Connected Classroom · Privacy
Privacy Policy
What this site collects, what the tools collect, and what happens if you write to me. Short, because there is not much to describe.
Last updated 30 July 2026
Who This Is
Connected Classroom is the independent practice of Timothy Cook, a practicing international classroom teacher. There is no company, no staff, and no investors. Where this policy says "I," that is literal.
This policy covers connectedclassroom.org and the four tools of the Intelligence Suite: UDL Architect, Wonder Web, CrossLink, and REAL Connections.
This Website
There is nothing on this site that asks for your information. No contact forms, no newsletter signup, no downloads behind an email gate, no account, no shop, and no advertising of any kind. Nothing here is trying to identify you.
The site runs on Squarespace, which collects standard visitor analytics on my behalf: page views, referring site, device type, how long a visit lasted, and approximate location. That location is worked out from your IP address, which Squarespace processes to tell me a visit came from, say, France or Australia. Visiting also sets cookies in your browser. I want to describe that accurately rather than claim the site does no tracking at all.
What reaches me is aggregate: which pages people read, roughly where they came from, how they found the site. I am never shown your IP address itself, and I make no attempt to identify individual visitors. I use it to know whether the writing is reaching anyone, which is the whole of my interest in it.
Squarespace is the processor for that data, and its own privacy policy governs what it does with it. You can block or clear these cookies in your browser at any time, and the site works normally without them.
Search Console data, meaning which queries brought people to the site, is provided by Google in aggregate and never identifies individuals.
The Tools
The Intelligence Suite is built the other way around: the most secure way to handle information is not to collect it.
- No accounts. No login, no password, no name, no email, no school.
- Nothing you type is stored. Your objective, standard, or question is processed in real time to produce the output and then it is gone. It is not written to any storage I control.
- Nothing is used to train a model. Not by me, and not through the API arrangement I use.
- No student data, ever. The tools ask about a lesson, never about a child. Grade band and subject are context, not records.
- One anonymous count. Which tool ran, at what grade band, in what subject. Nothing that identifies you and nothing you wrote.
- Session state stays with you. If a tool remembers your inputs when you return, that is saved in your own browser and clears itself after 24 hours. It never reaches a server.
The full architecture, including every service that touches a request, is documented on the Data and Governance page.
If You Write To Me
If you send me an email, I have your email address and whatever you chose to put in the message. That is the only way I come to hold anyone's contact details.
I use it to reply to you. I do not add you to a list, because there is no list. I do not share it, sell it, or use it for anything else. Correspondence stays in my inbox, and you can ask me to delete a thread at any time.
Third Parties
Four services are involved in running this, and no more:
- Squarespace hosts the website and provides the analytics described above.
- GitHub Pages serves the tools' interface as a static page. Like any web server, it records the request itself. It never receives what you type into a tool.
- Google Apps Script runs the backend that holds the credentials and instructions and passes your input to the model.
- Google's Gemini API generates the output and returns it.
There is no analytics layer inside the tools, no advertising network anywhere, and no data broker, marketing platform, or third-party processor beyond those four.
Children
These tools are made for educators and are not designed for children to use on their own. Nothing here asks a child for information, and I do not knowingly collect anything from anyone under 13.
Because no student information is requested, transmitted, or stored, there are no education records held here for a school to manage. Your district remains the sole custodian of its student records.
This describes how the tools work. It is not a legal certification. Whether these tools fit your obligations under FERPA, COPPA, GDPR, or your local regulations is a determination your district has to make, and you should confirm your specific obligations with your district. The practical rule I teach and follow: never enter a student's name or identifying details into any general AI tool, including these.
Your Rights
Depending on where you live, you may have rights to access, correct, delete, or object to the processing of your personal information, and to withdraw consent for cookies.
In practice these are simple here, because there is so little to exercise them against. If you have written to me, you can ask what I hold, which is our correspondence, and ask me to delete it. For site analytics, including the IP-derived location described above, you can clear or block cookies in your browser, and Squarespace's own controls and privacy policy apply to the data it processes as my provider. For the tools, there is nothing stored to request or delete. They were built that way so there would not be.
You can also ask for a human review of any AI-generated output you believe is biased or wrong. That review is me, reading it.
To exercise any of this, or to ask a question about it, write to ethics@connectedclassroom.org.
Security
Traffic to this site and to the tools is encrypted in transit. API credentials and the instructions behind the tools sit on the server side and are never exposed in your browser.
There is no user database, so there is no user database to breach. Platform-level security and patching are handled by Squarespace, Google, and GitHub rather than depending on my availability.
I am one person, not a security team. If something goes wrong that affects anyone's information, I will say so publicly rather than quietly. If you find a problem, write to ethics@connectedclassroom.org. I read every report myself.
Changes
This page is dated at the top and updated when the practice changes, not on a schedule. There is no mailing list to notify, so this page is the notice. If what is collected ever changes, this page changes first.
Related: the Data and Governance page for the full technical detail, the AI Ethics Disclosure for how the tools are built, and the Terms and Conditions for what you may do with them.