PlayMath.org Privacy Policy

Last Updated: December 6, 2025

Welcome to PlayMath! Throughout this privacy policy, we refer our website, playmath.org, as well as its games and services, collectively as the "Services". We respect your privacy and have composed this Privacy Policy to help you understand how we process your Personal Data (defined below) and your choices about the data we process.

This Privacy Policy explains what Personal Data (defined below) we collect in connection with the Services, how we use and share that data, and your choices concerning our data practices. This policy applies only to information we collect via the Services and in email, text, and other electronic communications sent through or in connection with the Services.

This policy DOES NOT apply to information that you provide to or is collected by any third-party, or which is collected outside of the Services (see "Third-Party Information Collection").

This Privacy Policy is incorporated into and forms part of our End User License Agreement. Before using the Services or submitting any Personal Data to us, please review this Privacy Policy carefully and contact us at the email address below if you have any questions.

By using the Services, you consent to the practices described in this Privacy Policy.

If you do not consent to this Privacy Policy, please do not access or otherwise use the Services.

1. Data Controller

Play Math, Inc. ("Company," "we," "us," or "our") will be the entity responsible for your data. To ask questions or comment about this privacy policy and our privacy practices, you can contact us at:

Email: privacy@playmath.org

2. Children

Our Services are directed to a general audience, however, we are aware that children may be interested in the Services. For this reason we have an age gate that we use to verify the age of our users. Users under the age of 13 are filtered to an area of our site where no Google or Meta tagging is used, and no personal information is collected, except for persistent identifiers that are used solely to collect information for the following internal purposes: Maintaining, analyzing, or improving the Services (including our game library and platform features), understanding usage and engagement (for example games played, session duration, and retention trends), measuring activity patterns (for example daily and hourly usage), improving performance and reliability (for example by analyzing technical performance metrics and error reports), filtering test or fraudulent traffic, and protecting the security and integrity of the Services. If we learn that we have collected or otherwise processed any other Personal Data of a minor without the requisite parental consent, we will delete that information. If you have reason to believe that we have received or processed the Personal Data of a child through the Services, other than as described above, without the requisite verified parental consent, please contact us at privacy@playmath.org, and we will endeavor to delete that information from our databases. This is in compliance with the Children's Online Privacy Protection Act and Article 6(1)(c) of the GDPR.

3. Personal Data We Collect

We collect information that alone or in combination with other information in our possession could be used to identify you ("Personal Data") as follows:

Personal Data You Provide. We only collect Personal Data from you when you choose to provide it to us directly. For example when filling out our contact form on the Site you may provide your name, email address and birth year. If you send us an email, we will receive your email address and the information that you choose to include in your communication to us.

Automatically Collected Information. For information about Personal Data that is automatically/passively collected through the Services, see below:

We have first-party and third-party cookies and similar technologies on our Site. They may collect identifiers (such as an anonymous analytics ID and session ID), device and browser information (such as browser and operating system, device type, screen and viewport size, language settings, and user agent), usage and session information (such as pages and game experiences viewed, session duration, navigation paths, and interaction events), timestamps, referral information, and campaign parameters (such as UTM values and ad click identifiers when present in the URL). Please see the "Cookies" section below to learn more about how we use cookies.

Cookies: A "cookie" is a piece of information sent to your browser by a website you visit. Cookies can be stored on your computer for different periods of time. Some cookies expire after a certain amount of time, or upon logging out (session cookies), others survive after your browser is closed until a defined expiration date set in the cookie (as determined by the third-party placing it) and help recognize your computer when you open your browser and browse the Internet again (persistent cookies). For more details on cookies, please visit All About Cookies.

Do Not Track Signals: Our Services currently do not respond to "Do Not Track" ("DNT") signals and operates as described in this Privacy Policy, whether or not a DNT signal is received. If we do respond to DNT signals in the future, we will update this Privacy Policy to describe how we do so.

Third-Party Information Collection Through the Services: As stated above, some features of the Services and Services are served by third parties ("Third-Party Services"). When you use the Services, these third parties may use automatic information collection technologies to collect information about you or your device. These third parties include Cloudflare, AWS, PostHog, Google, and Meta. We do NOT send child data to Google or Meta (we do not advertise to kids or have their trackers in the kids experience). Their processing practices related to the information that they collect is governed by their privacy policies.

