Privacy Policy

Last updated October 28, 2026

NimboStar is a math practice site for kids, operated by Pix Technology LLC (“we”). This policy explains what we collect, why, who else handles it, and the choices parents have. It is written to follow the U.S. Children's Online Privacy Protection Act (COPPA) and U.S. state privacy laws.

Our promises

We never show ads, and we never sell, rent or share anyone's information for advertising.
We don't use analytics, advertising or tracking cookies, and we don't follow you across sites.
Children never sign up, never get their own login, and are never asked for an email address.
We collect only what NimboStar needs to work, and parents can see, change or delete it at any time.
We don't send children's information to AI services, and we don't use it to train AI.

Who can have an account

Only parents and legal guardians aged 18 or older can create an account. A parent adds each child as a “learner” profile inside the parent's account. Learners practice while the parent is signed in; parent-only pages and settings are locked behind a parent PIN.

NimboStar is for families. We don't offer school or teacher accounts, and we don't receive student records from schools.

Before any information about a child is collected, the parent:

creates an account with an email address they confirm through a link we send, or by signing in with Google;
confirms they are a parent or legal guardian aged 18 or older;
reads this policy and agrees to it, consenting to the collection described here; and
sets a parent PIN that protects learner settings.

We record when consent was given and which version of this policy it covers. If we make an important change, we ask for consent again before the parent can continue. Adding a learner and changing consent need the parent PIN.

What we collect

From parents

Email address and password (stored only as a secure hash), or, if you sign in with Google, the name and email Google shares with us.
Your consent record: when you confirmed you are an adult and agreed to this policy.
A parent PIN, stored only as a secure hash.

About each learner (entered by the parent)

A nickname (we ask for a nickname, not a full name) and grade or course.
A drawn avatar and page theme picked from our set. We don't collect photos, voice or video.
A birthday, if you choose to add one. It is used only to show the learner's age.
Learning settings: daily goal, whether the calculator is on, and whether the leaderboard is on.

While learners practice

Answers, scores, time spent per question, mistakes, review schedules, streaks, levels and badges earned.
Problem reports sent from a question: what's wrong, an optional note and the answer typed so far. We use them only to fix questions.

Learners can't chat, post messages or share anything with other users. The only free text a learner can type is an answer or a note in a problem report, which only we see.

From anyone who contacts us

Messages sent with our Contact form: your email, an optional name and your message.

Collected automatically

Cookies that keep you signed in and remember that the parent PIN was entered. These are needed for the site to work; we don't use any other cookies.
Your browser's time zone, so “today” and streaks match your calendar.
Your IP address, which our hosting provider logs briefly with each request, and which we use (only in scrambled, hashed form) to limit repeated sign-in attempts and other abuse.

How we use it

To run NimboStar: pick the next questions, track progress and rewards, and show parent reports.
To keep accounts secure and stop abuse.
To answer messages and fix reported problems.
To send parents emails they need: sign-in, password, PIN reset and account emails. No marketing emails.
To improve our questions, using counts and totals that don't identify anyone (for example, how often a skill's questions are answered correctly).

We don't use children's information for advertising, we don't build profiles of children for anyone else, and we don't make decisions about anyone by automated means beyond choosing practice questions.

What other families see

Nothing, unless the leaderboard is turned on for a learner. Then other families see that learner's level, number of questions answered and avatar, under a made-up name (like “Brave Otter 4170”), never the nickname. Only your own family sees your learners' nicknames. The leaderboard is off when a learner is added; it can be turned on or off at any time on the learner's profile page, and turning it off takes the learner off the board right away.

Who else handles it

We share information only with service providers that help us run the site. They may use it only to provide their service to us:

Supabase, which hosts our database and sign-in.
Vercel, which hosts and serves the site.
Resend, which sends our emails to parents.
Google, only if you choose to sign in with Google.

We may also disclose information:

if the law requires it, or to protect the safety of our users or others;
if NimboStar is merged or sold, to the new owner, who must keep protecting it as this policy says. We'll tell parents before that happens, and you can delete your account first.

Your rights as a parent

Review: see each learner's profile, and their progress in the weekly report, at any time.
Correct: change a learner's nickname, grade, birthday and settings on their edit page. Learners can change their own nickname, avatar, birthday and leaderboard setting there too; grade, daily goal, calculator and deleting need the parent PIN.
Delete: delete a learner (on their edit page) or your whole account (on the Account page). This permanently erases their practice history and everything else, right away.
Refuse further collection: you can stop a learner's data being collected by deleting the learner, and withdraw your consent by deleting your account. You can also agree to us collecting a child's information without agreeing to share it with others: the leaderboard is optional.
Get a copy: ask us for a copy of your family's data.

For anything you can't do yourself, use the Contact form or email privacy@nimbostar.com from your account's email address, so we know the request is really from you. We answer within 30 days and won't treat you differently for using these rights.

How long we keep it

Learner and parent data: while your account is open, because you can return to practice at any time. When you delete a learner or your account, we delete their data from our live systems right away.
Backups: copies in our providers' backups are overwritten within 30 days.
Contact messages: until we no longer need them to help you, and always when the account that sent them is deleted.
Security records: hashed sign-in counters last minutes to hours; hosting request logs are kept by our hosting provider for a short time.

Security

Data is encrypted in transit, each family can only see its own data, passwords and PINs are stored only as secure hashes, and parent settings are protected by a PIN. Only a small number of NimboStar staff can see account data, only to support families and keep the site running, and their actions are logged. No system is perfectly secure, but we work hard to protect your information and will tell affected parents promptly if a breach affects it.

State privacy rights

Residents of California and other U.S. states with privacy laws have rights to know what we collect, get a copy, correct it, and delete it. Every parent can use these rights as described above, whatever state they live in. We don't sell personal information or share it for targeted advertising, including that of anyone under 18. Because we use no tracking, there is nothing for a browser's Global Privacy Control or “Do Not Track” signal to switch off. You can use an authorized agent to make a request; we may ask you to confirm it with us directly.

Outside the U.S.

NimboStar is run from the United States and is designed for U.S. families. If you use it from elsewhere, your information is handled in the United States under this policy.

Changes

If we change this policy in an important way, especially in how we use children's information, we'll show you what changed and ask you to accept it before you continue using NimboStar. We won't use information already collected in a materially different way without your consent. The date at the top shows when this policy last changed.

Contact

NimboStar is operated by Pix Technology LLC. Questions or requests: use the Contact form or email privacy@nimbostar.com. See also our Terms of Use.