Skip to main content

Privacy Policy

Last updated: May 31, 2026

Introduction

SchoolKit.tools provides a growing suite of free, client-side school administration tools designed to help educators and administrators digitize their daily workflows. Our tools include an Academic Calendar Builder, Exam Timetable Builder, Attendance Register Generator, School Communication Templates, Parent-Teacher Meeting Scheduler, Fee Receipt Generator, Teacher Lesson Planner, and School Event Calendar. All of these tools run entirely in your browser.

This privacy policy explains how we handle your data when you use our website and tools. We believe in radical transparency: we collect as little data as possible, and the data you enter into our tools never leaves your device unless you explicitly choose to share it.

Data Processing

All SchoolKit.tools tools are architected as client-side applications. When you enter school names, student rosters, exam schedules, fee amounts, lesson plans, attendance records, or any other information into our tools, that data is processed locally on your device using JavaScript running in your browser. We do not transmit, store, or have access to any of the information you enter.

How it works:When you use a tool like the Exam Timetable Builder, all the dates, subjects, and class details you input are manipulated entirely within your browser's memory. When you generate a PDF or printable output, your browser renders it using client-side libraries. No network requests are made to our servers containing your data. This architecture means there is no database of student information, no server logs containing tool inputs, and no data breaches that could expose your school's information from our end.

Local Storage

Some tools use your browser's localStorage to save your work between sessions. For example, the School Profile feature may store your school's name, address, and logo so you don't have to re-enter it each time. Teacher schedules, class rosters, and other commonly used data may also be cached locally.

How to clear localStorage:You can clear all SchoolKit.tools data at any time through your browser settings. In Chrome, go to Settings → Privacy and Security → Clear Browsing Data → Advanced → select “Site Data” and choose “SchoolKit.tools”. In Firefox, go to Preferences → Privacy & Security → Cookies and Site Data → Manage Data. In Safari, go to Preferences → Privacy → Manage Website Data. Data can also be cleared per-tool using the “Reset” button within each tool interface.

Important: localStorage data is tied to your browser and device. Clearing your browser data or using a different device will not have access to the locally saved information. We cannot recover localStorage data, nor do we have any backup of it — it exists solely on your device.

Shareable Links

When you create a shareable link using the “Share” feature in tools like the Academic Calendar Builder or Parent-Teacher Meeting Scheduler, the data is encoded directly into the URL as query parameters using URL-safe encoding. No data is stored on our servers at any point.

How URL encoding works: The information you choose to share (dates, event names, meeting slots, etc.) is serialized and encoded into the URL using standard URI encoding. When someone opens that link, their browser decodes the URL parameters and renders the tool with the shared data pre-loaded. The entire process is client-side and stateless.

Privacy consideration: Anyone with the full URL can access the encoded information. Share links responsibly and avoid sharing them publicly if they contain sensitive information. We recommend using shareable links only for non-sensitive scheduling and calendar data.

Analytics

We use Google Analytics 4 (GA4) to collect anonymized usage data that helps us understand how our tools are used and improve the site experience. Google Analytics is configured to anonymize IP addresses before any processing occurs.

What is collected: Page views, tool usage patterns, browser type and version, operating system, device type, screen resolution, approximate geographic location (city-level only), referral source, and time spent on pages.

What is NOT collected: No personal information such as names, email addresses, IP addresses (anonymized), or any data entered into our tools is collected through analytics. We have configured GA4 with strict privacy controls including data retention limited to 2 months and IP anonymization enabled.

Cookies

Our site uses minimal cookies. Specifically, Google Analytics sets first-party cookies (_ga, _ga_*) to distinguish unique users and throttle request rates. These are analytics cookies only and are not used for advertising, cross-site tracking, or marketing purposes.

We do not use tracking cookies, advertising cookies (e.g., Facebook Pixel, Google Ads), session recording cookies, fingerprinting scripts, or any third-party marketing cookies. You can configure your browser to block cookies, but please note that doing so may affect Google Analytics functionality only — all tools will continue to work normally.

Third-Party Services

Our website integrates with a minimal set of third-party services, all of which are carefully chosen for privacy and security:

  • Google Analytics — For anonymized usage analytics as described above.
  • Google Fonts — For typography. Google Fonts may log CSS and font file requests. We may self-host fonts in future updates to eliminate this dependency.
  • OpenStreetMap tiles (via Leaflet) — Used in the School Event Calendar tool for location mapping. Map tile requests are sent to OpenStreetMap servers and may include your IP address. OpenStreetMap's privacy policy applies to those requests.
  • jsPDF — Used for PDF generation. Runs entirely client-side; no data is sent to any external server.
  • Native device sharing APIs — When you share via WhatsApp, email, or other apps, your device's native sharing dialog is used. We do not send data to third-party services directly.

We do not use social media login widgets, comment systems, chatbots, or any other third-party embedded content that could track your activity.

Data Retention

We do not store any data on our servers. Period. The data you enter into our tools exists only in your browser's memory during your session and optionally in localStorage if you choose to save it. When you close your browser tab, the session data is gone. When you clear localStorage, the saved data is gone. There is no database, no backup, no archive of your information on our end.

Google Analytics data is retained for 2 months in accordance with our GA4 data retention settings, after which it is automatically deleted.

Children's Privacy

Our tools are designed for use by school administrators, teachers, and education professionals. We do not knowingly collect any personal information from children under the age of 13. Since all data processing occurs client-side and we do not collect or store any user data, there is no mechanism through which we could inadvertently collect children's data.

In compliance with the Children's Online Privacy Protection Act (COPPA), we do not request, collect, or store personal information from any users, regardless of age. If you believe a child has provided personal information through our site, please contact us immediately so we can investigate.

International Data Transfers

Our website is hosted in the United States. Google Analytics data may be processed on Google Cloud servers located worldwide. By using our site, you consent to the transfer of anonymized analytics data to servers in the United States and other countries where Google operates.

For users in the European Economic Area (EEA), the United Kingdom, or Switzerland, we comply with the General Data Protection Regulation (GDPR) requirements. Google Analytics is configured with IP anonymization, data retention limits, and a data processing agreement with Google. The data we collect through analytics is minimal and does not include personal identifiers.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your data:

  • Right to Access — Since we do not store your data, there is nothing to access. You can request information about our analytics data practices.
  • Right to Deletion — Clear your browser's localStorage or use the per-tool reset buttons. Google Analytics data is automatically deleted after 2 months.
  • Right to Opt-Out — You can opt out of Google Analytics by installing the Google Analytics Opt-Out Browser Add-on or by blocking GA cookies in your browser settings.
  • Right to Rectification — Edit your data directly within the tools or clear localStorage and start fresh.
  • Right to Data Portability — Any data you enter can be exported as PDF, printed, or copied from the tool interface.

To exercise any of these rights, contact us using the information below. We will respond within 30 days.

Security

We take the security of your data seriously. Our website is served exclusively over HTTPS (TLS 1.2+), ensuring all communications between your browser and our servers are encrypted. Since we do not store any user data on our servers, there is no user data database that could be compromised.

Our security posture includes regular dependency audits, Content Security Policy (CSP) headers, and minimal attack surface by design. We follow security best practices for Next.js applications and keep all dependencies up to date. In the event of a security incident affecting our infrastructure, we will notify users via a notice on our website.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will update the “Last updated” date at the top of this page and may provide additional notice on our website or through our tools.

We encourage you to review this privacy policy periodically. Your continued use of SchoolKit.tools after any changes constitutes acceptance of the updated policy. If you do not agree with the changes, you should stop using our tools and clear any locally stored data.

Contact

If you have questions about this privacy policy, would like to exercise your data rights, or have concerns about how your data is handled, please reach out to us:

  • Email: [email protected]
  • Response time: We aim to respond within 48 hours, and no later than 30 days as required by applicable law.

If you have an unresolved privacy concern, you have the right to file a complaint with your local data protection authority.