Draft for legal review. This text describes how the product works today. It has not been reviewed by a lawyer and is not yet in force. Items in [square brackets] are still to be decided.
Privacy policy
Last updated 16 October 2026
The short version
- Marshmallow keeps nothing about you or your child. There are no accounts, no sign-in, no class lists and no progress records.
- Children never type a name, an email address or anything else about themselves.
- A lesson is a link. The link holds the skills and sizes you chose, and nothing about anyone.
- We do not show adverts, we do not sell information, and there are no tracking tools in the product.
Who we are
Marshmallow is run by Black Rabbit LLC dba Marshmallow Education [postal address]. Marshmallow makes free classroom tools for kindergarten to grade 2. This policy covers every Marshmallow tool. You can reach us at privacy@marshmallow.education.
What the tools send us
Building a lesson sends us what the lesson should be made from: the skills, the sizes and a number that picks the mix. Working out a grade sends us the four numbers it is worked out from. We send back the lesson or the grade, and keep none of it. The recorded voice that says words and numbers is played from our servers; asking for a word to be said tells us only which word.
What children do on the board, the mat, the graph, the clock, the tray, the chart and the shapes stays on the screen they are using. It is never sent to us.
Lesson links
A lesson’s link is its page address with the skills, the sizes and that number written into it. Anyone you give the link to can open the same lesson. It holds nothing about you, your class or any child.
What is stored on your device
One small note in your browser’s storage: which PhonicsTile skills you have marked as taught, so the tile tray is right the next time you open it on that device. It says nothing about who you are. There are no cookies.
The fonts and every other file come from our own servers, so no other company sees your visit.
Technical records
Like most websites, our servers keep a standard log of requests (internet address, time and page) for security and fault-finding. [How long logs are kept.]
Who else handles it
Cloudflare, Inc. hosts the service and so handles those requests for us. [Confirm at launch, and link to our agreement with Cloudflare.] If you follow our “chip in” link, you leave Marshmallow for Ko-fi, and Ko-fi’s own privacy policy applies there.
Schools, families and children
Because Marshmallow collects nothing about students, a school or family does not need to share any student information to use it. Please do not type a child’s name into a typed graph question or anywhere else on the screen; nothing typed there is sent to us, but it can be seen by anyone looking at the board.
Accounts made before 16 October 2026
Until 16 October 2026 Marshmallow had accounts, classes and saved lessons. They have been switched off and can no longer be reached. The information that was held for them will be deleted by [date]. To have yours deleted sooner, write to privacy@marshmallow.education.
Changes to this policy
If we ever start keeping anything, this page will say so before it happens. The terms of use also apply.