Privacy Policy
How Brightwire Code handles information, written for parents.
Draft — not legal advice. Last updated October 29, 2026.
Who we are
Brightwire Code is operated by Brightwire Labs, PO Box 1275, Twisp, WA 98856, USA. Contact: hello@brightwirelabs.dev.
Children’s privacy (COPPA)
Brightwire Code is designed for children, so we collect as little as possible. Children never create their own accounts and are never asked for an email, full name, photo, or location. The free lessons can be used without any account; progress then stays only in your browser.
Parent accounts
Only adults (18+) can create an account. We store:
- You: your email address and a securely hashed password (we never store your password itself).
- Each child you add: a nickname you choose and an age group. No child email, birthday or photo.
- Learning progress: which lessons and projects each child completed, when, and the last activity time.
- Billing: payments are processed by Stripe. We keep a record of each payment (date, amount, week, child nickname) but never your card number.
- Security: a login cookie (HttpOnly, used only to keep you signed in) and short-lived rate-limit counters to block password guessing.
By adding a child, you confirm you are their parent or legal guardian and consent to us storing the information above so they can use the lessons.
Schools and teachers
Teachers create accounts for themselves only. Students are added by first name or nickname and sign in with a class code and a picture password; we do not collect student email addresses. For classroom use, the school provides consent on behalf of parents as permitted under COPPA, and the teacher confirms the school has authorized it. School requests through our quote form (name, school, work email, message) are stored only to reply to you.
What we don’t do
- No advertising, tracking pixels, analytics cookies, or selling or sharing of data.
- No behavioral profiling of children.
- Lesson videos are hosted on our own site; no third-party video players.
Who processes data for us
Cloudflare (hosting and database) and Stripe (payments). Each processes data only to provide its service to us.
We email parents only about their account and class access (for example, a payment receipt or a new week). No marketing email without a separate opt-in.
Keeping and deleting data
We keep account data while your account is open. You can delete everything at any time with the Delete my account button on your dashboard: this permanently removes your account, your children’s profiles and their progress (or, for teachers, your classes, roster and student progress) and cancels any auto-renew. Payment records are kept without names for accounting and tax purposes as required by law. You can also ask us to review, correct or delete your child’s information, or to stop collecting it, by emailing hello@brightwirelabs.dev; we’ll respond within 30 days.
Security
Passwords are hashed with PBKDF2, connections use HTTPS, and login attempts are rate-limited.
Changes
If we change this policy in a way that affects children’s information, we will notify account holders by email before the change takes effect.
Contact
Brightwire Labs, PO Box 1275, Twisp, WA 98856 · hello@brightwirelabs.dev