4. How We Use Personal Data

We may use Personal Data for the following purposes:

• To help us identify unique users and sessions (for example through persistent identifiers used for analytics and site functionality).
• To help us comply with rate limiting rules and prevent abuse.
• To understand how visitors arrive at our website (for example via referrers and campaign parameters).
• To understand what pages and game experiences you use, how long you spend, and how you navigate through the Services (including game usage tracking, session duration, and session counts).
• To measure engagement patterns over time (for example average session time by week and device type).
• To understand when users are most active (for example hourly active usage) to support planning and reliability.
• To measure retention and return usage (for example 30-day retention by device type).
• To compare performance and engagement across platforms (for example desktop versus mobile) and prioritize improvements.
• To maintain data quality by filtering test traffic and excluding internal or development activity (for example localhost and test domains/URLs).
• To provide, support, optimize, and maintain the Services.
• To respond to you if you contact us.
• To fulfill any other purpose for which you provide it.
• To develop new products and services.
• To monitor, troubleshoot, and improve performance and reliability (for example using technical performance metrics such as web vitals).
• To diagnose and fix errors and other technical issues (for example through error and exception reporting).
• To prevent fraud, criminal activity, or misuse of our Services, and to ensure the security of our IT systems, architecture, and networks.
• To comply with legal obligations and legal process and to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or other third parties.
• For any reason that we describe to you when collecting your Personal Data, or for any purpose for which you provide your consent.
• To protect the rights, interests, and safety of us, you, and any third parties, and to exercise and defend our rights.
• To create anonymous, de-identified, or aggregated datasets ("Aggregated Information"). Such datasets would not be "Personal Information" subject to this Privacy Policy. We may use anonymous, de-identified, or aggregated datasets for any purpose. For more information about Aggregated Information, see below.

Aggregated Information: We may aggregate Personal Data and use the aggregated information to analyze the effectiveness of our Services, to improve and add features to our Services, and for other similar purposes. In addition, from time to time, we may analyze the general behavior and characteristics of users of our Services and share aggregated information like general user statistics with prospective business partners. We may collect aggregated information through the Services, through cookies, and through other means described in this Privacy Policy.

5. Sharing and Disclosure of Personal Data

In certain circumstances, we may share the categories of Personal Data described above without further notice to you, unless required by the law, with the following categories of third parties:

• Vendors and Service Providers: To assist us in meeting business operations needs and to perform certain services and functions, we may share Personal Data with vendors and service providers, including providers of cloud services, web security and firewall services, and analytics services. Pursuant to our instructions, these parties will access, process, or store Personal Data in the course of performing their duties to us.
• Business and Distribution Partners (analytics reporting): We may share limited access to analytics reporting or dashboards for our marketing pages with business partners (for example, partners that refer traffic to our site) in order to measure referral performance, understand campaign effectiveness, and support business relationships. This access is limited to analytics data associated with our marketing and advertising experiences, and does not include student gameplay content, child-directed areas of the Services, or any information we knowingly collect from children other than persistent identifiers used solely for internal operations as described above.
• Business Transfers: We may disclose your information to our subsidiaries and affiliates. If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of all or a portion of our assets, or transition of service to another provider (collectively a "Transaction"), your Personal Data and other information may be shared in the diligence process with counterparties and others assisting with the Transaction and transferred to a successor or affiliate as part of that Transaction along with other assets.
• Legal Requirements: If required to do so by law or in the good faith belief that such action is necessary to (i) comply with a court order, regulatory request or other legal obligation, including to meet national security or law enforcement requirements, (ii) protect and defend our rights or property, (iii) prevent fraud, (iv) act in urgent circumstances to protect the personal safety of users of the Services, or the public, or (v) protect against legal liability
• Enforcing our Rights: We may disclose your information as necessary to enforce our rights arising from any contracts entered into between you and us.
• Necessary for Purpose: We may disclose your information as necessary to fulfill the purpose for which you provided it.
• With Your Consent: We may disclose your information with your consent.
• Other purposes: We may disclose your information for any other purpose disclosed by us and accepted by you when you provide the information.

