Privacy Policy for HouseLearning

Last updated: October 22, 2026

This Privacy Policy describes how HouseLearning ("we," "us," or "our") collects, uses, retains, and discloses information when you use our websites, educational content, games, SafeLibrary, accounts, dashboards, community features, feedback tools, and related products and services (collectively, the "Service"). Where applicable law requires consent for optional processing, we request that consent separately. This Policy does not limit any rights that cannot lawfully be waived.

1. Interpretation and Definitions

For the purposes of this Policy:

**Service** refers to the HouseLearning website, including all educational lessons, practice problems, projects, personalized account features (like the **Student/Teacher Dashboard**), and the **HouseLearning Community Forum**.
**Personal Data** is any information that relates to an identified or identifiable individual.
**Usage Data** refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (e.g., the duration of a page visit).
**Cookies** are small files placed on your computer, mobile device, or any other device by a website, containing details of your browsing history on that website.
**Data Controller** is the legal entity that determines the purposes and means of the processing of Personal Data (in this case, HouseLearning).

2. Information We Collect and How We Use It

Account and Educational Data (Student/Teacher Dashboard)

When you create an account, log in (using **Firebase Authentication**), or use the features of the Service that require identification, we collect the following types of Personal Data:

**Account Registration Information:** Your name, email address, and a securely hashed version of your password. We use **Google Firebase Authentication** to manage your account, provide secure login, and communicate with you about the Service. **Legal Basis: Contractual Necessity.**
**Educational/Progress Data:** Information viewed on the **Dashboard**, including lesson completion status, practice problem scores, project submissions, assignments, and any feedback received. This data is stored using **Firebase Realtime Database (RTDB)** and is essential to provide personalized features like adaptive practice and allow teachers (if applicable) to monitor and support your learning. **Legal Basis: Contractual Necessity.**

Forum Content and Activity Data

When you use the **HouseLearning Community Forum** to post, comment, or start a discussion, we collect and process the following:

**User-Generated Content:** The text, images, or other materials you intentionally submit, including posts, comments, and private messages. This content is generally **publicly viewable** on the forum.
**Activity Data:** Your display name/username, the time and date of your activity, and any metadata associated with your contributions (e.g., the post tag you select).

We use this data to operate the forum, facilitate community interaction, and enforce our usage policies. **Legal Basis: Contractual Necessity and Legitimate Interest.**

Feedback Tool Data (Voluntary Submission)

A feedback or survey interface may be presented while you use the Service. If you submit a response, we collect the information you choose to provide:

**Submission Content:** Text comments, the selected 5-point rating (smiley), and optional screenshots you choose to upload.
Technical and activity data: The submission time, page URL or path, browser user-agent, a pseudonymous identifier or account identifier, and a snapshot that may include locally counted page views, clicks, scroll depth, time on page, and features used.
**Purpose:** This data is used strictly for improving our Service, fixing bugs, and enhancing the user experience. This data is stored in **Google Cloud Firestore**.

Important: While we aim to protect all submitted data, please ensure that you redact or avoid including any Personal Data (such as real names, private student records, or passwords) within the text or images of any voluntary screenshot submissions. **Legal Basis: Legitimate Interest.**

Usage, Diagnostic Data, and Tracking Technologies

Our hosting, analytics, authentication, and other service providers may automatically process technical and usage information, such as IP address, browser and device information, pages and URLs requested, timestamps, referring pages, and diagnostic data. URLs or search terms may contain information you enter; please avoid putting sensitive information in URLs or site searches.

Some site scripts also store preferences and identifiers in browser storage. Depending on the features you use, this may include cookie preferences, language and display settings, feedback-window settings, a random anonymous feedback identifier, and a locally maintained page-view count. These values generally remain until they expire, are deleted by the Service, or you clear your browser storage.

Operational diagnostics may record a page URL and timestamp once for each distinct page URL. A diagnostic script may also record that developer tools were opened, along with an account identifier or anonymous status; while developer tools are open, it may capture up to 300 characters of console output. We use these diagnostics for site security, troubleshooting, and investigating suspected misuse. Depending on the processing and applicable law, our legal basis may be our legitimate interests in securing and operating the Service. Do not place passwords, personal records, or other sensitive information in URLs or the browser console.

