Privacy policy

Last updated 21 October 2026

Tinker Lab is a set of interactive science labs used by students, teachers, parents and schools. We collect only what the labs need to work, we never show ads, and we never sell anyone's data.

Who we are

Tinker Lab is run by to be added, based in to be added. If you have a question about your data, email to be added.

What we collect

• Account details: your name, email address, whether you are a student or a teacher, and the level you chose (Grades 7–9, Grades 10–12 or University). Your password is stored only in a scrambled (hashed) form that nobody can read.
• Progress: which challenges and missions you have completed, your current level, and when you last used the labs.
• School or class membership: if you joined with a code from your school or teacher, which school or class you belong to.
• Messages to us: if you use the contact form for a School & University plan, your name, work email, school or university, number of students and your message. We keep these for as long as we need them to answer you and manage your plan.
• Plan and payment status: which plan you have and when it renews or ends. Card payments are handled by our payment provider; we never see or store your card number.

Measurements you take inside a lab (results tables, graphs, notes) stay on your device unless you export them yourself.

How we use it

• To sign you in and save your progress, so you can carry on from any device.
• To show teachers the progress of the students in their own class or school.
• To give you the plan you have chosen or that your school has bought.
• To answer messages you send us.

We do not use student data for advertising or marketing, we do not build profiles of students, and we do not sell or rent data to anyone.

Who can see your data

• Teachers in your school or class can see your name, email, level, completed challenges and when you were last active. They cannot see your password.
• Service providers who run the site for us, under contracts that only let them use the data to provide their service: Cloudflare (hosts the website), Supabase (stores accounts and progress, in data centres in the United States) and our payment provider.
• Authorities, only if the law requires it.

Cookies and storage

We use your browser's storage to keep you signed in and to remember settings such as the theme, sound and your level. We use no advertising or tracking cookies. To count visits we may use Cloudflare Web Analytics, which does not use cookies and does not identify you.

Children and schools

Tinker Lab is made for students from about age 12. When a school or teacher gives students a code, the school decides to use Tinker Lab and is responsible for any consent its rules or local law require. If you are under 13, or under the age of digital consent where you live, please use Tinker Lab through your school or with a parent's or guardian's permission. A parent or guardian can ask us to see or delete their child's account at any time.

How long we keep data

We keep your account and progress while your account exists. If you ask us to delete your account, we delete it within 30 days. A school can ask us to remove all of its students' accounts when its plan ends.

Your rights

You can ask to see the data we hold about you, correct it, receive a copy, or have it deleted. Email to be added from the address on your account, and we will reply within 30 days. If you are in the EU or UK, you can also complain to your local data protection authority.

Security

All traffic is encrypted (HTTPS). Database rules make sure each person can only read their own data, and teachers only their own students. Passwords are hashed.

Changes to this policy

If we change this policy in a way that matters, we will update the date at the top and, where appropriate, tell account holders by email.