PRIVACY POLICY

How EraPin handles your data

Last updated: 9 May 2026

EraPin is a free curriculum-aligned history and geography activity, played as a map-based session. We take privacy seriously, especially because our classroom mode is used by students. This page explains what we collect, why, and how long we keep it.

Student data in classroom mode

EraPin's classroom mode (class.erapin.com) operates under the school authorization exception to the Children's Online Privacy Protection Act (COPPA). Schools authorize the collection of student data for educational purposes only.

Inside classroom mode, we collect only:

We do not collect: email addresses, device identifiers, IP addresses, persistent user IDs, location data, or any other identifier that could be used to contact or re-identify a student.

We do not display advertising, marketing, or links to our consumer products inside classroom mode. Data collected from students under school authorization is used solely to deliver the classroom experience to the authorising school. We do not use this data for any commercial purpose, including marketing or analytics for our consumer product.

What We Collect

Daily activity (erapin.com): We store a randomly generated player ID in your browser's localStorage. We also store a display name in localStorage if you create or accept a Challenge-a-Friend duel — this name is sent with your duel result so the friend who challenged you can see who took the challenge. The display name is local to your browser; it is not tied to an email or account. Daily scores are saved to our database linked to the anonymous player ID. We use PostHog for analytics on this page; PostHog uses its default configuration here, which may include the visitor's IP address for geolocation and bot detection.

Teacher portal (teach.erapin.com): Teachers sign in with an email address (used for authentication and to associate rooms with the teacher) and provide a teacher name and school name. PostHog runs on this page with IP capture disabled, session recording disabled, and text/attribute masking enabled.

Classroom mode (class.erapin.com): PostHog runs with IP capture disabled. Only the data listed in the previous section ("Student data in classroom mode") is collected.

What We Don't Collect

We do not collect email addresses from students or from consumer (erapin.com) visitors. Teachers provide an email to create a teacher account; that email is stored only for authentication and to associate rooms with the teacher, never used for marketing. We do not collect last names from students. We do not collect ages. We do not use advertising cookies or trackers. We do not sell or share data with third parties. We do not use data for advertising.

Third-Party Services

PostHog — anonymous analytics. IP capture is disabled on the classroom and teacher pages (class.erapin.com and teach.erapin.com); session recording is disabled and text/attribute masking is enabled there. The consumer page (erapin.com) uses PostHog's default configuration, which may include IP-based geolocation. PostHog privacy policy.

Supabase — database hosting for scores, rooms, and curriculum content. Data stored in the US. Supabase privacy policy.

Vercel — website hosting. Vercel privacy policy.

Google Maps — used on the consumer activity (erapin.com) only, never in classroom mode, for location search. Subject to Google's privacy policy.

Wikipedia / Wikimedia Commons — historical photographs displayed in EraPin are sourced from Wikipedia under Creative Commons licenses.

Data Retention

Daily activity scores are stored indefinitely to maintain streaks and the archive feature. Classroom scores and student names are retained for the school year and may be deleted upon teacher request. We plan to implement automatic deletion of classroom data older than 90 days.

Deletion requests

Teachers can delete all data for any room they own at any time, via their teacher dashboard. This is the simplest path for parents to request deletion: ask the student's teacher to clear the room.

Parents may also email admin@erapin.com directly. Because students often type partial, generic, or made-up names, we may not be able to isolate an individual student's data. In such cases, we will delete all play records from the relevant classroom room code for the period the student was active. This may include data for other students. We err on the side of deleting too much rather than too little.

Public erapin.com

erapin.com is a general-audience product anyone may use, including children playing independently of a school context. It is not directed at children under 13. We do not knowingly collect personal information from children using erapin.com. If we learn we have inadvertently collected personal information from a child under 13 on the consumer product, we will delete it.

Your Rights

You can clear all locally stored EraPin data by clearing your browser's localStorage for erapin.com. Teachers can request additional deletion of their classroom data by contacting us at admin@erapin.com.