Effective Date: April 3, 2026 | Last Updated: July 28,
2026

This Privacy Policy explains how Edtomorrow (“we,” “us”) collects,
uses, and protects information across our websites and services,
including edtomorrow.com, First Five
PLUS, our classroom games, and edtgo.com
(together, the “Services”). We are committed to protecting your privacy
and to being transparent about how our products work.

1. The Short Version

Our products are built for educators. Teachers and
school staff create accounts, subscribe to our daily email, and use our
classroom tools. Some tools are also used by students in the
classroom — for example, joining a class game at edtgo.com or playing
the daily Brain Game a teacher puts on the board. We treat those
student-facing features more strictly: they carry no advertising
and no third-party tracking, we do not create student accounts, and we
do not store students’ names. We do not sell your personal
information for money.

Student-facing features are designed to comply with the Children’s
Online Privacy Protection Act (COPPA). Teachers and schools may
authorize the use of these features for classroom educational purposes,
consistent with COPPA and Federal Trade Commission guidance on school
authorization; we use any information collected from these features
solely for that authorized educational purpose. These features collect
only the information reasonably necessary for students to participate in
classroom activities, such as a temporary session or game code that lets
a student join a class activity. Persistent identifiers used for
gameplay are limited to COPPA’s “support for internal operations”
purposes — for example, maintaining a game session or saving in-game
progress — and are not used for advertising, profiling, or cross-site
tracking, and are not combined with other information about the student.
Parents may review or request deletion of any information collected from
a child by contacting us, or through their child’s school, where the
school has authorized the activity.

2. Information We Collect
From Educators

• Account information — your name, email address, and
  optional school or role, and a hashed password, when you create a free
  account or a First Five PLUS subscription.
• Payment information — subscriptions are processed
  by our payment provider through Easy Digital Downloads; we do not store
  full card numbers.
• Newsletter — the name and email you provide to
  receive The First Five.
• Usage information — pages visited, streak and
  points activity for logged-in users, and device, browser, and IP
  information collected through cookies and similar technologies on our
  educator-facing pages (see Section 5).

Information collected in educator accounts is not used to track or
identify students and is not combined with student gameplay data.

Eddy (AI Assistant). Eddy is available only on
educator-facing pages and is intended for teachers and other adults 18
and older. Anonymous visitors may interact with Eddy, but student-facing
pages do not load the assistant. When you use Eddy, the chat content you
enter is processed through EdTomorrow’s servers and transmitted to
Anthropic to generate responses. We do not use chat content for
advertising, profiling, or creating marketing audiences. Chat logs are
retained for up to 30 days for product improvement and abuse prevention,
then deleted. Schools and educators may request deletion of chat logs at
any time by contacting us.

3. Children’s Privacy (COPPA)

Some Edtomorrow features are designed to be used by students in the
classroom, including children under 13. We built these features to
comply with the Children’s Online Privacy Protection Act (COPPA), and
specifically so they operate without collecting personal
information that would require verifiable parental consent:

• What students use. Joining a class game at
  edtgo.com with a game code and a nickname; playing the daily Brain Game
  on our ad-free games pages; and interactive activities a teacher
  displays in class.
• What we collect there. Only the technical
  information needed to make the feature work — for example, an IP address
  used to keep a live game connection open — used solely to support the
  internal operations of the Service under 16 CFR §312.5(c)(7). We do not
  use it to advertise to children, to build profiles of students, or to
  contact anyone.
• No advertising and no third-party tracking in student
  games. Our interactive party games (The Hot Seat, Hunch,
  Training Trivia), the daily Brain Game pages, the Brain Games Hub, and
  the game player are served without advertising, ad cookies, or
  third-party tracking tags. No ad network and no third-party analytics
  run on those pages; the only measurement is our own count of how many
  times a page is played, which contains no information about the
  visitor.
• Nicknames. Nicknames entered to play live games are
  shown only during the game and are not stored after the session ends. We
  ask students not to use their real names.
• Leaderboards. Class leaderboards are designed for
  educators: entries show a nickname or class name chosen by the teacher
  (for example, “Ms. Hall’s 5th Period”), never a student’s name. Class
  leaderboard entries reset each season, and we store no student
  identifiers beyond a short, non-identifying value used to limit abuse,
  which is deleted within 60 days. Some games (for example, Training
  Trivia) also include an all-time high-score board: entries show only the
  nickname or initials entered and a score, inappropriate names are
  filtered automatically, and entries are removed on request.
• Teacher class lists. Educators with a First Five
  Plus account may save class lists (for example, for name pickers and
  classroom boards) to their own account so the lists follow them between
  devices. We encourage first names or nicknames only. Lists are visible
  only to the educator who saved them, are never public, are never used
  for advertising, and are deleted when the educator deletes them or
  closes the account. Parents or schools can request deletion at any time
  by contacting us.
• No student accounts. Students do not create
  accounts or log in. Accounts are for educators and other adults 18 and
  older.
• Parents and schools. If you are a parent, guardian,
  or school official and believe a child has provided personal information
  to us, contact us at info@edtomorrow.com. We will verify the request and
  promptly delete the information. We do not require students to provide
  more information than is reasonably necessary to take part.
• Teacher Consent. For classroom use, teachers and
  schools may act as the responsible parties for educational features,
  consistent with COPPA and Federal Trade Commission guidance on school
  authorization. Before authorizing use, we make available to schools a
  description of the categories of information collected through
  student-facing features and how that information is used. This
  authorization applies only to uses that are for the benefit of the
  school and its students in an educational context. Any use of student
  information outside that educational context would require verifiable
  parental consent.
• Parental Rights. Parents and guardians have the
  right to review any personal information collected from a child, request
  deletion, and revoke consent. Requests may be submitted to
  info@edtomorrow.com, and we will verify and process them promptly.
• Reasonably Necessary Collection. We collect only
  the information reasonably necessary for a child to participate in a
  classroom activity. We do not retain children’s information longer than
  needed for the feature to function.
• Mixed-Age Classrooms. When students under 13 and
  over 13 use the same classroom tools, all student-facing features
  operate under COPPA’s internal-operations exception and do not collect
  personal information requiring parental consent.
• Internal Operations Only. Persistent identifiers
  used for gameplay are used solely to support the internal operations of
  the Services under 16 CFR §312.5(c)(7) and are not used for advertising,
  profiling, or cross-site tracking.
• Inadvertent Collection. If we ever inadvertently
  collect personal information from a child, we delete it upon discovery
  or upon a verified request.

