Privacy Policy for TeachQuest

1. Information We Collect

We aim to collect only the minimum information necessary to provide and improve our Services. The information we collect depends on how you use TeachQuest.

1.1. Information Provided by Teachers

• Account Information: When teachers register, we collect their email address and a password for authentication and communication. Teachers may also optionally authenticate using Google OAuth, in which case we collect their Google account ID, Google email address, and basic profile information.
• Classroom Setup Information: Teachers may provide names or usernames for their students to create in-game characters. No other personally identifiable information (PII) of students is required or requested for participation. Student accounts are created by the teacher, and student login credentials are managed by the teacher.
• Custom Content: Teachers may create custom content within the platform, such as quests or events. This content is stored on our servers.

1.2. Information Regarding Students (Minors)

TeachQuest is designed with student privacy as a top priority, adhering to regulations such as COPPA in the United States and GDPR in Europe.

• Student Usernames/Names: The only student-related information we process is the name or username provided by the teacher. This data is used solely for displaying the student's character within their teacher-managed classroom and is not publicly accessible.
• No Direct Collection from Students: We do not directly collect personal information from students. They log in using credentials provided by their teacher and are never asked for emails, addresses, or other PII.
• Parental Access: Parents may be able to view their child's progress using a unique student code provided by the teacher. This access is read-only and does not require the collection of parental PII beyond what is necessary if they contact us for support.

1.3. Automatically Collected Information

When you access our Services, we may automatically collect certain device and usage information, such as:

• Log Data: IP address, browser type, operating system, access times, and pages viewed. This data is used for analytics, service improvements, and security.
• Cookies and Similar Technologies: We use only essential cookies to enhance user experience and website functionality.
  • Session Cookies: Temporary cookies that keep you logged in during your visit.
  • Remember Me Cookies: Long-term cookies (1 year) that keep teachers logged in across browser sessions.
  • Theme Cookies: Cookies that remember your preferred color theme.
  • Game Settings Cookies: Cookies that remember your TeachQuest game preferences and your last selected student.

  Important: We do not use tracking, advertising, or analytics cookies. Disabling essential cookies may impact functionality.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our Services.
• Manage teacher accounts and facilitate classroom setup.
• Enable student participation through teacher-created accounts.
• Display student names or usernames within their classroom context.
• Personalize and improve your experience.
• Communicate with teachers about their accounts, updates, and support.
• Monitor usage and trends to improve our Services.
• Ensure platform security and integrity.
• Comply with legal obligations.

3. How We Share Your Information

We do not sell, trade, rent, or otherwise share your personal information with third parties for their marketing purposes. We may share information only under the following limited circumstances:

• Service Providers: We may share information with third-party providers who perform services for us (e.g., hosting, data analysis, customer service). These providers must protect your information and use it only for the contracted purpose. Our website is hosted on Hostinger, and their processing is subject to their own policies.
• Legal Requirements: We may disclose information if required by law or to protect the rights, property, or safety of TeachQuest, our users, or others.
• Aggregated or De-identified Data: We may share aggregated data that cannot reasonably identify you for research, marketing, analytics, or other purposes.
• Business Transfers: If TeachQuest undergoes a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website if ownership changes.

Regarding student information: Student names or usernames never leave the classroom context unless required by law or with explicit, verifiable consent from the school or parent/guardian.

4. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect information from unauthorized access, use, alteration, and disclosure. No method of transmission or storage is 100% secure, and absolute security cannot be guaranteed.

5. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this policy, unless law requires longer retention. Teacher account information remains while the account is active. Student names/usernames linked to a classroom remain while the teacher maintains the classroom or until we receive a deletion request.

6. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request the personal information we hold about you.
• Rectification: Request corrections to inaccurate or incomplete information.
• Erasure: Request deletion of personal information under certain conditions.
• Restriction: Request that we restrict processing under certain conditions.
• Data Portability: Request to receive your information in a structured, commonly used format.
• Objection: Object to certain types of processing.

Teachers can manage account information and classroom data through TeachQuest settings. To exercise any rights, contact us at admin@teach-quest.com and we will respond according to applicable law.

For student data, teachers are the primary point of contact. Parents wishing to exercise rights regarding their child's data should contact the teacher or school, who can coordinate with us if needed.

7. Children's Privacy (COPPA Compliance)

TeachQuest is intended for use in educational settings under teacher guidance. We comply with COPPA and do not knowingly collect personal information directly from children under the age of 13 (or the applicable age of consent) without verifiable parental consent or as permitted by school consent exceptions.

The only student information we handle is the name or username supplied by the teacher for in-class display. Teachers are responsible for obtaining any required parental consent in line with school policies and applicable laws.

Google OAuth Authentication (NEW)

Recently Added: TeachQuest now offers Google OAuth as an optional authentication method for additional convenience and security.

What Google OAuth Means

• Optional Service: Google OAuth is optional—traditional username/password login remains available.
• Data Collection: When you sign in with Google, we receive your Google account ID, Google email address, and basic profile name so we can create or link your TeachQuest account.
• Account Linking: Existing TeachQuest accounts can be linked to Google for easier login.
• Teacher Verification: Google-authenticated teacher accounts are automatically verified, streamlining onboarding.
• Google's Privacy: Your interaction with Google's service is governed by Google's own Privacy Policy and Terms of Service.

Your Control

• You can disconnect Google from TeachQuest at any time through your account settings.
• You can continue using traditional login even after linking Google.
• No additional student data is collected through Google OAuth—student privacy practices remain the same.

Data Security

Google OAuth tokens are verified via Google's secure tokeninfo endpoint. We do not store Google passwords or long-lived access tokens—only the account identifier and email needed for login continuity.

8. Third-Party Websites and Services

Our Services may contain links to third-party websites or services that we do not operate. If you click a third-party link, you will be directed to their site. We encourage you to review the privacy policy of every site you visit; we are not responsible for the practices of external sites or services.

Our hosting provider is Hostinger, whose data processing practices are governed by their own privacy policy. Google services used for authentication are governed by both this policy and Google's policies.

9. Cookie Policy

This section explains how we use cookies and similar technologies on our website.

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help us remember your preferences and keep you logged in.

Types of Cookies We Use

We only use essential cookies needed for the website to function properly:

Third-Party Cookies

We do not use any third-party cookies for tracking, advertising, or analytics. The only third-party integration is Google OAuth for authentication, which follows Google's own privacy commitments.

Managing Cookies

You can control and manage cookies through your browser settings:

• Chrome: Settings → Privacy and security → Cookies and other site data
• Firefox: Options → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Manage Website Data
• Edge: Settings → Cookies and site permissions → Cookies and site data

Note: Disabling essential cookies may prevent TeachQuest from functioning properly, especially features that require you to be logged in.

10. International Data Transfers

Your information may be transferred to computers located outside your state, province, or country where data protection laws may differ. If you are located outside the United States and provide information to us, you consent to the transfer and processing of your data in the United States.

We take reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy. We will not transfer personal data to an organization or country unless adequate controls are in place.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post any changes on this page and update the "Last Updated" date. Please review this policy periodically. Changes become effective when posted.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at: