What we collect, and why.

We collect only what we need to deliver what you asked for and to improve the public-good parts of this site. We do not sell or share personal data with third parties for advertising.

Email addresses

When you request the readiness checklist, we store your email so we can send it. If you opt in to The Education Brief, we also send one short email a month. You can unsubscribe at any time from any message we send.

Triage telemetry

The triage tool runs in your browser. We may store the anonymized path you took (no email, no IP) so we can prioritize which playbooks need work.

Contact requests

When you fill in the contact form we store the name, email, district, role, and message so we can reply. We retain contact requests for two years.

Hosting

The site runs on Lovable Cloud. Their data-processing terms apply.

Children & student data (COPPA, FERPA, SOPPA, NY Ed Law 2-d, Texas HB 18, California SOPIPA)

This site is built for district staff, trustees, and procurement — not for students. We do not knowingly collect personal information from children under 13. We do not place advertising cookies, build behavioural profiles, or sell data of any kind. If a student under 13 has somehow submitted information through one of our forms, contact privacy@hackfirstaid.com and we will delete it.

For paid district engagements, we sign data-protection addenda on request, including SOPPA (Illinois), NY Ed Law 2-d, Texas HB 18, California SOPIPA, and FERPA-aligned terms. Our standing posture is that we do not need student PII to do our work, and our deliverables are designed to keep student records inside your systems, not ours.

Analytics & cookies

We use Plausible Analytics, a privacy-respecting service that does not set cross-site cookies, does not fingerprint visitors, and does not collect personal data. Aggregate page-view counts help us prioritize which playbooks to improve. The site itself sets only functional cookies required for sign-in (when you use it). We do not use advertising or third-party tracking cookies.

Your rights

You can ask us at any time to confirm what data we hold on you, correct it, export it, or delete it — including unsubscribing from The Education Brief. This applies regardless of where you are located, and covers rights afforded by PIPEDA (Canada), GDPR / UK GDPR, the CCPA / CPRA (California), and other US state privacy laws. Email privacy@hackfirstaid.com and we will respond within 30 days.

Retention

Newsletter subscribers: until you unsubscribe. Contact requests: two years. District-identifying data for paid engagements: deleted within 30 days of cancellation, confirmed in writing. After-action documents and templates remain with the district.

Contact

Questions about privacy: privacy@hackfirstaid.com.