Privacy notice

Last updated 4 August 2026

Who runs EdTechCore

EdTechCore is an independent, non-commercial project. It is not run by a registered company: it is built and paid for privately while it is being tested, and it charges nothing for access. If that ever changes and the project becomes a commercial service, a company will be formed, this notice will name it with its registration details, and it will say so before anything is charged. Until then the person who operates EdTechCore is the data controller under the GDPR, and the way to reach them is privacy@edtechcore.com or the project's Telegram channel.

What this notice covers

The public site and the workspaces you sign in to. What is stored on your own device has a page of its own, the cookie policy, and the two are meant to be read together.

What is collected, and why

Only what the service needs in order to work:

• Your account: the name you give, your email address, the language you choose, the school or workspace you belong to and your role in it. Without these there is no way to sign you in or to show you the right workspace.
• The work itself: courses, lessons, tasks, the answers a student submits, the marks a teacher gives, messages and the files anyone uploads. This is the product - it is kept because the people using it need it kept.
• Where a school bills its own students through EdTechCore: invoices, payments and the ledger entries behind them. Card details are entered on the payment provider's own page and never reach us.
• Technical records: sign-in times, IP addresses and server logs, kept so the service can be run and abuse investigated.

The legal bases are the agreement under which the service is provided to you or to your school, our legitimate interest in keeping it running and secure for the technical records, and a legal obligation where accounting rules require a record to be kept.

What teachers and schools put here

Most of what lives in EdTechCore is put there by teachers and schools, not by us. A school decides who has an account, what its courses contain and what it records about its students; for that material the school is the controller and EdTechCore processes it on the school's instructions. If you are a student, a question about your own record is usually answered fastest by your school or your teacher - write to us anyway if you prefer, and we will pass it to the right place and tell you that we have.

Advertising, analytics and tracking

There are none. EdTechCore runs no analytics, sets no advertising cookies, builds no profiles and shares nothing with an advertising network - not on this site and not in the workspaces. That is a statement about today, not a promise about forever: the project may later want to measure how the product is used, or to reach new people through advertising. If it does, this notice and the cookie policy will be updated before anything is switched on, the cookie notice will ask instead of telling, and nothing beyond what the service needs will be stored on your device unless you agree to it. Refusing will not cost you access.

Who else is involved

A few other companies are needed to run the service. Each one sees only what its job requires:

• The servers are rented inside the European Union, and the data centre operating them can technically reach the machines.
• Cloudflare delivers and protects the site, so it sees every request, including the IP address it came from.
• YouTube, a Google service, plays a lesson video a teacher has embedded, under Google's own policy.
• A payment provider runs the payment page and handles card details on its own systems.
• Your browser's own push service delivers notifications, if you have turned them on.

How long it is kept

Account and course data stays while the account and the workspace exist, and goes when they are deleted. Sign-in and server logs are kept for a short period and then discarded. Accounting records are kept for as long as the law requires. Backups are rotated, so something deleted from the live service can survive briefly in a backup before it goes with it.

Keeping it safe, and the limits of that

Traffic is encrypted in transit, passwords are stored only as hashes, the most sensitive fields are encrypted at rest, every account reaches only what its role opens, and backups are taken regularly. None of that is a guarantee. Hardware fails, software has bugs and a determined attacker sometimes succeeds; no service can honestly promise that data will never be lost or never reached by someone who should not have it. Keep your own copy of anything you cannot afford to lose. If a breach happens that puts people at risk, we will say so - to those affected and to the supervisory authority - as the law requires.

Your rights

You can ask what personal data is held about you, have it corrected or erased, restrict or object to how it is used, receive a copy in a portable form, and withdraw any consent you gave. Write to privacy@edtechcore.com and we answer within one month. If the data belongs to a school's workspace we may have to pass the request to the school, and we will tell you when we do. You can also complain to a data protection authority - in Poland, the President of the Personal Data Protection Office.

Children

Schools and teachers use EdTechCore to teach people of any age, children included. A child's account is created by their school or their teacher, and it is the school that must have the standing to do so under the rules that apply to it. We do not seek children out, and there is no advertising and no profiling here for anyone.

Automated decisions

None that affect anyone legally. Marking is deterministic: the same answer scores the same way every time. AI helps a teacher draft material and never decides a mark; where a teacher switches it on, what it sees is the material they hand it.

Changes to this notice

When what the service does with personal data changes, this notice changes with it and the date at the top moves. Anything that needs your agreement will be asked for, never assumed.

The limits of this page

This is a plain description of how the service works, written to be understood rather than to sound impressive. It is not legal advice and it takes away no right the law gives you. The companies named above run their own services under their own terms.

Read the terms of use Read the cookie policy Back to the home page