Privacy policy

The short version

We collect what we need to run your account, sell you a worksheet and keep the forum civil. We never sell your information or your children's information to anyone. We never see your card number. You can have all of it deleted by asking.

What we collect, and when

Nothing here is collected secretly. Each item comes from something you did.

• When you join: your first name, your email address, and a password we never store in readable form.
• Optionally, when you complete your profile: your state, how long you have homeschooled, and what matters most to you.
• Optionally, about your children: a first name or nickname, an age, and a grade. All three are optional and exist only so we can suggest worksheets at the right level. You may leave them blank or remove them at any time.
• When you buy: your email, what you bought, what you paid, and the record of which files your account may download.
• When you post in the forum: what you wrote, when, and the display name and picture you chose.
• When you download: a timestamped record of which file, so we can support you, count the downloads included with your purchase, and spot abuse of the licence. The file itself is the same one everybody else gets — nothing is written into it about you.
• Automatically, for security: a one-way hashed fingerprint of your IP address at signup, your browser's user agent, and a reCAPTCHA score. We store the hash, not your address.
• Each time you sign in: the date and time, a one-way hash of your address, and the browser and operating system you used, recorded as something like ‘Chrome on Windows’. It is there so we can tell when one account is being shared or resold, which is what keeps the worksheets affordable for the mamas who buy them honestly. It is a hash and a browser name, not a location and not a device fingerprint, and we delete it after a year.
• Whatever you write to us in an email.

What we never collect

We do not store your card number, expiry date or security code. Payment happens entirely on Stripe's own secure page and we only ever receive a confirmation that it succeeded, along with the last four digits and card brand that Stripe shows us.

We do not run advertising trackers, third-party ad pixels or cross-site behavioural profiling. We do not buy data about you from anyone.

Your children's information

This site is built for parents. It is not directed at children, children may not create accounts, and we do not knowingly collect anything directly from a child.

The only information we hold about a child is what you, the parent, choose to type into your own profile: an optional first name or nickname, an age and a grade. It is used for one purpose — matching worksheets to the right level in your library — and for nothing else. It is never used for advertising, never sold, and never shared.

By default your children's details are private to your account. They appear on your public forum profile only if you deliberately switch that on, and you can switch it back off.

You can delete any or all of it yourself on your account page, or ask us and we will remove it. If you believe a child has given us information directly, write to us and we will delete it promptly.

Why we hold it

Each thing we store maps to something the site has to do.

• To give you an account, sign you in and keep you signed in.
• To take payment, deliver your files and let you re-download them later.
• To suggest worksheets at your children's level.
• To run the forum and show who wrote what.
• To keep spam, bots and abuse out, and to enforce the house rules.
• To send the weekly note, if you have not unsubscribed, and to answer you when you write to us.
• To understand, in aggregate, which worksheets and posts are useful.

Who else can see it

We use a small number of services to run the site. Each one sees only what it needs, and none of them may use your information for their own purposes.

• Supabase — the database, sign-in system and file storage. Holds your account, profile, orders and forum posts.
• Sevalla — the hosting that serves the pages.
• Stripe — payments. They receive your email and card details directly; we do not.
• Resend — sends email. Receives your email address and the content of the message.
• Google reCAPTCHA — scores signups to keep bots out. Governed by Google's own privacy policy.
• Anthropic (Claude) — screens forum posts for spam and abuse, and writes journal entries. Post text is sent for that check and is not used to train their models.

We do not sell your information

We have never sold or shared personal information for money or for anyone's advertising, and we will not. That includes your children's information, without exception.

The only other circumstances in which we would hand anything over are: if the law requires it, to protect someone's safety, or if the business were ever transferred to a new owner — in which case this policy would travel with it and we would tell you first.

Cookies and what is stored in your browser

We use a session cookie to keep you signed in. Without it you would have to log in on every page.

Your shopping cart is a short list of worksheet ids kept in your own browser's local storage. It never reaches our servers until you check out, and it disappears when you clear your browser data.

We do not use advertising or cross-site tracking cookies.

How long we keep it

Your account, purchases and library stay until you ask us to delete them, because they are what gives you access to files you paid for.

Security records of signup attempts are automatically deleted after thirty days. Forum posts remain unless you or a moderator remove them. Email records are kept while you are subscribed and for a short period after you unsubscribe, so we can honour it.

Your choices

You are in control of all of this, and none of it requires a formal request.

• See and change your details, your children's details and your forum profile on your account page.
• Unsubscribe from email using the link at the bottom of any message. It takes effect immediately and does not affect your account.
• Ask for a copy of everything we hold about you, and we will send it.
• Ask us to delete your account and your data, and we will, subject to any records we are legally required to keep.
• Depending on where you live you may have additional rights under the GDPR, the UK GDPR or California law, including the right to object, restrict or complain to a regulator. Write to us and we will honour them.

Security, and being honest about it

Connections are encrypted, passwords are hashed and never stored in readable form, purchased files sit in private storage reachable only through short-lived links tied to your account, and database access is restricted per-user at the database itself rather than only in the application.

No system is perfectly secure, and anyone who tells you otherwise is selling something. If a breach ever affected your information we would tell you promptly and plainly.

Changes and contact

If we change this policy the date at the top changes with it, and we will say so by email if the change is significant.

Any question about your information, or a request to see or delete it, goes to the address below and a real person will answer.