Privacy Policy

This Privacy Policy explains how LoomLab ("LoomLab," "we," "us," or "our") collects, uses, shares, and protects personal information when you use our website at loomlab.org and the services offered through it (the "Service").

LoomLab is a curated collection of hands-on science teaching activities created by authorized contributors ("Creators") and shared with educators ("Teachers") who hold accounts. This policy applies to both Creators and Teachers, and to anyone who visits the site.

1. Who We Are

The Service is currently operated by Peter Bohacek, an individual based in Minnesota, United States, who acts as the data controller responsible for your personal information.

If you have questions about this policy or your personal information, contact us at: peter.bohacek2@gmail.com.

2. Who Can Use the Service

The Service is intended for teachers, educators, and other adult education professionals. It is not directed to children, and it is not intended for anyone aged 16 or younger. We do not knowingly collect personal information from anyone under 16. If you believe a person under 16 has provided us with personal information, please contact us and we will take steps to delete it.

3. Information We Collect

We collect the following categories of personal information, depending on how you use the Service.

Creator accounts. Creators are users authorized by our administrators to create and edit content. When you hold a Creator account, we collect:

• Your name
• Your email address
• A profile photo of yourself (optional)
• Profile information you provide about your teaching experience
• The content you create or upload for use on the Service

Teacher accounts. Teachers are authenticated users who create accounts to access content. When you register as a Teacher, we collect:

• Your name
• Your email address
• Information you provide about your teaching, such as the subjects you teach and the age range of your students

Authentication data. If you sign in using Google, Google shares a limited set of profile information with us (such as your name and email address) to create and secure your account. We do not receive your Google password.

Usage data. We automatically collect information about how the Service is used — such as pages visited, activities and materials accessed, interactions with content, and general technical information like browser type and approximate location derived from your IP address. We use this to understand and improve the performance of our materials and website.

4. How We Use Your Information

We use personal information to:

• Create, operate, and secure your account
• Provide, maintain, and improve the Service and its content
• Display Creator profiles and the teaching activities they publish
• Understand how our materials and website are used, and measure and improve their performance
• Communicate with you about your account or the Service
• Maintain the safety and integrity of the Service and prevent misuse
• Comply with legal obligations

Legal bases (for users in the EU, UK, and similar jurisdictions). Where data protection law requires a legal basis, we rely on: performance of a contract (to provide the Service to you); our legitimate interests (to operate, secure, and improve the Service); your consent (where we ask for it, such as an optional profile photo); and compliance with legal obligations. You may withdraw consent at any time where processing is based on consent.

5. How We Share Your Information

We do not sell your personal information, and we do not use it for targeted advertising. We share information only as described below.

Publicly visible content. Creator profiles (including name, optional photo, and teaching-experience information) and the content Creators publish are visible to Teachers and other authenticated users of the Service. Please keep this in mind when deciding what to include in a Creator profile.

Service providers. We rely on trusted third parties to run the Service. They process information on our behalf and only as needed to provide their services to us:

• Vercel — website hosting and infrastructure, and first-party usage analytics.
• Supabase — database, authentication, and account management.
• Google — sign-in and authentication, where you choose to sign in with Google.

Legal and safety. We may disclose information if required by law, or where we believe in good faith that disclosure is necessary to comply with a legal obligation, protect our rights, or protect the safety of users or the public.

Business changes. If LoomLab transitions to a nonprofit entity or its operations are otherwise transferred, personal information may be transferred to the successor entity, which will continue to be bound by this policy or a successor policy with equivalent protections.

6. Cookies and Similar Technologies

We use only the cookies and similar technologies that are necessary for the Service to function. These include authentication and session cookies set by Supabase and Google to keep you signed in, and security-related cookies set by our host, Vercel. Because these are strictly necessary to provide the Service, they do not require a consent banner.

Our usage analytics (provided through Vercel) are designed to operate without tracking cookies. We do not currently use advertising cookies, cross-site tracking, or third-party advertising or analytics services such as Google Analytics. If this changes, we will update this policy and, where required, ask for your consent.

7. International Data Transfers

The Service is operated from the United States and is available to users worldwide. If you access the Service from outside the United States, your personal information will be transferred to and processed in the United States and in other countries where our service providers operate. These countries may have data protection laws that differ from those in your country. Where required, we take steps to ensure that such transfers are subject to appropriate safeguards.

8. Data Retention

We keep personal information for as long as your account is active or as needed to provide the Service. If you ask us to delete your account, we will delete or anonymize your personal information within a reasonable period, except where we are required to retain it to comply with legal obligations, resolve disputes, or enforce our agreements. Content published by Creators may be retained as part of the Service where appropriate, in a form that can be disassociated from your personal profile.

9. Your Rights and Choices

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Access — to confirm whether we process your information and to obtain a copy of it
• Correction — to correct inaccurate or incomplete information
• Deletion — to request that we delete your information
• Portability — to obtain a copy of information you provided in a usable format
• Objection or restriction — to object to or limit certain processing
• Withdrawal of consent — where processing is based on consent

To exercise any of these rights, contact us at peter.bohacek2@gmail.com. We will respond within the time required by applicable law. We will not discriminate against you for exercising your rights.

If you are in the EU or UK and believe we have not handled your information properly, you have the right to lodge a complaint with your local data protection authority. If you are a Minnesota resident, you may contact the Minnesota Attorney General's Office regarding your privacy rights.

10. How We Protect Your Information

We use reasonable administrative, technical, and physical measures to protect personal information against loss, misuse, and unauthorized access, including secure hosting and authentication through our service providers. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate or required, notify you through the Service or by email. Your continued use of the Service after an update means you accept the revised policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your personal information, please contact us at:

Peter Bohacek / LoomLab
peter.bohacek2@gmail.com