Privacy notice
Last updated: November 7, 2026
Lessoncade turns a teacher's content into classroom games. This notice says what we store about teachers and students, why, for how long, and how to ask for a copy or deletion.
In short
- Students never create accounts. They play with a name their teacher asks for.
- We store students' answers only for assignments, and delete them automatically 12 months after they are submitted.
- We do not show ads, sell data, or track students across sites.
- Teachers can delete activities, assignments and single results at any time.
Who is responsible
The service is provided by [company or person name], the data controller for teacher accounts. Contact: [privacy email].
For students' results, the teacher (or their school) decides what to collect and why; we store and process those results on the teacher's behalf.
What we store about teachers
- Email address and, with Google sign-in, the name on the Google account.
- Language and display preferences.
- What you create: activities, images you upload (with their descriptions), folders and assignments.
We use this to run your account and the service you asked for (legal basis: performance of a contract, KVKK article 5/2-c and GDPR article 6(1)(b)).
What we store about students
- The name typed when joining an assignment. We ask for the name the teacher asked for, not a full name.
- For each finished game: the answers, which ones were right, the score, the time taken and the date.
We do not store students' email addresses, IP addresses, device information or location with their results. The name is remembered only in the student's own browser, so it does not have to be typed again.
Only the teacher who made the assignment can see the results. If the teacher turns on the leaderboard, other students in the same assignment see the top 10 names and scores.
How long we keep data
- Student results: deleted automatically 12 months after they are submitted, or earlier when the teacher deletes them or the assignment.
- Teacher accounts and content: until you delete them or ask us to delete your account.
- Uploaded images that no activity uses any more: deleted after 7 days.
Cookies
We use only cookies that the service needs: one keeps a teacher signed in, one remembers the chosen language. There are no advertising or analytics cookies.
Who processes data for us
- Supabase: database, sign-in and file storage (servers in the European Union).
- Vercel: hosting of the website.
- Resend: sending sign-in emails.
- Google: only if you choose to sign in with Google.
- Sentry: error reports, without students' names or answers.
Some of these companies are based outside Türkiye and the European Union. Transfers rely on the safeguards the law requires, such as standard contractual clauses.
Your rights
You can ask what data we hold about you, get a copy, have it corrected or deleted, and object to its use (KVKK article 11, GDPR articles 15–22). Write to [privacy email]. We answer within 30 days.
Students and parents can ask the teacher, or write to us with the assignment code and the name used; we will work with the teacher to delete the results.
Security
Connections are encrypted. Each teacher's data is separated by access rules in the database, and students cannot read or change stored results.
Changes
If we change this notice, we update the date below and, for important changes, tell teachers by email.