Privacy Policy

The short version

• Students do not create accounts. Accounts are for teachers only.
• We never sell personal information — teacher or student — and we never will.
• We do not serve advertising and do not use anyone’s information for targeted or behavioral advertising.
• We do not build student profiles. Activity data is used to run the activity in progress, and nothing else.
• Students have no access to an open-ended AI chat. AI is used by the teacher to author lesson content.

Who we are

Magic Fountain (“we,” “us”) operates magicfountaingames.com, a tool that K-12 teachers use to build curriculum-aligned classroom review activities. This policy explains what information we collect, why, and what we do with it. It applies to our website and the activities run through it.

Information about teachers

Account information

When a teacher creates an account, we collect an email address and name through our authentication provider. We use this to sign you in, associate the activities you create with your account, and contact you about your account or the service.

Content you create

We store the activities you build — the topic you entered, the activity type, and the generated content — so that you can reuse and share them.

Activities are shared publicly by default

Please read this one carefully. When you save an activity, it is currently added to our public community library by default, listed together with the name on your account. Other teachers can view and copy it. If you do not want an activity shared, do not save it publicly — and do not include anything private, confidential, or identifying in the topic or lesson text you enter.

Usage information

We keep basic counters tied to your account so we can enforce fair-use limits, and standard server logs including IP address for security and abuse prevention.

Information about students

Our design goal is to collect as little as possible about students, and nothing that identifies them.

No student accounts

Students do not register, do not provide an email address, and do not create a password or profile. A student joins their teacher’s activity using a short class code.

What a student provides

A display nickname, used to show their score on the classroom scoreboard during the activity. We instruct teachers to direct students to use a first name only or a non-identifying nickname. Nothing else is requested from students.

Because a nickname is typed freely by the student, we cannot guarantee that a student will not enter their full name. Teachers are responsible for directing students appropriately.

Answers and in-activity input

During an activity, we process the answer a student selects, and in open-ended activity types, the short text action a student types. This is used to run the activity — to score it and to produce the next step — and is associated only with the nickname, not with any identified person.

What we do not do

• We do not sell student information.
• We do not use student information for advertising of any kind.
• We do not build advertising or behavioral profiles of students.
• We do not retain student activity data to follow a student over time.
• We do not knowingly collect a student’s email address, home address, phone number, photograph, or precise location.

How we use AI, and what is sent

Activity content is generated using third-party AI services. It matters to us that schools understand exactly how this works.

AI is used on the teacher’s side, to author lesson content. Students do not have access to an open-ended AI chat interface.

When a teacher builds an activity, the topic, grade level, and any lesson text they enter are sent to our AI provider to produce the activity. In open-ended activity types, the short action a student types is also sent in order to generate the next step of the activity.

Teachers: do not paste student names, grades, IEP information, or any other student record into the lesson text field. That text is transmitted to our AI provider, and it does not need student information to work.

Generated content is constrained by an enforced content policy written for K-12 classrooms. Topic requests are screened before generation, and the teacher reviews the activity before using it with a class.

Service providers

We rely on a small number of established providers to operate the service. They process information only to provide their service to us:

• Hosting and content delivery — serving the website.
• Authentication — managing teacher sign-in.
• Database and temporary activity storage — storing saved activities and live activity state.
• AI providers — generating activity content and illustrations.

We will provide the current list of named subprocessors to any district on request. We do not permit these providers to sell information or use it for their own advertising.

How long we keep information

Teacher account information and saved activities are kept while the account is active. If you delete an activity, it is removed from our database.

Live activity state — nicknames and scores — is temporary and expires automatically after the activity. Fair-use counters expire on a rolling basis. Server logs are retained for a limited period for security purposes.

Children’s privacy (COPPA)

Magic Fountain is designed so that students, including children under 13, do not create accounts and are not asked for personal information. Students participate through a class code provided by their teacher.

Where a school uses our service for an educational purpose, we act on the school’s behalf. If you believe a child has provided us personal information, contact us and we will delete it promptly.

Schools, FERPA, and state student-privacy laws

When a school or district uses Magic Fountain, we process information under the school’s direction for an educational purpose. We do not use it for any other purpose, and the school retains control of its data.

We will sign a district data privacy agreement, and can accommodate state-specific requirements including a New York Education Law §2-d rider. Contact us and we will complete your district’s standard form. See For Schools & IT for technical and network details.

Your choices and rights

Teachers can review and delete the activities they have created at any time from their library. To request deletion of your account and associated data, or a copy of the information we hold about you, contact us at the address below.

Schools may request deletion of data associated with their students at any time, and we will comply promptly.

Security

We use industry-standard measures to protect information, including encryption in transit, access controls limiting who can reach stored data, and established infrastructure providers. No online service can promise perfect security, but we take this seriously and will notify affected users and schools promptly if a breach affects their information.

Changes to this policy

If we make material changes, we will update the date at the top of this page and, where the change is significant, notify account holders directly.

Contact us

Questions about privacy, deletion requests, or district agreements: privacy@magicfountaingames.com. Schools and IT departments can also reach us at schools@magicfountaingames.com.