Dear K-12 School,
As part of Arcademy, Inc.'s ("Arcademy") compliance with the Children's Online Privacy Protection Act ("COPPA") and other applicable student data privacy laws, this notice explains how Arcademy collects, uses, and discloses personal information from students under age 13 ("Children") when your school ("School") uses Arcademy's educational products and services ("Services").
Under COPPA, a School may act as the parent's agent and provide consent for the online collection of personal information from students strictly for educational purposes. By agreeing to Arcademy's Terms of Service and enabling student access, the School provides such consent on behalf of parents or guardians. We provide this notice, as required by law, to help ensure that the consent provided by the School is informed and that you understand what personal information we collect from Children under age 13 and how we use it.
What Arcademy Is
Arcademy is a K–12 learning platform that lets teachers assign game-based activities, collect student work, track learning progress, and provide feedback within a closed classroom environment.
Information We Collect About Children
Account & identifiers (provided by School): student first/last name (or display name), username, school email (if used), class/roster ID, and SSO identifiers/attributes (Microsoft, Google, Clever, ClassLink) necessary to authenticate and associate work with the class.
- Classroom artifacts (submitted/created): Minecraft worlds and exports, MakeCode projects, screenshots, journals, videos, comments/feedback, scores/grades.
- Progress & usage for instructional support: assignment IDs, completion status, timestamps, time-on-task, checkpoint logs, and teacher feedback.
- Technical data for internal operations: IP address and device/OS/browser metadata, log and error data strictly to support authentication, security, performance, and fraud/abuse prevention.
- Arcademy does not allow students to publicly post personal contact information and does not collect home addresses or phone numbers from students.
We do not use third-party advertising technologies, nor do we permit behavioral advertising on student data. Any analytics we use are limited to "support for internal operations" (e.g., performance measurement, debugging, and security) and are configured to prevent cross-site tracking or use for advertising. We collect no more personal information than is reasonably necessary to participate in and support the activities on the Services.
Information Collected Automatically
We automatically collect limited usage and technical information through our servers and log files, such as domain name, browser type, operating system, pages viewed, and time spent in the Service, solely to support internal operations and maintain system performance and security.
We do not use third-party advertising technologies or behavioral advertising. Any use of persistent identifiers (e.g., IP address, device IDs, cookies) is limited to "support for internal operations" as defined by COPPA, such as authentication, security, network communications, performance measurement, debugging, and analytics that do not build profiles for advertising and do not allow cross-site tracking. If Google Analytics is enabled, it is configured for internal operations only and not for advertising or cross-site tracking.
We may also collect an IP address or unique device identifier to support internal operations, including maintaining and analyzing system performance, performing network communications, authenticating users, and protecting the security or integrity of the Service and its users.
How Information May Be Shared
Arcademy may disclose the personal information we collect about Children in the following limited ways:
- Sharing within the School. Shared only with the student's authorized teacher(s) and School staff, as directed by the School. Children may share information with their teacher(s) through the Service.
- Service Providers (Subprocessors). We disclose a Child's personal information to third-party service providers who perform functions on our behalf and/or on behalf of a School in order to provide Services. Our current subprocessors are available upon request by contacting privacy@arcademy.net. We notify Schools of any material changes before they take effect.
- Business Transfers. In the event of a merger, acquisition, or transfer of assets, Arcademy will continue to protect student personal information consistent with this notice and all applicable privacy laws.
- Legal Requirements. Disclosed when necessary to comply with law, a judicial order, or other legal process.
- Protection of Rights and Safety. Arcademy may disclose information as necessary to investigate or prevent illegal activity, security incidents, or potential threats to the safety of students, teachers, or the Service, or to enforce our Terms of Service.
Arcademy does not allow third-party advertising or data collection for commercial purposes.
More About Consent
Arcademy does not collect any personal information from or about Children until the School provides its consent by agreeing to the Terms of Service and enabling student use of the platform.
After implementation, Schools may request to review, correct, or delete student information at any time by contacting privacy@arcademy.net. Upon verified School request, Arcademy deletes or de-identifies student data within 30-60 days, except where retention is required by law or necessary for system integrity.
If Arcademy receives a request directly from a parent or guardian to stop collecting or to delete their Child's information, we will notify the School of the request and follow the School's direction regarding the Child's account and access to the Service.
If Arcademy contact a School to request COPPA consent, we use the School's email address only to obtain and document consent and related compliance communications, and for no other purpose. If the School does not respond, we delete that email address within 30 days.
If you have any questions about Arcademy's COPPA practices, please contact us at privacy@arcademy.net
Sincerely,
Arcademy, Inc.