Family learning should stay in the family.
A parent or legal guardian holds the account and stays beside the child. Children do not create accounts.
Who holds the account
Only an adult parent or legal guardian may sign in. The child does not receive a login, account, email connection, or public identity. The adult agrees to stay present while the child uses a learning activity.
Parent sign-in and consent records
Google sends a signed credential so Math can confirm that the same adult account has returned. Math transforms Google’s stable account subject with a private server HMAC key. It saves that protected key—not the parent’s Google name, email address, profile photo, or raw Google credential. During sign-in the parent must accept the current family agreement. Math saves the agreement version, acceptance time, account creation time, last successful sign-in time, timezone, and scheduled deletion dates.
What is stored in Cloudflare D1
Signed-in information is stored in this site’s managed Cloudflare D1 database, currently running in Cloudflare’s APAC region with read replication disabled. The shared family record can contain a random family codename and symbol; theme and frame choices; lesson and challenge progress; answer correctness; attempt and hint counts; review timing; stars; XP; badges; streaks and private rewards. D1 also stores random request de-duplication keys used to protect saved changes. Raw written answers and interactive graph equations are checked but not retained. Because a child may do the activity beside the parent, this record can reflect the child’s learning and is visible to the parent account holder.
Sessions, browser data, and protection
The browser receives a Secure, HttpOnly, SameSite session cookie. D1 stores only a hash of that session token and its expiration time. A no-sign-in preview stores temporary progress in this browser rather than D1. Information is sent over HTTPS. Math does not use session replay, cross-site advertising profiles, or sell family information.
Four-month and six-month deletion
Every successful parent sign-in restarts two periods from that sign-in date. If there is no new successful sign-in, all saved learning, appearance, reward, and feedback data is scheduled for deletion after four calendar months. The remaining parent account key, consent record, and deletion record are scheduled for deletion after six calendar months. A daily UTC cleanup normally completes deletion within 24 hours after each deadline. Simply opening a page does not restart either period. Signing in between months four and six opens the existing parent account with a new blank family record.
Delete by category or delete everything
Family space lets the parent delete learning records and rewards; family appearance settings; feedback discussions; or all saved family data while retaining the parent login. Complete account deletion requires fresh Google verification and removes the protected account key, consent record, active sessions, and all linked D1 information. These actions cannot be undone in the active service.
Parent feedback discussions
Only signed-in adult account holders can submit or read the feedback area. D1 stores the topic category, message, review status, request-key hash, feedback notice version, publication-consent time, creation and update times, and any site-owner reply. A new topic is visible only to its author and the site owner until approved; approved topics and replies can be read by other signed-in parents. Internal account IDs are not shown. Do not include a child’s identity, school, contact details, links, or other identifying information.
What Math does not ask for
Math does not ask for a child’s name, email, exact birth date, school, class, photo, voice, address, or social account. Math does not load AdSense or other advertising code. There are no child logins, separate child profiles, public learning histories, public rankings, direct messages, or public child submissions.
Cloudflare operational records and backups
Cloudflare may separately process network, security, and diagnostic request records to operate and protect the service. Those provider records are not used for learning profiles and follow Cloudflare’s own retention controls. D1 backup history can temporarily retain a recoverable version after active deletion—up to Cloudflare’s available Time Travel window for the service plan—before it expires. It is used only for infrastructure recovery, not to restore a family record after a parent asks to delete it.
Important consent boundary
The adult confirmation records acceptance of this family-use agreement; it is not represented as third-party identity proof or as a substitute for every jurisdiction’s verifiable-parental-consent requirements. Separate child profiles, school use, advertising, and child-to-child interaction remain disabled while those controls are not available.