Our standalone COPPA Notice for Parents and Schools
is available at www.edtomorrow.com/coppa/.

4. Eligibility

Our websites, accounts, subscriptions, and email lists are intended
for educators, school staff, and other adults who are at least 18 years
old. We do not knowingly collect personal information from anyone under
18 through our account or subscription features.

5. Cookies,
Analytics, and Advertising (Educator Pages)

• Cookies are used for login sessions and
  preferences.
• Analytics. We use Google Analytics (via Google Site
  Kit / Google Tag Manager) to understand how visitors use the site.
• Advertising. Our free, educator-facing pages
  display advertising through Mediavine, which may use
  cookies and similar technologies to serve interest-based ads and may
  combine that data with information it independently holds. See
  Mediavine’s privacy policy and its partner list. Categories of third
  parties that may collect or receive data in connection with advertising
  include advertising networks and exchanges (such as Google Ad Manager,
  Amazon Publisher Services, Sovrn, Sonobi, and The Trade Desk),
  identity-resolution providers (such as ID5 and Unified ID 2.0), and
  advertising measurement providers.
• Opt out. You can opt out of interest-based
  advertising through the “Do Not Sell or Share My Personal
  Information” link in our footer, and via thenai.org/opt-out,
  optout.aboutads.info, and optout.networkadvertising.org. You can opt out
  of Google Analytics at tools.google.com/dlpage/gaoptout.
• Ad-free for subscribers. First Five PLUS
  subscribers do not see advertising while logged in, and Mediavine’s ad
  scripts are not loaded for them.
• Student Analytics Separation. Analytics used on
  educator-facing pages do not run on student-facing pages and cannot be
  used to infer, track, or identify student behavior. Student gameplay
  pages load no third-party analytics, advertising scripts, or tracking
  technologies.
• Internal Operations Only. Any persistent
  identifiers collected on student-facing pages — such as an IP address
  used to maintain a live game connection — are used solely to support the
  internal operations of the Service under COPPA’s internal-operations
  exception and are not used for advertising, profiling, or cross-site
  tracking.

We honor Global Privacy Control (GPC) signals where required by law.
We do not respond to legacy Do Not Track signals, which are no longer
widely supported.

Mediavine
Programmatic Advertising (Ver 1.1)

The Website works with Mediavine to manage third-party interest-based
advertising appearing on the Website. Mediavine serves content and
advertisements when you visit the Website, which may use first and
third-party cookies. A cookie is a small text file which is sent to your
computer or mobile device (referred to in this policy as a “device”) by
the web server so that a website can remember some information about
your browsing activity on the Website.

First party cookies are created by the website that you are visiting.
A third-party cookie is frequently used in behavioral advertising and
analytics and is created by a domain other than the website you are
visiting. Third-party cookies, tags, pixels, beacons and other similar
technologies (collectively, “Tags”) may be placed on the Website to
monitor interaction with advertising content and to target and optimize
advertising. Each internet browser has functionality so that you can
block both first and third-party cookies and clear your browser’s cache.
The “help” feature of the menu bar on most browsers will tell you how to
stop accepting new cookies, how to receive notification of new cookies,
how to disable existing cookies and how to clear your browser’s cache.
For more information about cookies and how to disable them, you can
consult the information at All About
Cookies.

