Draft, not yet reviewed by a lawyer.

TwiddleLab Privacy Policy

Effective date: November 2, 2026

Welcome to TwiddleLab (https://twiddlelab.com). We create interactive STEM lessons in AI, Math, Code, and Physics for teenagers aged 13 to 17 and adults. We care about your privacy and believe in being completely transparent about how our site works.

TwiddleLab is operated by TwiddleLab. If you have any questions about this policy, please email us at hello@twiddlelab.com.

1. Learners Under 13

TwiddleLab accounts are only for people who are 13 or older. If you are under 13, you can explore lessons in your browser, but we do not create an account for you, and we do not send any of your data to our servers.

2. Using the Site Without an Account

If you visit TwiddleLab without signing in, your progress is saved only in your own web browser using local storage (localStorage). Once you complete your first lesson, our site may create an anonymous account on our server. This helps back up your learning progress so you do not lose it if you close or refresh your browser.

3. Signing In Without Passwords

We do not store or use passwords. You can sign in using two options:

• A one-time code sent directly to your email address.
• Google sign-in. When you use Google to sign in, we receive only your name, your email address, and your profile picture.

Our sign-in system is provided by Supabase. Their authentication servers are located in Europe (Frankfurt region).

4. What We Store on Our Servers

When you have an account, we store only the following details on our own European servers:

• Your account ID and your email address, if you provided one.
• Your age range: 13 to 15, 16 to 17, or 18+. We never ask for or store your actual birth date.
• Your preferred language.
• Your learning activity: lesson progress, question answers, practice results, XP points, and streak counts.

5. Privacy, Security, and Fonts

We keep our site clean, secure, and focused on learning:

• No ads: We do not show any advertisements.
• No selling data: We never sell or rent your personal information to third parties.
• No ad trackers: We do not track you across other websites. To see which lessons work and where people get stuck, we use PostHog product analytics (servers in the USA): page views and simple events like "lesson finished". IP addresses are anonymized, there are no session recordings, and nothing is collected for learners under 13.
• No chat with strangers: There is no public chat or direct messaging.
• Fonts: Fonts are loaded from Google Fonts.
• Security logs: Our server records basic technical logs, such as IP addresses and browser types, to protect the site from attacks. These logs are automatically deleted after 14 days.

6. Deleting Your Account and Data

You can delete your account and your learning data at any time in your Profile settings. You can also request deletion or ask questions by emailing hello@twiddlelab.com. We will answer your request within 30 days.