Terms of Service

Date of Last Revision: December 14, 2022

Code.org is a 501(c)(3) nonprofit organization (“Code.org”). Our mission is to give every student the opportunity to learn computer science. As a part of that mission, Code.org operates the websites located at https://code.org, https://studio.code.org, https://www.k12cs.org, https://codeprojects.org, https://hourofcode.com, https://curriculum.code.org, https://advocacy.code.org, other websites, information, text, curricula, videos, graphics, photos, APIs, email notifications and other materials and related products and services (the “Services”).

Please read these Terms of Service (“Terms”) carefully before accessing or using the Services. Accessing or using any part of the Services or clicking on an “I Agree” or “Sign Up” button that may be made available to you means that you agree to be bound by these Terms without modification.

These Terms are a legal contract between you (the “User”) and Code.org regarding your use of the Services. In the event these Terms are translated into another language resulting in any potential conflict or ambiguity, the official version of the Terms shall remain the English version. You may use the Services only if you can form a binding contract with Code.org and are not a person barred from receiving the Services under the laws of the United States or other applicable jurisdiction. If you are accepting these Terms and using the Services on behalf of a company, organization, school, government, or other legal entity, you represent and warrant that you are authorized to do so. You may use the Services only in compliance with these Terms and all applicable local, state, national, and international laws, rules and regulations. Note: If you are a teacher creating an account on behalf of your students, you agree to be bound by these Terms of Service on behalf of the educational organization you work for, and are authorized to do so.

These Terms are subject to change. You are agreeing to be bound by such changes if you continue to use the Services after these Terms change, so please check these Terms for changes periodically.

Additional Terms

Some Services may be subject to additional posted guidelines, rules or terms of service (“Additional Terms”) and your use of such Services will be conditioned on your agreement to the Additional Terms. If there is any conflict between these Terms and the Additional Terms, the Additional Terms will control for that Service, unless the Additional Terms expressly state that these Terms will control.

Children Under Age 13

We take steps to minimize the collection of personal data from Users under the age of 13 as explained in the Code.org [privacy policy]https://code.org/privacy). Users under the age of 13 will be able to use our App Lab, Game Lab, and Web Lab tools in the classroom with their teacher’s approval. Users under the age of 13 will not be permitted to use these tools for outside the classroom use. Users under 13 can try most tutorials and courses without creating an account, but their learning progress won’t be saved. Users under the age of 13 are required to to get the approval of a parent or legal guardian before creating an account on Code.org. Code.org allows certain representatives of school districts and schools, such as teachers, administrators, counselors, and other educators (an “Educator”) to connect with their students through the Services in order to provide tutorial, educational and similar services. If you are an Educator, you may register accounts on the Services for one or more of your students.

If you are an Educator and you register an account for a student who is under the age of 13 (a “Child”), you represent and warrant that you or the educational organization you work for has proper permission to register the Child for Code.org, and that you have obtained the necessary parental consent for Code.org’s collection of the Child’s personal data for the use and benefit of the school and for no other commercial purpose. In addition, you agree to be bound by these Terms on behalf of the educational organization you work for.

Your Account

If you create an account for Services, you are responsible for the security of your account and for keeping your own password safe. If you are using an account assigned to you by an Educator, your Educator may be able to access and disable your account.

Code.org may permit you to register an account for the Services through certain third party social networking services, such as Facebook Connect and Google (“Authentication Service”). By registering for the Services using an Authentication Service, you agree that Code.org may access your account information from the Authentication Service and you agree to any and all terms of use of the Authentication Service regarding your use of the Services via the Authentication Service. You are solely responsible for your interactions with the Authentication Service.

Privacy

Your privacy is important to us. Code.org’s Privacy Policy explains how we treat and protect your personal data and is incorporated into these Terms by reference. Please read the Privacy Policy carefully for information relating to Code.org’s collection, use, and disclosure of your personal data as well as the administrative, technical and physical safeguards we maintain to protect against unauthorized use, disclosure of or access to personal data.

