Privacy Policy

Information we collect and why

• Accounts: name, email, account identifiers and a password hash for email sign-in. We use these to verify you, secure access and provide support. Google or Facebook sign-in supplies the identity, basic profile and email that you authorize. We do not receive your social account password or permission to post to your feed.
• Profiles and community: creator handle, display name, profile images, bio, links, posts, comments, likes, follows and activity. These support your public profile, discussions, member directory and rankings.
• Learning and games: course and lesson progress, completed activities, XP, character choices, published game files and images, and game views and plays. These support access, progress, game delivery and creator statistics. A browser identifier or account identifier helps limit repeat view counts.
• Billing and referrals: Stripe customer and transaction identifiers, membership status, payment amounts, referral attribution, commissions and payout records. Stripe handles card entry; we do not store full card numbers. These records support access, renewals, accounting and the affiliate program.
• Technical and support records: your requests and correspondence, device/browser details and hosting/security logs, which may include IP addresses. The school uses a pseudonymized IP reference for sign-in rate limits. Hosting providers process connection information to deliver and protect the service.

What other people can see

Your creator profile, published games, contributions and activity statistics can be public and indexed by search engines. A country flag may be estimated from your connection; you can hide or refresh it in your account. Your account email and billing details are not shown on your public profile.

School presence shows your name, character and room position to other players. Live Chat connects the Community page and school rooms, so messages can be read by signed-in members across those surfaces. Chat is shown for up to 24 hours; expired records are removed during subsequent activity. Discussions and comments remain until removed.

The optional world map is separate from your country flag. Sharing a city publishes your profile name and approximate city location to map visitors. It is off until you choose to share. You can change the city or remove yourself through the map. It does not request device GPS or track your movements. Public copies, downloads and search results may remain outside our control after removal.

Who receives information

We use Vercel for hosting and file delivery, Supabase for database and social authentication services, Stripe for payments, Resend for verification and password reset emails, and GoHighLevel for private account contact management. Providers receive the information needed for their role.

After verification, account contact records may include name, email, signup method and signup website in GoHighLevel. Passwords, social sign-in tokens, learning activity, payment details and map location are not included in that signup contact sync. Creating an account does not by itself subscribe you to marketing email.

Google or Meta receives information when you choose their sign-in service. Third-party video players and externally hosted games receive connection information when loaded. Their own policies govern their services. Affiliate dashboards show referral and commission records, not referred customers’ email addresses or card details.

We do not sell account contact information. We may disclose information to comply with law, protect rights, investigate abuse, or support a business transfer subject to applicable privacy protections and notice requirements.

Your choices and privacy rights

You can edit profile details, hide your country flag, remove your map location, sign out, and manage billing in Account. Use the unsubscribe option in marketing email or contact us to withdraw marketing consent. Necessary service and billing messages are separate.

Email contact@tengmedia.com to request access, correction, a copy, deletion, or withdrawal of consent. Depending on the law that applies, you may also have rights to object, restrict processing, or receive portable data. We verify requests proportionately and respond within the applicable legal deadline. See Data Deletion for the process and retention exceptions. You may complain to the Office of the Privacy Commissioner of Canada or your applicable local privacy regulator.

Where a legal basis is required, we process information to provide the services you request, meet legal obligations, protect and administer the service where permitted, or act on your consent. Consent can be withdrawn for optional uses without changing the lawfulness of earlier processing.

Retention, security and international processing

Account, course and community information is generally kept while needed to provide your account and the related services. Unfinished email signups expire after 24 hours and are removed by scheduled cleanup, normally within five minutes of expiry. Password reset references expire after one hour. Chat has the shorter display period described above.

After a verified deletion request, we remove or de-identify associated data unless required for taxes, accounting, fraud prevention, disputes or another lawful purpose. Restricted backup copies and provider logs may persist until their normal expiry. We explain any applicable exception rather than promise immediate removal from every backup.

We use access restrictions, secure connections and password hashing. No online service can guarantee absolute security. Providers may process information outside your province or country, including in the United States, where local authorities may have lawful access. Applicable contractual and legal safeguards are required for those transfers.

Young people

Do not submit a child’s personal information without the legally required permission. If you are under the age at which you can consent or enter a binding agreement where you live, involve your parent or guardian before creating an account or purchasing. Contact contact@tengmedia.com if a child has supplied information without appropriate consent so we can investigate and remove it where required.

Cookies and changes

See Cookies & Storage for browser storage and embedded services. We date policy updates and provide additional notice or obtain consent where a material change or applicable law requires it.

Contact TENG MEDIA INC.