Without cookies you may not be able to take full advantage of the
Website content and features. Please note that rejecting cookies does
not mean that you will no longer see ads when you visit our Site. In the
event you opt-out, you will still see non-personalized advertisements on
the Website.

The Website collects the following data using a cookie when serving
personalized ads:

• IP Address
• Operating System type
• Operating System version
• Device Type
• Language of the website
• Web browser type
• Email (in hashed form)

Mediavine Partners (companies listed below with whom Mediavine shares
data) may also use this data to link to other end user information the
partner has independently collected to deliver targeted advertisements.
Mediavine Partners may also separately collect data about end users from
other sources, such as advertising IDs or pixels, and link that data to
data collected from Mediavine publishers in order to provide
interest-based advertising across your online experience, including
devices, browsers and apps. This data includes usage data, cookie
information, device information, information about interactions between
users and advertisements and websites, geolocation data, traffic data,
and information about a visitor’s referral source to a particular
website. Mediavine Partners may also create unique IDs to create
audience segments, which are used to provide targeted advertising.

If you would like more information about this practice and to know
your choices to opt-in or opt-out of this data collection, please visit
National Advertising Initiative
opt out page. You may also visit Digital Advertising Alliance
website and Network
Advertising Initiative website to learn more information about
interest-based advertising. You may download the AppChoices app at Digital Advertising
Alliance’s AppChoices app to opt out in connection with mobile apps,
or use the platform controls on your mobile device to opt out.

For specific information about Mediavine Partners, the data each
collects and their data collection and privacy policies, please visit Mediavine
Partners.

6. How Long We Keep
Information

We keep personal information only as long as needed for the purposes
described here:

• Educator account & subscription data — for the
  life of the account; deleted or de-identified within 90 days of account
  deletion or a verified deletion request.
• Newsletter data — until you unsubscribe;
  suppression records are kept as needed to honor opt-outs.
• Streaks & points (logged-in educators) — while
  the account is active; leaderboards reset seasonally.
• Game session codes (edtgo) — about 4 hours, then
  purged automatically.
• Student nicknames in live games — not stored; gone
  when the session ends.
• Leaderboard entries — class boards reset each
  season; all-time game boards keep only the entered nickname or initials
  and a score until removed on request. The short, non-identifying
  anti-abuse value is deleted within 60 days.
• Eddy chat logs — up to 30 days, then deleted
  automatically.
• Analytics data — up to 14 months.
• Support and contact messages — up to 2 years.
• Payment records — as required by law.

We do not retain children’s personal information indefinitely or for
speculative future uses.

7. Third Parties We Work With

Mediavine (advertising, educator pages only) · Google Analytics /
Site Kit / Tag Manager (analytics, educator pages only; not loaded on
student game pages) · Supabase (real-time game infrastructure) · Easy
Digital Downloads and our payment processor (subscriptions) · Beehiiv
(newsletter platform) · Postmark (transactional email) · WP Engine and
Cloudflare (hosting and content delivery) · Amazon Web Services (media
storage) · Anthropic (AI assistant, automation, and support tooling).
Each receives only what its function requires. We seek written security
commitments from vendors that handle personal information.

COPPA Restrictions. Vendors supporting
student-facing features may not use children’s data for any purpose
other than providing the service, may not combine it with other
datasets, and must delete it upon request. Student-facing features do
not send data to advertising networks, analytics providers, or
identity-resolution services.

8. Data Protection & Security

We maintain administrative, technical, and physical safeguards
designed to protect personal information, aligned with the NIST
Cybersecurity Framework: access controls and role-based access,
encryption of sensitive data in transit, monitoring, and a documented
incident-response process. In the event of a confirmed breach, we will
notify affected parties and authorities as required by law. Employees
with access to user data receive annual training on FERPA, COPPA, and
applicable state privacy laws, and are bound by confidentiality
obligations. No system is perfectly secure, but we follow
industry-recognized practices.

9. Your Rights and Choices

Depending on where you live, you may have the right to know what
personal information we hold, to request correction or deletion, and to
opt out of the sale or sharing of personal information. To exercise
these rights, contact us at info@edtomorrow.com; we will verify and
process requests in accordance with applicable law. California and other
state residents can opt out of ad-related sharing using the “Do Not Sell
or Share My Personal Information” link in our footer.

Parents and schools may request access to, deletion of, or cessation
of further collection of a child’s information. Schools acting as agents
may submit these requests on behalf of parents.

10. Changes to This Policy

We may update this policy from time to time. Changes are reflected by
the “Last Updated” date above; material changes that affect how we
handle children’s information will be highlighted prominently.

11. Contact Us

Questions about this policy? Email
info@edtomorrow.com or visit www.edtomorrow.com.