In addition, if you are a student or teacher using Code.org in a primary or secondary school with whom we have entered into a separate agreement that supplements these Terms, such as our Student Data Privacy Addendum, the terms of those separate agreements may also apply.

If you are a student that uses an account registered for you by an Educator or otherwise connected to an Educator, you agree that Code.org may disclose your information to the Educators associated with your account. If you are an Educator, you agree not to share Student Records (as defined in our Privacy Policy) you receive from Code.org with anybody other than authorized agents of the classroom, school district, or other educational establishment you represent. Code.org does not use Student Records for any targeted or behavioral advertising, profiling, or onward disclosure.

The Family Educational Rights and Privacy Act (“FERPA”)

We help schools be compliant with the Family Educational Rights and Privacy Act (FERPA) by facilitating a school’s access to student data in response to a request from a parent. Email us at support@code.org for assistance.

User Generated Content - Management; License Grant; Representations and Warranties

The Services enable Users and Schools (as defined in our Privacy Policy) to provide, share or post certain content or information, including, but not limited to, computer code (including both source and object code), audio recordings, photographs, videos, documents, online educational resources, or other materials, and Feedback, (as defined below) (collectively, “User Content”). You should not include any Student’s Personal Information (which are defined in our Privacy Policy) or Student educational records, in any of the User Content you create. If you or a Student in your class accidentally includes any Student’s Personal Information, please contact us at support@code.org. User Content may be used by Code.org in connection with the Services and may be visible to or shared with Code.org, other Schools, and certain other Users. Please visit our Privacy Policy for additional information on the types of information different Users are able to provide.

Teachers may contribute educational content, create answers to assessments, create derivative works (e.g., completion of assignments, projects, etc.), and transmit said data and content within the School’s systems through the Services (collectively, “Teacher Content”).

Schools and Users may submit feedback, comments or suggestions for improvements to the Services (in written, oral, or any other form) (“Feedback”).

Ownership

By submitting or distributing User Content through the Services or directly to Code.org staff, you hereby grant to Code.org a worldwide, non-exclusive, transferable, assignable, fully paid-up, royalty-free, perpetual, irrevocable right and license to host, transfer, display, perform, reproduce, modify, distribute and redistribute, adapt, prepare derivative works of, use, make, have made, import, and otherwise exploit your User Content (which should not contain any Student’s Personal Information), under all intellectual property rights therein, in whole or in part, in any media formats and through any media channels (now known or hereafter developed).

In addition, by submitting or distributing User Content through the Services, you hereby grant to each user of the Services a non-exclusive license to access and use your User Content.

License to User Content

User Content

You hereby grant to Code.org a limited, non-exclusive, sublicensable (as necessary to provide the Services, including distributing Teacher Content), worldwide, royalty-free, and transferable (only to a successor) right and license to:

1. use, host, copy, store, distribute, publicly perform and display, publish (in whole or in part), modify, and create derivative works from (such as changes we make so that your content works better with our Service) User Content as necessary to provide, improve and make the Services available to you and other Users, including through any future media in which the Services may be distributed;
2. use, modify, prepare derivative works, publish, distribute and sublicense Feedback without any compensation to you;
3. use and disclose metrics and analytics regarding the User Content in an aggregate or other non-personally identifiable manner (including, for use in improving our Service or in marketing and business development purposes);
4. use any de-identified User Content for any lawful purpose (such as product development, research or other purposes) subject, if applicable, to the Data Privacy Addendum or similar agreement; and
5. use for other purposes permitted by the Code.org Privacy Policy and, if applicable, the Data Privacy Addendum or similar agreement.

Code.org will only share and use your personal data in accordance with Code.org's current Privacy Policy. When you upload or create User Content, this can be viewed by your Teacher and (under your control) by other Users and this means that you are allowing others to access and use that information and to associate it with you.

