Plain-English version: we collect the minimum we need, we don't sell your data, and we delete it when you ask. The full version is below.
When you create an account: your name, email address and (optionally) your school or organisation. When you use the curriculum platform: anonymised usage data so we can improve the product. When you make a purchase: billing address and payment method processed by Stripe — we never see your card number. We do not use tracking pixels or third-party advertising cookies.
Your data is used to run your account, send you product updates you asked for, and improve the platform. We do not sell it to third parties. We do not use it for advertising. We don't share it with other schools or users. We use Mailchimp for newsletters — you can unsubscribe at any time from any email.
Our school platform may be used with students. Schools are responsible for obtaining appropriate parental consent under their local privacy laws. We only process student data on behalf of the school (as a data processor, not controller). We do not use student data for any purpose other than providing the service. Student accounts do not include social features or advertising.
We comply with the Australian Privacy Act 1988, GDPR (for European users), FERPA (for US schools), and the New Zealand Privacy Act 2020. Our servers are hosted in Australia and the United States. Data transfers to the US are covered by standard contractual clauses.
You can request a copy of your data, ask us to correct it, or ask us to delete it — at any time, for any reason. Email hello@theschoolofplay.co with the subject line "Data request". We will respond within 14 days. If you are in the EU or UK you also have the right to lodge a complaint with your local data protection authority.
We use cookies and similar technologies for three purposes only: (1) session and authentication cookies, which keep you logged in and are strictly necessary to operate the platform; (2) preference cookies, which remember settings like your selected class or curriculum level; and (3) anonymised analytics cookies (via Vercel Analytics) that tell us which pages are visited and how fast they load — no personal data is attached. We do not use advertising cookies, tracking pixels, or any third-party behavioural profiling tools. You can disable cookies in your browser settings, but doing so may prevent login and other core features from working.
We keep your account data for as long as your account is active. If you cancel or request deletion, we remove your personal data within 30 days, except where we are required to retain it for legal or financial compliance (e.g. billing records, which we keep for 7 years under Australian tax law). Anonymised, non-identifiable usage data may be retained indefinitely to improve the platform.
We use a small number of trusted third-party services to operate the platform. Stripe processes all payments — we never store or see your card number. Vimeo hosts all curriculum and welcome videos — video plays may be logged by Vimeo under their own privacy policy; we use privacy-mode embeds (dnt=1) to minimise data collection. Mailchimp manages our newsletter list. Vercel hosts the platform and collects anonymised request logs. Each of these providers is contractually bound to protect your data and may not use it for their own purposes.
Last updated: May 2026. Questions? hello@theschoolofplay.co
