Skip to main content

Privacy Policy

Version 2026-09-20Interim, under legal reviewContact theCoderSchool

Creator Hub (creatorshub.app) is run by theCoderSchool, a coding centre for children aged 7–14. This page says what the site collects and what happens to it. Parents of students under 13 should also read the Children's Privacy Notice.

Who uses the site

  • Students sign in with a username and password that the centre helps them set up. The username is the local part of a synthetic address on class.creatorshub.app; it is not a real mailbox and we never collect a student's email address.
  • Staff (coaches and admins) sign in with Google, by invitation from the centre only.

What we collect about a student

DataWhyWho can see it
First and last nameSo a coach knows whose work is whose and can match rewards to a childStaff only
UsernameSign-inStaff and the student
Display name (chosen by the student, moderated) and a public handle the site makes, like @BraveOtter42What classmates seeClassmates in the same class, staff
Avatar: an icon, colour and any earned frame or background picked from a setPersonalisationClassmates in the same class, staff
Photo avatar (optional; only when the centre has switched photos on and a parent's written permission is recorded; a coach reviews it before classmates see it)PersonalisationThe student, staff; classmates only after approval
Display settings (accent colour, theme, text size, motion and sound preferences)So the site looks the same on every computerThe student, staff
Achievements, earned items and reward requestsRanks, badges and rewardsThe student, classmates (badges and earned items), staff
Consent record (how and when consent was given, and the form's reference number; never the parent's name or email)Evidence of consentStaff only
Roblox username (optional)Only so a coach can send Robux rewards to the right accountStaff only
Coach noteProgress notes a coach writesStaff only
Last-active timeSo the centre can spot inactive accountsStaff only
Lesson progress and XPProgress tracking, ranks, certificatesThe student, classmates on a class-only leaderboard (XP only), staff

We do not collect a student's email, phone number, home address, location or date of birth. A photo is collected only in the optional case described above, and never analysed for faces.

If a course is bought online, the payment is taken by Stripe, which handles the card. We keep an order record (course, amount, date, Stripe reference and the payer's email) for accounting; the site never sees the card. Online purchase is not switched on today.

What we do not do

  • No advertising.
  • No analytics and no third-party trackers.
  • No sale or sharing of data for anyone else's use.
  • No chat between students. A student can flag a classmate's name or avatar to a coach; that is the only student-to-student action.

Where data lives

Data is stored with Firebase / Google Cloud in the United States, which processes it on our behalf (photos, when enabled, in the site's own Firebase Storage bucket). The only third-party cookie on the site is Google reCAPTCHA Enterprise, used to tell real browsers from automated abuse (Firebase App Check). See What this site stores for the full list of cookies and browser storage.

Course access

Lessons are gated by enrollment so that progress is tracked per student and per course. The gate is an enrollment control for progress tracking, not a security boundary: lesson content itself is not secret.

A parent or guardian gives consent on the centre's paper enrollment form before a student's first session. The centre records that consent against the student's account.

Your rights

A parent or guardian can ask, in person at the centre, to see, correct or delete their child's data. Deletion removes the account and all progress; see Data & deletion for what is kept afterwards and for how long.

Changes

The version date at the top of this page changes whenever the policy does. While the page is marked interim, it is a factual description of the site under legal review, and it may be reworded without notice.