DRAFT, not legal advice, not yet approved. Needs owner approval and a lawyer's review before publishing. Remove this box when final.
Privacy Policy
Policy version 2 (v2). Last updated: [DATE]
Jugami is a free learning website. This policy explains what we collect, why, and the choices you have. Questions: governance@jugami.com.
The short version
- No ads. No ad or analytics trackers. Jugami sets no cookies.
- You can use every lesson without an account. Signed out, nothing you do is sent to us.
- If you sign in, we remember which lessons you opened and when.
- Quizzes and games built into lessons keep best scores on your device only and send nothing to us.
- New course quizzes (starting with the Constitution pilot) work only when you're signed in, and their answers and scores are saved to your account so you and your parent can see progress. [Quiz saving / parent dashboard text: requires the user's approval before publishing.]
- We never sell personal information.
What we collect
Parent accounts
Email address, password (stored hashed, so we cannot read it), optional display name, and a record of your consent (date, time and policy version).
Signing up and signing in
There are two ways to sign up: as a parent or as a teen (13+). Only a parent can create a kid account. Kids sign in on the "Kids" tab with a username and PIN; parents and teens use the "Grown-ups & teens" tab with email and password.
Child accounts (under 13)
Only a parent can create these. We store a nickname (please don't use a real name), a username, a 4–6 digit PIN (stored hashed), and an optional grade. We do not ask for a child's email, real name, birthday, photo, address, school or location.
Teen accounts (13 and older)
Email address, password (hashed) and birth year. The sign-up form also asks whether your birthday has passed this year; that answer is used only to check that you are 13 or older and is not stored.
Lesson progress (all signed-in accounts)
Which course and lesson was opened, when it was first opened and last visited.
Quiz answers and scores (signed-in students)
Quizzes and games built into individual lessons keep best scores on your device only and send nothing to us. The new course quizzes (starting with the U.S. Constitution pilot) work only when you're signed in. When a signed-in student takes one, we save for each attempt: the answers given, whether each was right, the score, and when. Students see their own results in My Courses; parents see their child's in the parent dashboard. No leaderboards or comparisons between students.
[Quiz saving / parent dashboard text: requires the user's approval before publishing.]Technical data
Our account provider, Supabase, records sign-in times and IP addresses in its logs. We also keep each account's last sign-in time until the account is deleted. Like most websites, our web host keeps standard server access logs, which can include your IP address, the date and time, the page requested, the response status, the referring page, and your browser type (user agent). We use these only to run and secure the site. [TO CONFIRM: host log retention period. Owner to set a fixed period (suggest 30–90 days), then state it here.]
How we use it
Only to run accounts, show progress in My Courses, keep the site secure, send account emails (for example, confirmations and notices), and answer your requests. We don't use it for advertising or build profiles.
Who we share it with
Service providers who help us run the site, only for that purpose: Supabase (accounts and database), our web host, and Resend (account emails) [Resend: planned, not yet live]. We may disclose information if the law requires it. We do not sell or rent personal information.
Children's privacy notice for parents (COPPA)
The U.S. Children's Online Privacy Protection Act (COPPA) covers personal information from children under 13. Here is how Jugami handles it.
- Who we are: Jugami, jugami.com. Contact: governance@jugami.com. [ADD: legal name and mailing address of the operator; lawyer to confirm what's required.]
- Parent first: Children under 13 cannot sign up on their own. A parent creates the account after giving consent. [Lawyer to confirm the consent method is sufficient "verifiable parental consent".]
- What we collect from a child: nickname, username, PIN (hashed), optional grade, which lessons they open and when, and their quiz answers and scores, plus sign-in times and IP addresses kept in security logs. [Quiz saving / parent dashboard text: requires the user's approval before publishing.]
- How we use it: only to let your child sign in and see their progress. No ads, no selling, no sharing beyond the service providers listed above.
- We collect no more than needed: a child does not have to give more information to use any lesson.
- Your rights: in your parent dashboard you can view your child's lessons and quiz results, download all of their data (JSON file), clear their quiz history, or delete their account. Deleting requires typing your child's username and cannot be undone; it removes the account and all of its progress, quiz answers and sign-in details. Parents and teens can delete their own account in My Courses by typing DELETE to confirm; this cannot be undone. Deleting a parent account also deletes their child accounts, unless another parent is linked to that child. You can always email governance@jugami.com instead. You can also refuse further collection, or ask us to review or delete anything, by emailing governance@jugami.com. We'll verify you are the parent before acting on an email request. [Quiz saving / parent dashboard text: requires the user's approval before publishing.]
- Teen sign-up: the teen form asks for a birth year without hinting at the age limit. If the answer shows the person is under 13, self sign-up is blocked, they are asked to have a parent create an account, and the block is remembered on that device. If we learn that a child under 13 signed up without a parent, we will delete the account. [Quiz saving / parent dashboard text: requires the user's approval before publishing.]
Cookies and local storage
Local storage: quizzes and games built into lessons (such as Pinball) save your best score or streak in your browser's local storage. It stays on your device and isn't sent to us. The new course quizzes don't use local storage for scores; they save to your account only when you're signed in. Clear it any time in your browser settings.
Accounts set no cookies. Signing in uses your browser's local storage instead:
jugami-auth: your sign-in session (access and refresh tokens and basic account info), so you stay signed in. Removed when you sign out.ja-age-block: remembers that the under-13 block was shown on this device, so the teen sign-up form stays blocked.ja-login-tab: which login tab you used last: "Kids" (username and PIN) or "Grown-ups & teens" (email and password).
No cookies on jugami.com. We use no analytics, trackers, third-party fonts or embedded frames from other sites. The short "One moment, please" check our host sometimes shows sets no cookie either. Games such as Pinball save scores in local storage on your device only.
Holiday House: /holidayhouse/ is a separate WordPress site. It may set standard WordPress cookies, but only if someone logs in or leaves a comment there.
How long we keep it
We keep account information while the account is active. When you delete an account, we delete its data, except logs. Supabase keeps its logs, including sign-in logs, for 1 day on our current plan, and these logs may include IP addresses. [Owner to decide account retention. 1 day is Supabase's published Free-plan API/database log retention; unverified for auth logs specifically. Recheck if the plan changes.]
Quiz data retention
Detailed quiz answers are kept for 12 months; scores are kept while the account is active. We plan to delete accounts that have been inactive for 18 months, with a warning email 30 days before to whoever owns the account email (a teen for their own account; a parent for their account and their children's). This is not active yet: it starts once our account email service is live.
Agreeing to this version
When this version (v2) takes effect, all existing account holders will be asked to agree to it again, and parents will re-consent for their children before quiz saving starts.
[Quiz saving / parent dashboard text: requires the user's approval before publishing.]Security
We use reasonable measures, like hashed passwords and PINs and encrypted connections. No system is perfectly secure.
Your choices
You can use Jugami without an account. Parents and teens can delete their own account in My Courses by typing DELETE, or by emailing governance@jugami.com. Account holders and parents can ask to see, fix or delete their information at governance@jugami.com. [Lawyer: state-law rights (e.g. California) and response times.]
Changes
If we change this policy, we'll update the date above. For material changes affecting children's information, we'll notify parents and ask for new consent where required.