For schools: privacy and security
Last updated November 12, 2026
A one-page summary for principals, technology directors and data privacy officers. Students use Tinkerelle without giving us their name or email, their work stays inside their class, and it's deleted automatically when the class stops using Tinkerelle. The full details are in our Privacy Policy.
At a glance
- No student names, emails or contact details. Students join with a class code and get a generated nickname and a private secret code.
- Secret codes are never stored readably. We keep only a keyed hash; nobody at Tinkerelle can see a student's code. Teachers can issue a new one.
- Work stays in the class. Only classmates, the teacher and Tinkerelle staff see a student's published designs. Teachers can require approval, hide designs and see reports.
- No ads, no tracking, no selling. No advertising or analytics cookies. Student data is never sold, used for profiling or used to train AI.
- Code runs in the browser. Students' Python runs on their device; fonts and the coding engine are served from tinkerelle.com, not third-party sites.
- Students can't buy anything and never receive email from us.
What we collect from students
A generated nickname, the class they belong to, their Python code, lesson progress and sticker designs, the designs they choose to publish to their class, and basic activity records (account created, signed in, published). That's all.
Deletion
- A teacher removing a student or class deletes their data immediately.
- When a Classroom plan ends and isn't renewed, its students' accounts and work are deleted automatically within 12 months.
- Sign-in safety records are deleted within 7 days; backups within 30 days.
- Teachers can download students' sticker sheets and code at any time, so nothing is lost when a class ends.
Security
All connections use HTTPS. Database access rules limit each person to their own data and each teacher to their own classes, and are tested automatically with every change. Repeated wrong guesses of student codes are blocked. Staff access is limited to named administrators, and their actions are logged. Card payments are handled by Stripe.
COPPA, FERPA and SOPPA
Schools authorize student use for an educational purpose under COPPA, in place of individual parental consent. Where student work is an education record, we act as a "school official" under FERPA. We sign student data privacy agreements, including the Illinois National Data Privacy Agreement under SOPPA, and can give you a notice to send home to parents.
Get the paperwork
Email hello@tinkerelle.com or call (312) 725-3494 for a data privacy agreement, the parent notice, or a quote. Schools can pay by card, or by invoice with a purchase order: see pricing.
