not condition a student's participation on disclosing more personal information than is reasonably necessary to take practice tests.

7. Data retention and deletion

Student records are kept only as long as the school needs them for its educational purpose. Schools can delete individual attempts, individual students, or entire cohorts at any time; graduating students' accounts are deactivated during the school's year-end rollover. Personal information is retained no longer than reasonably necessary and is deleted using reasonable measures to protect against unauthorized access during disposal.

8. Security

We maintain reasonable procedures to protect the confidentiality, security, and integrity of student information: all traffic is encrypted in transit (HTTPS), passwords are stored only as salted hashes, integration credentials are encrypted at rest, access is role-restricted (students see only their own data; school staff see only their school), and destructive administrative actions are audit-logged.

9. Changes to this policy

If we make material changes to how we collect, use, or disclose students' personal information, we will notify schools and require a fresh acknowledgment from every account before continued use. Signed-in users are re-shown the privacy notice monthly regardless.