By uploading, creating, submitting or distributing User Content through the Services, you hereby grant other Users a non-exclusive, transferable (only to a successor), royalty-free right and license to use, reproduce, create derivative works, publicly display and perform any of your User Content that is incorporated into that User's project, provided that Code.org shall not use or distribute your User Content on a stand alone basis if Code.org’s license grant has been terminated as set forth below. The foregoing license and restrictions does not limit Code.org rights under any third party or open source license in which your User Content may be licensed.

Public Content

In addition to the rights, licenses and privileges referred to above, you agree that Code.org may use and refer to your User Content, first name and screenname that are posted publicly on the Code.org Website and not in private areas of our Service (“Public Content”) (including screenshots) in marketing materials, press releases, financial reports, presentations, website materials, customer lists and other media now known or hereafter discovered in connection with the marketing, advertising and promotion of the Service, and any products, goods, features, capabilities and/or services associated with the Service. This right will continue until your Public Content is deleted; provided however, that any Public Content previously printed in brochures, articles or other marketing materials that Code.org had prepared before any request for deletion was received will continue to be used.

License Termination

The User Content license above will terminate when you or your School (i) delete any User Content containing intellectual property rights (like images or videos) or personally identifiable information (such as that in Student Data); or (ii) delete your account, unless your User Content has been shared with others, and they have not deleted it. Such termination may not apply to User Content or Teacher Content, including Student Data or in messages sent through Code.org, that may be deemed an “education record” under the Family Education Rights Act (FERPA) or various other student privacy laws, and which a school controls (“Education Record(s)”). We will delete any Education Record upon receiving a valid request for deletion from your school. Please see our FAQ for more information. Additionally, such termination will not affect the license rights granted to other Users to use your User Content if they previously copied your User Content and they have not deleted it. When you or your School delete User Content it is deleted in a manner similar to emptying the recycle or trash bin on a computer. However, you understand that any removed User Content may persist in backup copies for a reasonable period of time following deletion (but will not be available to others). Additionally, you understand and agree that User Content may continue to appear on Code.org, even after you have terminated your account or these Terms of Service, as portions of your User Content may have been copied by other users and/or incorporated into their coding projects.

User Content Representations and Warranties

You are solely responsible for User Content you post to the Services and the consequences of posting or publishing them. By uploading, submitting, creating, or publishing your User Content to or through the Services, you represent, and warrant that: (1) you are the creator and owner of your User Content and that you have the authority to use or have the necessary licenses, rights, consents, and permissions to publish the User Content you submit; (2) your User Content does not and will not: (a) infringe, violate, or misappropriate any third-party right, including any copyright, trademark, patent, trade secret, moral right, privacy right, right of publicity, or any other intellectual property or proprietary right or (b) slander, defame, libel, or invade the right of privacy, publicity or other property rights of any other person; and (3) your User Content does not contain any viruses, adware, spyware, worms, or other malicious code.

Restrictions on Content and Use of the Services

We reserve the right at all times (but will not have an obligation) to remove or refuse to distribute any User Content on the Website and to suspend or terminate users, without liability to you, in our sole and final discretion. We also reserve the right to access, read, preserve, and disclose any information as we reasonably believe is necessary to (i) satisfy any applicable law, regulation, legal process or governmental request, (ii) enforce the Terms, including investigation of potential violations hereof, (iii) detect, prevent, or otherwise address fraud, security or technical issues, (iv) respond to user support requests, or (v) protect the rights, property or safety of Code.org, its users and the public.

Our Services are intended for educational purposes. Although our Services (e.g., App Lab, Game Lab) enable users to create apps and projects with a wide range of functions to learn and explore computer science - including potential multi-user functions - you may not create chat apps or similar multi-user apps to be hosted on the Code.org platform outside of a legitimate classroom context. You also may not create apps that have a commercial purpose or aspect to be hosted on the Code.org platform. We reserve the right at all times (but will not have the obligation) to remove such apps and to suspend or terminate users who violate these terms in this or any other manner.

