Privacy Policy

Last updated: September 27, 2026 Effective: September 9, 2026

Summary

Mathroom does not collect personal information. There are no accounts, no sign ups, and no passwords. Everything a learner does stays in the browser on the device they used. No information about a learner is transmitted to us or to anyone else.

Nothing about your students leaves the room.

The rest of this policy states that in the specific terms that regulators, districts and families look for.

1. Who this policy covers

This policy applies to the Mathroom web application at mathroom.fun and to the informational pages on the same domain. Mathroom is operated by Cody Snyder (Arizona, USA).

Mathroom is directed to children. This policy is written to be read by a parent, a teacher, or a district reviewer.

2. Information we collect

From children: none.

From adults using the informational pages: none.

No accounts. No email address, no password, nothing to sign up for. We do not ask for and do not receive:

• names, other than a first name a learner may type into their own device (see 2.1)
• email addresses, passwords, or any credential
• dates of birth or ages
• phone numbers
• postal or physical addresses
• government issued identifiers of any kind
• biometric identifiers of any kind, including fingerprints, facial templates, face or retina scans, and voiceprints
• audio or video recordings
• photographs or images of a user
• device geolocation or an automatically inferred location
• persistent identifiers used for tracking, including advertising identifiers
• contact lists, calendars, or any device content
• payment information of any kind

The application requests no device permissions. Camera, microphone, geolocation, payment, and USB access are explicitly disabled at the browser level by the site's Permissions Policy header.

2.1 Local learner preferences and where they stay

A learner may type a first name to label their own save on their own device. That name:

• is stored only in that browser's local storage on that device
• is never transmitted to us or to any other party
• is not required: initials or any label work equally well
• can be changed or removed by the user at any time
• does not appear in the single learner progress report, which displays an earned rank instead; the whole device view uses the saved names to distinguish learners in the current world

We never receive it, so we cannot access, disclose, retain, sell, or lose it.

The learner's selected school grade also stays in browser storage and user-exported backups. It selects the previous year's practice curriculum. The welcome screen offers an optional U.S. state preference for local word problem settings. This choice stays with the learner in browser storage and in any backup the user chooses to export. It is not sent to us, does not request location permission, and does not identify a favorite college. Leaving it blank keeps the standard question settings.

3. Information we do not collect automatically

We do not use cookies for tracking. We do not use advertising identifiers, tracking pixels, web beacons, session replay, fingerprinting, or any analytics service: not in the application, and not on these informational pages either. We run no analytics anywhere on this domain.

The application does not send learner activity anywhere. Progress, answers, mastery records and rewards are computed and stored on the device.

4. Third parties

We disclose no personal information to any third party, because we collect none.

Under the amended COPPA Rule an operator's notice must identify third parties and the categories of third parties to which children's personal information is disclosed. Mathroom has no such third parties to identify. There is no advertising network, no analytics provider, no data broker, no marketing platform, no telemetry service, and no third party software development kit receiving information from the application.

The application is served from its own origin. Fonts, audio, video, artwork and game assets are served from mathroom.fun. The site's Content Security Policy restricts scripts, connections, fonts, media, workers, manifests and images to the site's own origin.

Anyone may verify this using their browser's developer tools.

Hosting. The site is served by a commercial web host. As with any website, the host processes ordinary server request records in the course of delivering the site. We do not use those records to build profiles, and they contain no information a learner has entered.

5. Data retention and deletion

This section is provided as the written data retention policy required to appear in an operator's privacy notice under the amended COPPA Rule.

We retain no personal information, because we collect none. There is no server side learner record to retain, and therefore no retention period to define, no deletion schedule to run, and no indefinite storage to disclaim.

Data stored on the user's own device is retained until the user removes it. The user controls it entirely:

• Clearing browser or site data for mathroom.fun removes it
• The application's reset function removes the selected grade’s math and collection and several world records; it does not reset every mode
• Uninstalling or clearing the browser removes it

We cannot access it, cannot restore it, and cannot delete it on request because it is not ours and never reaches us.

A backup file is created only when a user chooses to create one. It downloads to the user's own device. We do not receive a copy and do not store one.

Deletion requests. If a parent, school or district asks us to delete a learner's information, the honest answer is that we hold none to delete. We will confirm that in writing on request to privacy@mathroom.fun.

6. Children's privacy: COPPA

Mathroom is directed to children and is an operator under the Children's Online Privacy Protection Act. Our position under each of the Rule's principal obligations:

We do not use children's information for targeted advertising, profiling, or any commercial purpose, because we do not have any.

7. Security

This section describes the information security program applicable to a service that holds no personal information.

Because Mathroom holds no learner information on any server, there is no learner data store to breach. Our security work therefore protects the integrity of the application itself:

• The site is served over HTTPS only; HTTP requests are redirected
• HTTP Strict Transport Security is enforced with a one year maximum age including subdomains
• A Content Security Policy restricts all resource loading to the site's own origin
• Additional headers in force: X-Content-Type-Options: nosniff, X-Frame-Options: DENY, Referrer-Policy: no-referrer, and a Permissions Policy disabling camera, microphone, geolocation, payment and USB
• Development follows the intent of the NIST Secure Software Development Framework: pinned major dependencies, deterministic asset manifests, type checking before bundling, sanitiser and transaction testing, deployment credentials kept outside source and build output, commit and release identity attached to each deployed generation, staging and validation before activation, retained rollback generations, and inspection of built assets for unexpected secrets or endpoints
• Untrusted inputs (including local storage values, imported backup files, query parameters, and media and service worker responses) are parsed at narrow boundaries and constrained to known identifiers and ranges
• The public application has no capability to write to our source repository

Breach notification. Should an incident occur affecting the service, we will notify affected schools and users, and any regulator as required, within the shortest period required by applicable law. We note that a breach of learner personal information is not possible through this service, as none is held.

8. Schools, districts and FERPA

The Family Educational Rights and Privacy Act governs education records held by schools and by parties acting on their behalf.

Mathroom receives no education records. We are not a recipient of student data under FERPA because no student data reaches us. There is no "school official" designation to make, no directory information to handle, and no re disclosure to control.

State student privacy laws. More than twenty states have laws modelled on California's Student Online Personal Information Protection Act, restricting how operators of K 12 services may use student information. These commonly prohibit targeted advertising to students, sale of student data, and non educational profiling, and require security safeguards and deletion on request. Mathroom satisfies each of these by not collecting student information at all. Where a district's state law imposes a stricter obligation, that obligation governs for that district.

Data privacy agreements. If your district requires a signed data privacy agreement before a tool may be used, contact privacy@mathroom.fun with your template.

9. Your rights

Comprehensive state privacy laws give residents rights to access, correct, delete, and port their personal information, and to opt out of sale, sharing, and targeted advertising.

We hold no personal information about you, so there is nothing for us to produce, correct, delete, or port. We do not sell or share personal information, and we do not engage in targeted advertising, not as a policy choice we might revisit, but because we have no personal information to use for it.

If you would like written confirmation of this for your own records, email privacy@mathroom.fun.

10. International users

Mathroom is operated from the United States and is intended for use in the United States. Because no personal information is collected or transmitted, no international transfer of personal information occurs.

11. Changes to this policy

September 10, 2026: corrected the operator identification. Mathroom is operated by Cody Snyder personally, with no company.

If this policy changes, we will update the date at the top and describe the change here. If Mathroom ever begins collecting personal information, we will say so prominently before it happens, not quietly in a revision.

12. Contact

Privacy questions: privacy@mathroom.fun Everything else: hello@mathroom.fun

Cody Snyder, Arizona, USA.

https://mathroom.fun/privacy