Student privacy: a summary for schools
Version 1 · 3 October 2026 · studyleague.org, grades 2–8
Study League is practice for Texas UIL A+ Academics, run by Andaro Studio. We have no names, emails or birthdates for students: each student has a site-issued username. The full details are on our privacy page; high school students on Study League Varsity are covered there.
What a student account holds
| Entered | School grade, a password, and the six-digit team code from the coach |
|---|---|
| Issued by the site | The username |
| Stored as they practice | Progress, practice-test scores and dated answers, saved Chess positions, teams and team points, the last day active |
| Never collected | Name, email address, date of birth, home address, phone number, photos, location |
What coaches see
Coaches at the student’s school see the roster by username, with grade, progress, scores, dated answers and team points. When a coach sets a student’s password, or the site makes one, an encrypted copy is kept so the school’s coaches can give it back; each look-up is recorded in the school’s log. A password the student chose is never kept that way. Teammates see each other’s usernames and points, and a student can hide theirs.
What we don’t do
No ads or targeted advertising, no selling or renting student information, no profiles beyond the practice itself, no tracking cookies or third-party analytics, no public profiles, no chat between users. A school may authorize its students’ use, and we use student information only to run the practice for the student and the school.
Who handles the data
Cloudflare hosts the site and its database and sends coaches’ emails; it keeps short-lived request logs, including network addresses. Anthropic: coach Help chat only. A coach’s questions go to Anthropic with nothing about students added, and chats are deleted after 90 days. Students can’t use the chat.
Security
Passwords are stored only as scrypt hashes. Kept copies are encrypted with a key held apart from the database. Browser sign-ins end after 12 hours without use; sign-in attempts are rate-limited; site staff actions on an account are logged. We will tell affected schools within 72 hours of confirming a breach, by email to their coaches and with a notice on the site.
Keeping and deleting
Anyone can delete their own account in Settings. A school or parent can ask us to delete a student’s account with just the username; we delete it within 30 days. To see what we hold, a coach at the student’s school confirms the request, or the person asking shows they can sign in to the account; we reply within 5 business days with a copy. Student accounts not used for 24 months are deleted, and the roster warns coaches 30 days ahead. Archived teams are removed after 30 days. Deleted data leaves the database’s restore history within 30 days.
The law
Study League is designed to follow Texas Education Code chapter 32, subchapter D; FERPA’s school-official model, with the school in control of its students’ records; and COPPA’s school-authorization model.
Data privacy agreements
We sign the standard Texas Student Data Privacy Agreement (TX-NDPA) unmodified, at no cost. Email andarostudio@hey.com from your district address; we reply within 5 business days. Andaro Studio, studyleague.org/student-privacy.