Skip to content
ClassBreak
FOR IT DIRECTORS & PRIVACY OFFICERS

The safest student data is the data we never collect.

This page is written to be pasted into a procurement form. What we collect, where it lives, what is deleted and when, and the list of every third party that touches the data. If something you need is not answered here, email privacy@classbreak.app and a human replies.

0
Student accounts, ever
0
Rosters uploaded or stored
24h
Max life of live game data
How it is built

Privacy as architecture, not as a promise.

Roster-free by design

Most classroom tools ask schools to upload student rosters and then promise to protect them. ClassBreak removes the risk instead of managing it: live games are joined with a self-chosen display name on the student’s own device, so there is no roster to breach, subpoena or misconfigure.

Paid content is gated on the server

Premium game and course media is released only through an authenticated server endpoint that checks the teacher’s subscription on every request and answers with no-store caching. The full paid library is never compiled into the public site, so it cannot be scraped out of the page source.

Wellbeing stays with the teacher

Wellbeing check-ins are stored under the individual teacher’s account and shown only to that teacher. They are not aggregated into school dashboards and are not visible to leadership. A teacher’s reflections on a hard week belong to the teacher.

Clients cannot delete or forge records

Database security rules block clients from deleting user documents; destructive operations run only through authenticated server routes. Public endpoints (contact, demo requests, newsletter) are rate-limited and spam-trapped.

Data collected

Exactly what we hold, by who it belongs to.

Teachers
  • Name, email address and school name, provided at signup.
  • Password, if used, stored only as a hash by Firebase Authentication. Google sign-in shares only name and email.
  • Activity records the teacher creates: which games were run, how many student devices joined, session plans, course progress, and optional class labels the teacher types themselves.
  • Wellbeing check-ins a teacher chooses to log. These are stored under that teacher’s own account and are visible only to that teacher, never to school admins or other staff.
Students
  • No student accounts exist anywhere in ClassBreak. There is nothing for a student to sign up to.
  • To join a live game, a student enters a self-chosen display name on their own device. No login, no email, no age, no lasting identifier.
  • Live game data (the room, display names and any anonymous wellbeing taps) is deleted by an automated daily job within 24 hours of the session.
Data never collected

What ClassBreak cannot hold.

Student names or class rosters. ClassBreak has no roster upload, no student list, and no database field for a student identity. This is architecture, not policy: the product cannot hold a roster.
Student email addresses, dates of birth, photos, or contact details.
Health, biometric or location data.
Advertising profiles. ClassBreak sells no data and shows no ads inside the product.
Subprocessors

Every third party that touches the data.

This is the complete list. Each provider processes data only to run the service described, under its own data processing terms.

ProviderWhat it does with the data
Google Cloud (Firebase)Authentication and primary database (Firestore). Teacher accounts and teacher activity records live here, encrypted in transit and at rest.
CloudflareLive game rooms run on Cloudflare Workers. Room state is transient and cleared after the session; a daily cleanup job removes any remaining room records after 24 hours.
StripePayment processing. Card details are entered on Stripe’s systems and never touch or get stored on ClassBreak servers. Stripe retains transaction records under its own financial-compliance obligations.
ResendTransactional email delivery (receipts, account emails, form notifications). Processes recipient email addresses only.
VimeoVideo hosting for game and course videos. Premium video links are released only to an authenticated, subscribed teacher via our server; they are never bundled into the public site code.
VercelWebsite hosting and privacy-friendly, cookieless page analytics.
PlausibleCookieless website analytics on the public site. Aggregated page counts only; no cross-site tracking. Not loaded if a visitor declines the cookie banner.
Meta PixelMarketing measurement on the public website only. Not loaded if a visitor declines the cookie banner. Never present inside live games students join.
RevenueCatSubscription management for purchases made through the iOS App Store.
MailerLiteNewsletter delivery for teachers who opt in. Every send carries one-click unsubscribe.
Retention & deletion

How data leaves the system.

Live game data: gone within 24 hours

Student display names and live room state exist only for the session. An automated daily job deletes room records older than 24 hours. There is nothing to request deletion of, because nothing persists.

Teacher accounts: self-service deletion, effective immediately

A teacher can delete their own account from Settings. The deletion runs server-side: it cancels any active Stripe subscription, then permanently removes the account record and every activity record under it (sessions, plans, preferences, course progress and wellbeing logs), then removes the login itself. This happens at the time of the request, well inside the 30-day window our Privacy Policy commits to.

School-level requests

A designated safeguarding lead or IT director at a partner school can request an export of all data held for their institution, teacher account suspension, or full deletion. Email privacy@classbreak.app.

DPAs, security questionnaires and procurement forms.

Email privacy@classbreak.app for data processing agreements, vendor security questionnaires or data export requests. Safeguarding queries from designated leads are answered within 2 business hours.

privacy@classbreak.appPrintable school one-pager
Privacy Policy →Safeguarding Policy →Accessibility →The research behind brain breaks →ClassBreak for Schools →