This notice explains information handling for an educational K–12 learning website supporting visual arts, English, mathematics, science, grammar, teacher-guided practice, assignments, reflection, and feedback. The educational profile supports approved learning, safety, support, and operation. It is not designed to create advertising profiles or sell student information.
When a school or educational program provides access, that organization determines the educational purpose, eligible users, classroom settings, and instructions for student records. Families should normally begin record requests with the responsible school or program.
The service may receive a school-approved username, internal account identifier, email address when required, class or learning-space association, role, age range, language, profile preferences, and authentication information.
Users may submit assignments, drawings, photographs of approved work, written responses, calculations, science observations, grammar exercises, portfolios, captions, reflections, teacher feedback, reports, project files, and other classroom content. Schools should avoid requiring unnecessary sensitive personal information in student submissions.
The service may process IP address, browser and device details, session identifiers, login times, approximate region, file metadata, security events, moderation actions, error logs, and diagnostic information to operate, secure, and troubleshoot the platform.
Information may come from the user, a parent or guardian, a school, an authorized administrator, the user’s device, or service providers supporting hosting, security, email, storage, and backups.
Information is used to authenticate accounts, organize classes and learning spaces, deliver lessons and subject activities, display authorized learning work, support assessment and feedback, save preferences, communicate notices, investigate reports, maintain records, protect the service, and follow lawful school instructions.
The operator and participating school or program must use an appropriate notice and authorization process for children under 13. A school may authorize collection on a parent’s behalf only where permitted and only for a school-approved educational purpose.
When information is received from a school as part of an educational service, it should be used only for the authorized institutional purpose, maintained under appropriate school direction and access controls, and not redisclosed except as authorized or legally required.
Student work and account activity may be visible to classmates, educators, guardians, or other authorized users according to classroom and privacy settings. Public educational metadata is limited to logged-out pages. Authenticated student workspaces, account records, submitted media, moderation tools, recovery pages, and administration are configured not to be indexed and are not intentionally supplied to public crawlers.
Student personal information should not be sold, rented, or exchanged for advertising value. Student activity should not be used to create advertising profiles. Optional analytics or plugins require separate school and operator review.
Essential cookies and session identifiers may be used for sign-in, security, preferences, language, and service continuity. The educational profile should not add third-party advertising trackers to account-entry pages or public learning pages.
The login page should not request precise location, camera, or microphone access. Photos, audio, video, artwork, and other submitted learning work can reveal identity or location; schools should collect them only when educationally necessary and with appropriate authorization and visibility controls.
Hosting, security, email, storage, backup, moderation, and technical-support providers may process information only as needed to operate and protect the service. Operators should review contracts, subprocessors, data locations, security commitments, deletion practices, and incident-notification terms.
Information may be disclosed when directed by the responsible school, required by valid legal process, necessary to protect a learner or another person, or needed to secure the service. Disclosures should be limited to what is reasonably necessary.
Information should be retained only as long as needed for the educational purpose, school instructions, account security, backups, dispute resolution, or legal obligations. Retention schedules should distinguish active records, deleted content, logs, and backup copies.
Schools, parents or guardians, and eligible students may have rights to review, correct, export, restrict, or delete information. Requests should be verified and coordinated with the responsible school when the school controls the account or education record.
Safeguards may include HTTPS, password hashing, protected sessions, least-privilege access, file validation, rate controls, logging, backups, secure configuration, and moderation. Administrators must keep software updated, protect privileged accounts, restrict plugins, and review server and school-network configuration.
The operator should investigate suspected unauthorized access, preserve necessary evidence, limit further exposure, restore secure operation, and notify affected schools or individuals when required by law, contract, or school policy.
Privacy and education laws vary. The operator and participating school remain responsible for identifying the requirements that apply to their location, learners, contracts, and deployment. This notice is not a substitute for school-specific notices or legal advice.
Questions or requests should use the published school or site contact channel. Material changes affecting student information should be communicated before the new practice begins when required, and the effective policy should remain available to users and reviewers.