DRAFT TEMPLATE: replace everything in [square brackets], have a lawyer who knows student-privacy law (FERPA, COPPA and your state's rules) review it, then delete this box. It describes what the software does today; it is not legal advice.
Privacy
Last updated: [DATE]. Lab-i-matic is run by [OPERATOR NAME], [ADDRESS]. Questions: [PRIVACY CONTACT EMAIL].
The short version
- Lab-i-matic lets teachers assign learning games and see how students did.
- We collect as little about students as we can: a first name and last initial, a username or Canvas ID, and what they do in the games.
- We do not show ads, sell information, build advertising profiles, or use analytics trackers. Nothing about students is shared with advertisers.
- Teachers and schools control the information. A teacher can download or delete a student's data at any time.
What we collect
| Who | What |
|---|---|
| Teachers | Name, email address, and a password (stored only in scrambled form, so we cannot read it). |
| Students who join with a class code | The name they type (we ask for first name and last initial only), a username, and a password (scrambled). No email address, birthday, phone number, or address. |
| Students who sign in through Canvas | An anonymous ID Canvas gives us, the course they are in, and their name shortened to first name and last initial. No email address and no password. |
| Gameplay | Scores, levels, which questions were answered correctly, how long a game was played, and when. Teachers see this for their own classes. |
| Technical | A sign-in cookie that keeps a person signed in. Our servers briefly see IP addresses and web addresses requested, to keep the service running and block abuse. [Log retention: N days.] |
Games run in a locked-down frame: they cannot read cookies, see who is playing, or send information anywhere. Fonts and all other files are served by us, so students' browsers do not contact other companies' servers.
How we use it
Only to run Lab-i-matic for the class: signing people in, showing teachers results, returning grades to Canvas when a school connects it, keeping the service secure, and fixing problems. We do not use student information for advertising or to build profiles unrelated to the class.
Who can see it
- The student's teacher(s) and the school or district that set the class up.
- If the class is connected to Canvas, Canvas receives grades and the course roster is read from it.
- Companies that help us run the service under written terms that limit them to that job: [HOSTING PROVIDER], [EMAIL PROVIDER]. We do not sell information.
- Authorities, only when the law requires it. [Describe notice practice.]
Schools and children
Lab-i-matic is meant to be used by schools and teachers. When a school or teacher creates a class and students use Lab-i-matic for schoolwork, the school directs how the students' information is used and is responsible for having any permission the law requires from parents. We do not knowingly collect personal information from children under 13 except as authorized by a school. If you believe a child has signed up outside a school, contact us at [PRIVACY CONTACT EMAIL] and we will delete the account.
Keeping it and deleting it
- Teachers can download a student's data and delete a student's account from the class page, and can delete their own account (which also deletes their classes and results) from the Account page.
- Parents and students can ask their school or teacher to do this, or contact us at [PRIVACY CONTACT EMAIL] and we will act on a request that comes from the school.
- Deleted information is removed from the live service immediately and from backups within [N] days.
- [State what happens to data after a school stops using Lab-i-matic, for example deletion after N days.]
Security
Connections use HTTPS. Passwords are stored with a one-way scramble. Access to the database is limited to [WHO]. If we learn of a breach that affects student information we will tell the affected schools within [N] days. [Add details.]
Changes
If we change this page in a way that matters, we will tell schools before it takes effect. Questions: [PRIVACY CONTACT EMAIL].