Privacy Policy

Scope and controller

This Privacy Policy applies to Science Studio at classroomlab.online. The data controller is Jia Zhenghao, an individual operator based in Zhuhai, Guangdong, China. Privacy requests can be sent to privacy@classroomlab.online. A data protection officer has not been appointed because our current processing does not require one.

This policy covers visitors, teacher account holders, and purchasers. Science Studio is designed as a teacher-led classroom tool and does not require student accounts.

Information we collect

Account information

When you request a one-time sign-in link, we collect your email address and authentication identifiers needed to create and maintain your account. We do not store a Science Studio password.

Order and access information

When you start or complete checkout, we store order identifiers, product and price information, payment status, transaction references, account entitlement, and the timestamps needed to deliver and verify access.

Communications

If you email us, we receive your email address and the information contained in your message and attachments.

Technical and security data

Our hosting, authentication, and payment providers may process limited technical information such as IP address, browser and device details, request time, referral page, error records, and security events. We use this information to deliver the service, diagnose failures, and prevent abuse.

How we use information

We use personal information only as needed to:

• send secure sign-in links and maintain authenticated sessions;
• create orders, confirm payment, grant or revoke paid access, and prevent duplicate fulfillment;
• answer support, privacy, billing, and dispute requests;
• maintain reliability, investigate errors or abuse, and protect the service; and
• meet accounting, tax, payment, fraud-prevention, and legal obligations.

Depending on your location, these uses rely on performance of our contract with you, our legitimate interests in operating and securing the service, compliance with law, or your consent where law requires it.

Cookies and similar technologies

Science Studio uses strictly necessary cookies and browser storage to maintain secure sign-in sessions, protect account routes, remember the state needed to complete authentication, and return you to the correct page after checkout. These technologies are required for the account and payment features to work.

We do not currently use advertising cookies, marketing pixels, or a separate analytics service. You can block necessary cookies in your browser, but sign-in and paid access will not work correctly. If we add optional analytics or marketing technologies later, we will update this policy and provide any choices required by law before using them.

Service providers and disclosure

We disclose information only where needed to operate Science Studio or comply with law. Current service categories include:

• Supabase for account authentication, database storage, and related service infrastructure;
• Vercel for website hosting, delivery, and operational request logs;
• Waffo Pancake for checkout, payment processing, transaction status, refunds, and payment-fraud controls;
• the email delivery provider configured for Supabase authentication; and
• Cloudflare Email Routing for forwarding messages sent to our public support addresses.

Providers process information under their own terms and privacy notices. We may also disclose information when reasonably required by law, court order, payment dispute, fraud investigation, or to protect users and the service. We do not sell personal information.

Payment data

Waffo Pancake collects and processes the payment details you enter at checkout. Science Studio does not receive or store your full card number, card verification code, or equivalent complete payment credential.

We receive limited payment results and references, such as whether an order was completed, refunded, canceled, or failed. We use signed payment notifications to connect paid access to your Science Studio account.

International processing

Science Studio serves users internationally. The website and primary service data are hosted and processed mainly in the United States through our providers. The operator is based in China and may access account, order, or support information from China when necessary to operate the service and respond to users.

Your information may therefore be processed in countries whose privacy laws differ from those where you live. Where applicable law requires a transfer mechanism or additional safeguards, we will use the mechanism made available by our providers or otherwise required by law.

Retention and deletion

We keep active account and entitlement information while your account remains open and for as long as reasonably needed to provide the service. Support messages are kept only as long as needed to resolve the request and maintain necessary business records.

If you request account deletion, we will delete or de-identify the active account, profile, and service data under our control within a reasonable period. We may retain limited order, transaction, tax, accounting, fraud-prevention, security, or dispute records when required or permitted by law. Backups and provider logs may expire on their normal protected retention cycles.

Your privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. You may also have the right to complain to a local privacy authority.

Send requests to privacy@classroomlab.online from the email connected to your account. We may ask for reasonable verification before disclosing or deleting information. Account deletion ends access attached to that account and does not itself create a refund right; see our Refund Policy.

Children

Science Studio is intended for teachers and users aged 13 or older. We do not knowingly collect personal information directly from children under 13 and students do not need accounts to view a teacher-led classroom presentation.

If you believe a child under 13 has created an account or sent us personal information, contact privacy@classroomlab.online so we can investigate and delete it where appropriate.

Security

We use reasonable technical and organizational measures appropriate to a small online service, including email-based authentication, server-side access checks, and signed payment-event verification. No internet service can guarantee absolute security.

If you believe your account or information has been compromised, contact support@classroomlab.online.

Changes and contact

We may update this policy when our service, providers, or legal obligations change. We will post the revised policy here and update the date at the top.