All documents
COPPA Direct Notice and FERPA Commitments
A concise notice for schools, educators, parents, and guardians about student classroom data.
- Version:
- 2026-08-14-v1
- Effective August 15, 2026
- Effective August 15, 2026
This is the controlling English (United States) version. The en-US text controls if a convenience translation differs.
1. Notice to schools and families
Desk Dollars is operated by Andrew Hall, an individual/sole proprietor in Florida, United States. Contact [email protected]. Teachers create student identities and control enrollment; a student cannot self-register or attest to being an adult educator.
Before adding a child, the educator or school must determine and document its authority, provide this direct notice and other required notice, and obtain parent consent where school authorization is unavailable or insufficient. Desk Dollars retains its COPPA operator duties.
2. Student information collected
The service may collect a student username, first name and last initial, display name, enrollment, account number, simulated balance, immutable transactions, jobs and payroll, rent, store orders, goals, pets, onboarding, and classroom activity. It also processes required session, request, security, and audit information. It does not require a student email, full legal name, home address, phone number, or payment card.
3. How information is used and disclosed
Student information is used only to provide, secure, support, and legally operate the educator-directed classroom simulation. It is visible to the student for that student's own account, authorized educators, and limited operators/vendors who need it. It is not sold, rented, or traded, used for behavioral advertising or unrelated profiles, or redisclosed for unrelated marketing.
Student pages show no public profile, no classmate balances, and no leaderboards. The configured Subprocessor List explains vendors. Stripe/Link payment processing concerns adult teacher subscriptions and does not receive student ledger records from Desk Dollars for payment.
4. School authorization under COPPA
Where COPPA permits, a school may authorize collection from children under 13 for the school's educational purpose, not for unrelated commercial use. The school should give parents notice of the service and make the policy and this notice available. Desk Dollars limits data to the service, gives schools/parents review and deletion paths, protects confidentiality and security, and supports stopping further collection.
5. FERPA commitments
When FERPA-covered education records are provided under a valid school-selected exception, Desk Dollars performs the limited institutional service under school direction, applies access controls, uses records only for that purpose, avoids unauthorized redisclosure, and supports school access, return, export, or deletion.
The school remains responsible for determining whether its chosen FERPA exception and direct control are satisfied, making any annual notification, and following procurement or approval rules. Desk Dollars does not claim that one contract makes every school's use compliant.
6. Review, stop collection, export, or delete
A parent or eligible student may ask the educator or school to review or correct data, stop collection, remove enrollment, export records, or request deletion. Requests may also be sent to [email protected]. We verify identity and authority and coordinate with the school without confirming another person's account to an unverified requester.
Verified deletion removes or anonymizes direct identity details and disables login. Immutable ledger and necessary order, payroll, rent, audit, account, and historical pet records may remain under anonymized identity so classroom and accounting history is not silently altered. Teacher-authored transaction descriptions and student-visible reasons may remain, so educators should not put unnecessary personal information in ledger reasons. The Retention Policy explains the 30-day recovery and 90-day recovery windows and backup treatment.
7. Controlling notice
This notice should be read with the Privacy Policy and DPA. The en-US text controls. Contact [email protected] with questions before collection begins.