Data Privacy

What we collect, how we use it, and how your students can code and learn here without sharing any personal information. This policy covers every product Strive Math operates, including the Strive Math Learn platform and Trinket, the community-hosted, open-source coding editor we run after Trinket.io shut down.

Last updated: August 10, 2026

Who we are

Strive Math ("Strive", "we", "us") is a Singapore-based education technology company. We build the Strive Math Learn platform — worksheets, activities, lessons, and AI tutors — and we operate Trinket, an in-browser coding editor for Python, HTML, CSS, JavaScript, and p5.js. This policy explains what information we collect across both, how we use it, and the choices you have. If anything here is unclear, email hello@strivemath.com and we'll explain.

In short: we collect the minimum we need to run the service, we don't sell data, we don't show ads, and students can use both products without providing any personal information at all.

What we collect

Account information

• Teachers and individual users sign up with an email address and a password (Trinket also lets you add a username and display name).
• Students in a school organization can be given anonymous accounts consisting only of a randomly generated username and password — no name, email address, date of birth, or any other personal details (see Students and anonymous accounts below).
• Passwords are never stored in plain text; only a salted, hashed form is kept.

Content you create

We store the work you make: trinkets (code, text, and project names) and courses on Trinket; worksheets, activities, lessons, projects, and AI tutor conversations on Strive Math Learn. If you publish or share something, it's visible to the people you share it with or to anyone with the link. Don't put personal information into code or work you plan to share — and teachers should remind students of the same.

Organization and class data

Trinket and Strive Math Learn share the same underlying organization system. For school organizations we store the organization's name, its member list and roles, its classes, and which student accounts belong to which classes. This is visible only to members of that organization.

Technical data

• Logs. Like nearly every website, our servers record basic request information (IP address, browser type, pages requested, timestamps) for security, debugging, and abuse prevention. Logs are kept for a limited time and then deleted.
• Cookies. We use a session cookie to keep you signed in. Session data itself is stored on our servers, not in the cookie. Neither product uses marketing or advertising cookies.
• Analytics. We use Google Analytics and PostHog to understand how our products are used in aggregate — which pages are visited, which features are used, and where things break. We use these to improve the product, not to build advertising profiles, and you can opt out of session recording from your account settings.

How we use information

• To provide the service: run your code, save your work, keep you signed in, and let organizations manage their classes and students.
• To communicate with you: password resets, sign-in links, invitations, and replies to your support requests. We send these to teacher/adult account emails only — anonymous student accounts have no email.
• To keep the service safe: preventing abuse, debugging errors, and protecting accounts.
• To improve the product, using aggregate usage analytics.

We do not sell personal information, show advertising, or share data with third parties for their own marketing.

Students and anonymous accounts

Many schools can't sign students up for online tools with their real names or school email addresses. So we let teachers create anonymous student accounts instead: each student gets a randomly generated username and password that you hand out, and nothing about that account identifies the student to us.

Usernames look like lin482k — three letters from your organization's name, three digits, and a letter. Passwords are randomly generated too. Because you decide which student receives which login, you're the only one who can connect an account to a real person; that mapping stays with you and is never sent to us.

Creating them

1. Open Organization from Trinket's top menu, or Organization in the Strive Math CMS sidebar. Both take you to your organization's page, where you'll see your teachers, your classes, and all of your students in one place.
2. Choose Generate Logins, enter how many students you need, and optionally pick a class to enrol them all in.
3. Download the list of usernames and passwords as a spreadsheet, or copy it, and hand each student their login.

Passwords are shown to you once and are stored only in hashed form, so we can't show them to you again later. If a student forgets theirs, you can reset it from your dashboard at any time — for one student or for a whole class at once.

What's stored for an anonymous account

• The generated username and a hashed form of the password.
• Which classes in your organization the student belongs to.
• The work the student creates — their trinkets, worksheets, projects, and progress.

No name, no email address, no date of birth, and no school details are required, and none are collected unless a teacher chooses to add them. We don't knowingly collect personal information from children; student accounts are created and managed by their school, and we encourage schools to use anonymous logins for students under 13 (or the age your local law sets). If you believe a child has given us personal information directly, contact us and we'll delete it.

Managing your organization

Everything to do with your students lives on your organization's page, and only members of your organization can see it. From there you can:

• Invite teachers and staff by email, and give each one a role that controls what they can change. Teachers see the classes they're assigned to.
• Create classes and move students between them.
• Add students — generate anonymous logins in bulk, or create individual accounts if your school prefers to use names or emails.
• Reset passwords for a single student or for an entire class.
• Remove students from a class or from the organization when they leave.

Teacher and staff accounts do use an email address, because that's how invitations and sign-in links are sent. That applies to the adults managing the organization, not to students.

Who we share data with

We share data only with the service providers we need to run the service, and only so they can provide their service to us:

• Cloud hosting and databases — the servers and managed databases (including Supabase) where our products and your data run.
• Email delivery — providers that send password resets, invitations, and notifications on our behalf.
• Analytics — Google Analytics and PostHog, as described above.

Beyond that, we disclose information only if the law requires it, or to protect the safety and integrity of the service. Content you choose to publish or share is, of course, visible to whoever you shared it with.

International transfers

We're based in Singapore and use cloud providers that may process data in the United States and other countries. Wherever the data is processed, it's protected by the safeguards described in this policy.

Security

• All traffic to our sites is encrypted in transit (HTTPS).
• Passwords are stored salted and hashed, never in plain text.
• Organization data is visible only to that organization's members, with role-based access controls.
• Access to production systems is restricted to the small team that operates the service.

Data retention and deletion

We keep your account and content for as long as your account exists, so your work is there when you come back. Teachers can remove student accounts from their organization at any time. If you'd like an account and the work attached to it deleted entirely — yours or a student's — or you need a record of the deletion for your school, email us and we'll take care of it. Server logs and backups are kept for a limited period and then deleted on a rolling basis.

Your rights

You can ask us at any time to access, correct, export, or delete the personal information we hold about you. For student accounts managed by a school, we'll work through the school, since the school — not us — knows who each account belongs to. To exercise any of these rights, email hello@strivemath.com; we aim to respond within 24 hours.

Data protection agreements

If your school or district requires a signed data protection agreement before using Trinket or Strive Math Learn, we're happy to review and sign yours. Send it to hello@strivemath.com and we'll get it back to you.

Changes to this policy

If we make meaningful changes to this policy, we'll update this page and the date at the top. We won't reduce your protections without telling you.

Trinket also keeps a copy of this policy at trinket.strivemath.org/data-privacy, written for Trinket's coding-specific features — this page is the canonical version for anything about Strive Math as a whole.

Questions about any of this? Email hello@strivemath.com — we aim to respond within 24 hours. For our broader legal terms, see our Privacy Policy.