CEL (Creativity Excellence Learning) is a K-12 educational platform where students earn in-game currency by answering academic questions, build cities, and compete with rival schools. CEL is designed, built, and operated with student privacy as its core principle — not an afterthought.
"Kids are the future, not products." — CEL was built by a student, for students. That philosophy shapes every privacy decision we make.
2. What We Collect
Student Data (collected by school, stored by CEL)
Student name and Architect ID (username) — assigned by the school, not by the student
Password (stored as a one-way bcrypt hash — we cannot recover it)
Quiz performance: XP, streaks, skill accuracy percentages, question history
Game state: city layout, army composition, territory holdings
Session timestamps and time-on-task (for teacher analytics)
Parent Data (provided voluntarily)
Email address and name (for parent dashboard login)
Student links created by the parent using tokens provided by the student/teacher
What We Do NOT Collect
Real names unless provided by the school
Home addresses, phone numbers, or any contact info from students
Device fingerprints, advertising IDs, or biometric data
Social media accounts or external platform data
Precise geolocation
3. What We Never Do
CEL will never sell student data. Never display ads to students. Never use student data to train AI models. Never share student data with third parties for commercial purposes. These are unconditional commitments, not subject to business conditions.
No advertising networks or tracking pixels
No third-party analytics on student interactions (no Google Analytics, Facebook Pixel, etc.)
No behavioral profiling for recommendation engines or targeted content
No data monetization of any kind
No sharing with data brokers
4. FERPA Compliance
CEL operates as a School Official under FERPA (Family Educational Rights and Privacy Act, 20 U.S.C. § 1232g). We access student education records only to provide the educational service contracted by the school, and under no other circumstances.
School Control
Schools retain ownership of all student data
Schools can request export or deletion of all student data at any time
Student accounts are created and managed exclusively by school administrators and teachers
CEL does not allow students to create their own accounts independently
Access Limitations
CEL staff cannot access student academic records without a documented legitimate educational interest
Data is partitioned by school — one school cannot see another school's student data
Teacher accounts can only view students in their assigned class
Schools using CEL should include it in their annual FERPA notification to parents as a service provider with access to education records.
5. COPPA Compliance
CEL complies with the Children's Online Privacy Protection Act (COPPA, 15 U.S.C. § 6501) for students under 13.
How We Handle Under-13 Students
Student accounts are created only by school administrators — students under 13 cannot self-register
We obtain verifiable consent through schools acting as intermediaries on behalf of parents (as permitted by the COPPA School Official exception)
We do not collect personal information from students under 13 beyond what is necessary to provide the educational service
Parents can request review, correction, or deletion of their child's information through the school or directly at the contact below
No Advertising to Children
CEL contains no advertising, no in-app purchases targeted at students, and no third-party content that could collect data from children. The platform is fully ad-free by design.
6. How Data Is Stored
Data is stored in Supabase (PostgreSQL), hosted in US data centers
All connections use TLS encryption in transit
Passwords are hashed with bcrypt (one-way, irreversible)
Database access requires authenticated service-role keys, never exposed to clients
Row-level security (RLS) is enabled on all tables
Account lockout after 5 failed login attempts (5-minute lockout)
Rate limiting on all authentication endpoints to prevent brute-force attacks
Retention
Student data is retained for the duration of the school's active subscription. Upon contract termination or upon school request, all student records are permanently deleted within 30 days.
7. School & Teacher Control
School administrators have full control over their students' data through the admin dashboard:
Create, modify, and delete student accounts at any time
Reset passwords, unlock accounts, adjust tax and assignment settings
Export the full class roster as CSV at any time
Export individual student progress reports as CSV
Set homework compliance requirements and review violations
Create and remove teacher accounts with specific grade-range access
8. Parent Rights
Parents and guardians have the following rights regarding their child's data on CEL:
Access: Create a free parent account at /parent to view your child's academic progress, level, and achievements
Correction: Contact your school administrator to correct any inaccurate student information
Deletion: Request deletion of your child's account through the school administrator or directly via the contact below
Opt-out: Parents may request the school remove their child from CEL at any time
The parent dashboard shows only academic data (XP, skills, achievements, level) — it never shows in-game financial data, army details, or battle history.
9. Data Deletion
School administrators can delete individual student accounts instantly from the admin dashboard
Deleted student accounts and all associated data (city, army, quiz history, skill stats) are permanently removed
Schools can request full data export before deletion
To request deletion of an entire school's data, contact us at the address below
We do not retain backups of deleted records beyond our standard 7-day backup retention window
10. Contact Us
For privacy inquiries, FERPA requests, COPPA concerns, or data deletion requests:
We respond to all privacy requests within 5 business days.
This privacy policy applies to the CEL platform operated at this domain. Schools integrating CEL into their own infrastructure are responsible for their own privacy notices.