Privacy

The short version

• Your students' data belongs to you. We store it only so you can get it back on another device. We never sell it, share it, or use it for anything else.
• No account, nothing leaves your browser. "Try without an account" keeps everything in this browser's storage. We cannot see it.
• With an account, we store your email, a hash of your password, and your tracker (class names, student names, scores, notes, flags, settings) on Cloudflare's D1 database, in the Asia-Pacific region.
• No third-party analytics, no ad tracking, no cookies except one session cookie that keeps you signed in.
• You can export or delete everything yourself, at any time, from the account menu. Deleting your account removes the lot immediately.

What we store, exactly

Without an account: your tracker lives in your browser (IndexedDB, or localStorage on older browsers). It is never sent to us. Clearing your browser's site data deletes it, so keep a JSON backup from Settings.

With an account:

• Your email address, used to sign you in and to send a password-reset link when you ask for one.
• A salted PBKDF2-SHA256 hash of your password (210,000 iterations). We cannot read your password.
• Your whole tracker as one JSON document, with a revision number and a time stamp, so that your devices can stay in step.
• Session records (a hash of your sign-in token, when it was created and last used; sessions expire after 30 days) and a short-lived counter used to slow down repeated wrong passwords.

Student names, scores and your notes are personal data about children. Treat notes the way you would treat a mark book: write what you would be comfortable showing a parent or a colleague.

Where it lives and who can see it

Accounts and trackers are stored in a Cloudflare D1 database (SQLite) belonging to Versed, hosted in Cloudflare's Asia-Pacific region. Traffic between your browser and the server is encrypted (HTTPS). Cloudflare encrypts its storage at rest as part of its infrastructure, but we do not add our own layer of encryption on top, so the tracker is readable by anyone with administrative access to that database — in practice, the one person who runs Versed, and Cloudflare as the hosting provider under its own policies. We look at a teacher's data only to fix a problem they have asked us about.

The fonts on this site are loaded from Google Fonts, which means Google receives your IP address when the page loads. That is the only third-party request the app makes. The small "Ad" line at the bottom is a static credit and does not track you.

What we never do

• Sell, rent or share your data, or your students' data, with anyone.
• Use student data to train models, build profiles, or send marketing.
• Run analytics scripts, tracking pixels or advertising trackers.
• Read your tracker for any reason other than a support request from you.

Your controls

• Export: account menu → Export my data downloads everything we hold about you as JSON. Settings → Export JSON does the same for the local copy.
• Delete: account menu → Delete account removes your account, sessions and tracker from the server straight away. There is no soft-delete or backup we keep on purpose; Cloudflare's own point-in-time backups age out within 30 days.
• Sign out clears the local copy from that browser (it stays on the server for your next sign-in).
• Ask us: if you would rather we do it, email [email protected] from the address on the account and we will delete it, or send you a copy, within a few days.

Children

Versed Teach is for teachers, not for students. Do not create an account for a child. Students' names and marks are entered by their teacher, who remains responsible for them under their school's policies; if a parent or school asks you to remove a student's data, delete the student and it is gone from the next sync onwards.

Changes

If this page changes in a way that matters, the date at the top moves and we will say what changed here. Versed Teach is run by Versed, Singapore. Questions: [email protected].

Back to Versed Teach