Classcraft intends that the classroom can be reimagined using technology, games, and storytelling to create a learning environment that is culturally relevant to today's youth. The policy explains that as Classcraft is designed to be played in groups, much of the information collected about the teachers and students is intended to be shared. However, Classcraft's policy explicitly states that Classcraft does not collect the following data: Physiological biometric data; Information on free or reduced lunch status; or User’s contact lists or friends lists. The policy states that should there be any unauthorized disclosure of a student’s records, Classcraft will notify the school, teacher, parent and student via email within 3 days following discovery of the unauthorized disclosure. The policy explains that under the licensing agreement between Classcraft and the teachers using the Classcraft software, the teachers are responsible for obtaining parental permission should it be required under COPPA.

Classcraft can be accessed through its website, and is available for download at the iOS App Store and the Google Play Store. The Privacy Policy and Teacher Terms of Use used for this evaluation can be found on Classcraft’s website, iOS App Store and the Google Play Store. Additionally, other policies used for this evaluation include: Student Terms of Use. This evaluation only considers policies that have been made publicly available prior to an individual using the application or service.

Safety

The policy explains that as Classcraft is designed to be played in groups, much of the information collected about the teachers and students is intended to be shared. According to its policy, Classcraft stores the following information that the teacher and students may choose to share with their class, colleagues or school administration: Student or teacher’s name; Student or teacher’s email address; Student or teacher’s game activities; School and class information; Teacher-generated content (for example: posts, assignments, quizzes, etc.); and Messages and comments within the game. The policy warns that game related or class related activities, information or communications may be visible to teachers, students and others who are physically in the classroom. Classcraft's policy states that the teacher is responsible to monitor and manage all User Submissions, and that Classcraft does not monitor or manage User Submissions and is not responsible in any way for User Submissions.

Privacy

The policy explains that as Classcraft is designed to be played in groups, much of the information collected about the teachers and students is intended to be shared. However, Classcraft's policy explicitly states that Classcraft does not collect the following data: Physiological biometric data; Information on free or reduced lunch status; or User’s contact lists or friends lists. While they state that they make an effort to keep student data private, and that Classcraft tries to make sure that these links are safe for everyone, it notes that the privacy and data collection practices on any linked websites are entirely separate from Classcraft and are not covered by this Privacy Policy. They note that third party software may be integrated with Classcraft (such as Google Classroom, Microsoft, Facebook or Twitter). Classcraft has no responsibility for the content, policies or actions of these websites and they are entirely separate from Classcraft and are not covered by this Privacy Policy. They commit in their policy not to sell student information or share it for advertising purposes.

Security

Classcraft's policy states that it uses industry standard methods to protect its customer’s data against unauthorized use or access, alteration, unlawful or accidental destruction or loss. In the policy, they explain that one of the functions of cookies is to remember the user's id and password so that the user does not have to enter them each time. The policy states that should there be any unauthorized disclosure of a student’s records, Classcraft will notify the school, teacher, parent and student via email within 3 days following discovery of the unauthorized disclosure.

Compliance

The policy explains that under the licensing agreement between Classcraft and the teachers using the Classcraft software, the teachers are responsible for obtaining parental permission should it be required under COPPA. With regard to filtering capability in the policy, the teacher can restrain the information visible to other students: on a per class basis, they can hide the reasons for gaining and losing points and also limit visibility to a student’s teammates only (for the purpose of being able to play the game). The policy is detailed for deletion of data over time, but it is not immediate upon account deletion. The policy states that they are compliant with COPPA and FERPA. With regard to EU requirements, data is stored on Amazon servers in the United States and Classcraft abides by article 17 of the Act with respect to the use of personal information.

• Personal information is not sold or rented to third parties.
• Personal information is not shared for third-party marketing.
• Personalised advertising is not displayed.
• Unclear whether data are collected by third-parties for their own purposes.
• Unclear whether this product uses a user's information to track and target advertisements on other third-party websites or services.
• Unclear whether this product creates and uses data profiles for personalised advertisements.