Privacy Policy
Last updated: September 26, 2026
Sleedu Arena ("the Service") is a classroom game and score-tracking application for K-12 teachers, operated by Win Elements LLC ("WinElements," "we," "us"). This policy explains what information the Service handles, why, and the choices teachers and schools have. If anything is unclear, contact us at hello@winelements.com.
The short version
- Students are identified by codes, not names. By default Arena stores no student names, email addresses, or school ID numbers.
- Teachers own their data. We process it only to provide the Service.
- We do not sell data and do not show ads. We do not use student information for marketing.
- Students never see advertising and are never contacted by us.
- Data is encrypted in transit and at rest, separated per teacher, and deleted when a teacher clears a period or closes their account.
Information we collect
Teacher accounts
Email address, a password (stored only as a secure hash; we cannot see it), an optional display name shown on content the teacher chooses to share, and, if the teacher turns on two-step sign-in, an authenticator secret. For paid plans, Stripe holds payment details; we store only a customer reference, plan, and renewal date, never card numbers.
Student codes and scores
Teachers create numbered codes for their class periods (for example "3-07"), each with a PIN (stored hashed) and a randomly generated nickname for leaderboards. Arena records each student's game attempts: score, time, the answers given to each question, and progress while playing. Arena does not ask for or store student names, email addresses, school ID numbers, birthdates, photos, or contact details. Teachers keep the list matching codes to students on their own roster, outside the Service.
Teachers can edit nicknames. We advise teachers to keep nicknames non-identifying; a teacher's school policy governs what they enter.
Optional Google sign-in for students
For schools that have signed a student data privacy agreement with us and are approved by us, a teacher may allow students to sign in with their school Google account instead of a PIN. In that case we store the Google account identifier and school email address of each student who links their account, restricted to the school's domain. Turning the option off, unlinking a student, or clearing the period deletes these. Google sign-in is off unless a school has been approved.
Games and questions
Quiz questions, uploaded game files, images attached to questions, units, and settings that teachers create. Teachers may choose to share games or questions with other Arena teachers; shared content shows the teacher's display name if they set one, otherwise "An Arena teacher."
AI question generation
When a teacher uses the "Generate questions with AI" feature, the text they paste (notes, a reading, or a topic) is sent to Anthropic's Claude API to draft questions and is not retained by us. Teachers are instructed not to paste student names or student work. No student data is ever sent to the AI.
Collected automatically
A sign-in token kept in the browser so teachers and students stay signed in; no advertising or cross-site tracking cookies and no third-party analytics. Standard server logs (IP address, browser type, timestamps) kept by our hosting providers for security and reliability.
How we use information
Solely to operate the Service: signing in teachers and students, running games, recording scores, showing leaderboards and gradebooks, sending account emails (confirmation, password reset, billing receipts), processing payments, enforcing security, and providing support. We do not use teacher or student data to train artificial intelligence models, build advertising profiles, or for any purpose unrelated to the Service.
Student privacy (FERPA, COPPA, SOPIPA)
Because students are represented by teacher-assigned codes, Arena ordinarily holds no personally identifiable student information. Scores linked to a code are controlled by the teacher and their school. To the extent any records constitute education records under FERPA, we act as a "school official" with a legitimate educational interest, processing them only at the school's direction and never re-disclosing them except as the school instructs or the law requires.
Students use the Service only through codes issued by their teacher. We collect no personal information from students; where a school enables Google sign-in under an agreement with us, the school provides consent for that collection under the school-consent provisions of COPPA. We comply with California's Student Online Personal Information Protection Act (SOPIPA): we do not use student information for targeted advertising, do not build student profiles for non-educational purposes, and do not sell student information.
Parents and students may direct questions, corrections, or deletion requests to the teacher or school, who can view, correct, or delete records directly in the Service.
Who can see what
- A teacher sees only their own periods, codes, games, and scores. Each teacher's data is isolated from every other teacher's by rules enforced in the database.
- Students see their own scores and their class's leaderboard (nicknames and scores only).
- Teachers who share games or questions to the Arena library make that content, and their display name if set, visible to other Arena teachers.
- WinElements administrators can view account and usage information (teacher email, plan, activity counts) to operate the Service, and access other data only when necessary for support, security, or legal compliance. Administrator access requires two-step sign-in.
- We never sell, rent, or share data with advertisers or data brokers.
Service providers (subprocessors)
- Supabase — database, authentication, and application functions (United States, US West).
- Amazon Web Services — hosting of the web pages and storage/delivery of game files and question images (United States, US West), delivered through Amazon CloudFront.
- Postmark — delivery of account emails to teachers.
- Stripe — payment processing for paid plans (teachers only).
- Anthropic — AI question drafting from teacher-provided text (no student data).
- Google — optional student sign-in for approved schools, and teacher use of authenticator apps.
These providers process data on our behalf under their own security and privacy commitments and do not use it for their own purposes.
Security
All traffic is encrypted with HTTPS/TLS. Data is encrypted at rest. Passwords and student PINs are stored as bcrypt hashes. Student PIN sign-in locks temporarily after repeated failures. Two-step sign-in (authenticator app) is available to all teachers and required for administrators. Uploaded games run in an isolated frame on a separate domain so they cannot access teacher or student sessions. Access to every record is enforced per teacher in the database. Backups are automatic.
Data retention and deletion
Data is retained while a teacher uses the Service. Teachers manage their own records: they can remove a student code, clear a game's scores, delete a period, or clear all periods and scores for a new school year, at any time, from the Service. Deleting a period permanently removes its codes, scores, and any Google links. Games and question banks belong to the teacher and remain until the teacher deletes them.
On a teacher's request we delete their account and all associated data within 30 days, after which it ages out of backups on the backup retention schedule. Schools may make deletion requests on behalf of their teachers. We honor deletion requests for student records as required by applicable law.
Changes to this policy
If we make material changes, we will notify teachers by email and update the date above. Continued use of the Service after changes take effect constitutes acceptance.
Contact
Win Elements LLC — hello@winelements.com — winelements.com
If you are unable to contact us, you may contact our Registered Agent:
California Registered Agent Inc
1401 21st ST STE R, Sacramento, CA 95811
Tel: (530) 232-5985
californiaregisteredagents.net · agent@californiaregisteredagents.net