We use the following categories of cookies and similar technologies:

Essential technologies: Used for core functions such as authentication, security, and saving choices. Depending on the processing and applicable law, our legal basis may be contractual necessity or legitimate interests in providing and securing the Service.
Analytics technologies: Google Analytics measures site usage and is loaded on this website only when analytics consent is enabled in the cookie preferences. It may collect online identifiers, device/browser information, page and interaction data, and other usage information described below. We do not represent all analytics data as anonymous. Where required, the legal basis is your consent.
Marketing technologies: The cookie-preference interface offers a marketing category; we do not currently describe that category as an active advertising program. We will update this Policy and obtain any legally required consent before using marketing or targeting technologies.

3. Third-Party Services and Disclosures

Google Firebase Services

We utilize several services provided by **Google Firebase**, a platform developed by Google for creating mobile and web applications. This includes:

**Firebase Authentication:** Used for user login and secure account management (Section 2).
**Firebase Realtime Database (RTDB):** Used for storing Educational/Progress Data (Section 2).
**Google Cloud Firestore:** Used for storing voluntary Feedback Tool submissions (ratings, comments, and screenshots) and managing user rate limits for this feature (Section 2).

The data stored in Firebase services is handled according to Google's security standards and the **Google Cloud Privacy Policy**. We use Firebase services to securely manage user accounts and provide core personalized features.

Google Analytics 4

We use Google Analytics 4 (GA4) to measure use of the Service, subject to your analytics cookie choice. The SafeLibrary GA4 property is configured with these active web data streams:

SafeLibraryStream, Measurement ID G-8YSM87GDVW, configured for https://houselearning.github.io/home.
HouseLearning, Measurement ID G-P42LD5XN48, configured for https://houselearning.github.io/home.

Enhanced Measurement is enabled for these streams. Depending on the page, browser, and available content, it can automatically collect:

Scroll events when a visitor reaches the bottom of a page.
Clicks on links that lead away from the website.
Site-search activity using common query parameters, including q, s, search, query, and keyword.
Play, progress, and completion events for embedded YouTube videos.
Clicks on links to commonly recognized document, compressed-archive, and executable file types.
Interactions with and submissions of forms.

Google may process information such as online identifiers, device and browser information, page URLs, interaction events, and search terms under its own terms and privacy policy. Google Analytics data is not necessarily anonymous. See the Google Privacy Policy and the Google Analytics opt-out browser add-on. You may also withdraw analytics consent through the cookie preferences control on this website.

GitHub and GitHub API

Our entire website, including the Forum and Dashboard, is hosted on **GitHub Pages**. As a result, certain data, files, and content are stored on GitHub's servers.

We also utilize the **GitHub API** to facilitate content management, enable login/authentication for the Forum, and store certain non-database data related to site functionality (e.g., forum posts) in a low-cost manner. Your data stored in connection with this service is subject to the GitHub Privacy Statement. We strive to only use the GitHub API for necessary operational functions that do not require complex, persistent database storage.

We **do not share** Personal Data with third parties for their direct marketing purposes.

4. Data Retention

In the SafeLibrary GA4 property, event-level data retention is set to 2 months and user-level data retention is set to 14 months. The setting to reset the retention period for a user identifier when new activity occurs is enabled. These are GA4 data-retention settings; they do not set the retention period for browser cookies, Firebase records, GitHub-hosted content, or copies held by other providers.

The cookie-preference cookie is configured to expire after up to 365 days; this is separate from the GA4 retention periods. Browser local-storage values generally remain until cleared or removed. Account and educational data are retained while needed to provide the Service and manage the account. Forum content may remain publicly available until removed under our moderation or deletion processes. Feedback and operational records are retained as needed for the purposes described above; a fixed deletion schedule is not currently specified for all such records. We will delete or anonymize personal information when it is no longer needed, subject to applicable legal, security, and operational requirements.

5. Your Data Protection Rights (GDPR / CCPA)

Depending on your location, you have certain rights regarding your Personal Data. You may exercise these rights by contacting us using the details in the Contact section.

**Right to Withdraw Consent:** You can withdraw your consent to the use of optional cookies (Analytics) at any time. You can do this by clicking the "Manage Cookies" button below.
**Right of Access:** You have the right to request copies of your Personal Data.
**Right to Rectification:** You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
**Right to Erasure (Right to be Forgotten):** You have the right to request that we erase your Personal Data, under certain conditions.
**Right to Restrict Processing:** You have the right to request that we restrict the processing of your Personal Data, under certain conditions.
**Right to Object to Processing:** You have the right to object to our processing of your Personal Data, under certain conditions.

6. Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Policy. You are advised to review this Privacy Policy periodically for any changes.

7. Contact Us

If you have any questions about this Privacy Policy, or wish to exercise any of your data protection rights, please contact us:

By visiting our privacy support page: HouseLearning Privacy Support