6. Where, How, and How Long We Store Your Information

Information collected through the Services is stored in a few different ways. The Personal Data that we collect, if any, via the Services is stored securely using third-party vendors who implement industry standard security measures. By using the Services, you authorize us to receive, process, transfer, and store your information in and to the United States as applicable.

We keep your information only for the length of time necessary to fulfill the purposes for which the information was collected. If you contact us via email or contact form we will keep your information for a period of 18 months. Information stored in cookies remains stored for periods ranging from the duration of the session to 18 months.

7. Data Security

We have implemented measures designed to secure your Personal Data from accidental loss and from unauthorized access, use, alteration, and disclosure by partnering with third parties who use industry-standard security measures to protect your information. These measures include strict access control policies, employee training, data encryption in transit via HTTPS, and the use of secure third-party storage vendors.

Unfortunately, the transmission of information via the internet and mobile platforms is not completely secure. Although we do our best to protect your Personal Data, we cannot guarantee the security of your Personal Data transmitted through our Services. Any transmission of Personal Data is at your own risk. We are not responsible for circumvention of any privacy settings or security measures we provide.

8. Your Rights and Choices

In certain circumstances, providing Personal Data is optional. However, if you choose not to provide Personal Data that is needed to use some features of our Services, you may be unable to use those features.

We strive to provide you with choices regarding the Personal Data you provide to us. This section describes mechanisms we provide for you to control certain uses and disclosures of your information.

• Disabling Cookies: You can limit cookie collection by disabling cookies in your browser settings. Please note that if you limit the ability of websites to set cookies, you may be unable to access certain parts of the Services, and you may not be able to benefit from the full functionality of the Services.
  • If you access the Services on your mobile device, you may not be able to control tracking technologies through the settings.
• Updating or correcting your information: Please contact us at the email address above if you need to change or correct your Personal Data.
• Deleting Your Personal Data: We provide all of our data subjects with the Right to be Forgotten (also known as the Right to the Deletion of your Personal Data), whether or not you reside or are a citizen of the European Union or the United Kingdom. Please email us at the address above if you would like us to delete your Personal Data.

Please note, however, that the Right to be Forgotten is not an absolute right. The Right to be Forgotten only applies to the following types of Personal Data that are held by us at the time of the request:

• Personal Data that was processed on the basis of consent,
• Personal Data that was processed on the basis of legitimate interests,
• Personal Data processed on a basis other than consent or legitimate interests that is no longer required for the purpose for which it was originally collected or processed,
• Personal Data that was processed unlawfully,
• Personal Data that must be deleted in order to comply with a legal obligation, or
• Personal Data of a child.

• Third parties: We do not control third parties' collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way.

For more information about the third parties that collect data through the Services, see the "Third-Party Information Collection" section above to understand which third parties have access to your Personal Data through the Services. You can consult their privacy policies to see if they offer additional options for limiting collection.

Data Rights of European Residents: The laws of the United Kingdom and the European Economic Area and other territories provide their residents with certain data protection rights. If you are a resident of the United Kingdom or the European Economic Area, these are your rights:

• The right to access - You have the right to request that the Company provide you with copies of your personal data. We may charge you a small fee for this service.
• The right to rectification - You have the right to request that the Company correct any information you believe is inaccurate. You also have the right to request that the Company complete information you believe is incomplete.
• The right to be forgotten - You have the right to request that the Company erase certain types of personal data (see Deleting Your Personal Data above).
• The right to restrict processing - You have the right to request that the Company restrict the processing of your personal data, under certain conditions.
• The right to object to processing - You have the right to object to the Company's processing of your personal data, under certain conditions.
• The right to data portability - You have the right to request that the Company transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at privacy@playmath.org.

9. Changes to the Privacy Policy

The Services and our business may change from time to time. As a result, we may change this Privacy Policy at any time. When we do, we will post an updated version on this page, unless another type of notice is required by the applicable law. By continuing to use our Services or providing us with Personal Data after we have posted an updated Privacy Policy, or notified you by other means if applicable, you consent to the revised Privacy Policy and practices described in it.

10. Contact Us

If you have any questions about our Privacy Policy or information practices, please feel free to contact us at our designated request address: privacy@playmath.org