You may not do any of the following while accessing or using the Services: (i) access, tamper with, or use nonpublic areas of the Services, Code.org’s computer systems, or the technical delivery systems of Code.org’s providers; (ii) probe, scan, or test the vulnerability of any system or network or breach or circumvent any security or authentication measures; (iii) access or search or attempt to access or search the Services by any means (automated or otherwise) other than through currently available, published interfaces that are provided by Code.org (and only pursuant to those terms and conditions), unless you have been specifically allowed to do so in a separate agreement with Code.org (NOTE: crawling the Services is permissible if done in accordance with the provisions of the robots.txt file, however, scraping the Services without the prior consent of Code.org is expressly prohibited); (iv) forge any TCP/IP packet header or any part of the header information in any email or posting, or in any way use the Services to send altered, deceptive or false source-identifying information; (v) interfere with, or disrupt, (or attempt to do so), the access of any user, host or network, including, without limitation, bullying or harassing, sending a virus, overloading, flooding, spamming, mail-bombing the Services, or by scripting the creation of Content in such a manner as to interfere with or create an undue burden on the Services; (vi) create chat apps or similar mult-user apps outside of a legitimate classroom context; (vii) create apps with any commercial purpose or aspect; or (viii) upload or create offensive, bullying, obscene, threatening, or other harmful Content (as determined in our sole and final discretion).

Code.org has no obligation to monitor User Content or other materials. You are responsible for evaluating all User Content including for accuracy, completeness and reliability, and you bear all risk of using such User Content. Code.org will not be responsible for any damages that you may incur as a result of the submission or use of any User Content.

Code.org may, but is not obligated to, monitor or review any Services where Educators communicate solely with each other, including but not limited to chat rooms, live chats, bulletin boards or other user forums, and the content of any such communications. You assume the risk of such communications, and Code.org has no liability related to the content or use of any such communications.

Users may include links to third party websites in User Content as long as the content of such websites does not violate these Terms. Clicking on such links is at your sole risk. Code.org is not responsible for the availability or the content of linked websites, including the advertising, products or other materials thereon.

Your License to Use Code.org Software, Videos, Curriculum and Tutorial Materials, JSON API, and Conference Board Data

The following table provides an overview of the licenses and restrictions governing Code.org software code, videos, curriculum and tutorial materials, and APIs, as well as data we publish from the Conference Board. More detailed descriptions are provided below.

The code powering Code.org’s websites and tutorials is governed by an open source Apache License which is posted as part of the source code repository in github.

Code.org’s library of videos is governed by and licensed to you for use under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 Unported License. More information about this license can be found at https://creativecommons.org/licenses/by-nc-nd/4.0/. Code.org videos may be redistributed freely on the express conditions that: (1) the videos are redistributed AS-IS in their entirety, using the embedded video player provided, or by downloading the original video file IF a download link is provided, and with clear attribution to Code.org; (2) the videos are not incorporated into any mashups; (3) the videos are used for computer science education purposes; (4) the use of the video does not constitute an endorsement of a 3rd party brand, service or product; and (5) if access to such redistributed Content or Services is provided free of charge.

The celebrities and video “cast“ members appearing in Code.org tutorials and videos reserve all rights to their likeness and name. By allowing you to redistribute these videos or tutorials AS-IS, Code.org does not grant any additional rights to use of the likeness or name of these individuals.

The artwork used in our tutorials is copyrighted and use of these tutorials does not grant you any rights to use the artwork in any other manner. Plants vs. Zombies are © 2022 Electronic Arts Inc. Plants vs. Zombies and PopCap are trademarks of Electronic Arts Inc. Angry Birds are © 2022 Rovio Entertainment Ltd. Angry Birds is a trademark of Rovio Entertainment Ltd. Scrat and Ice Age are trademarks and © Twentieth Century Fox Licensing and Merchandising. Frozen is a trademark and © 2022 Disney. Star Wars is a trademark and © 2022 Lucasfilm and Disney. Minecraft is a trademark and © 2022 Microsoft. The Amazing World of Gumball is a trademark and © 2022 Cartoon Network. DreamWorks The Bad Guys © 2022 DreamWorks Animation LLC.

Other than the proprietary videos and artwork mentioned above, all curriculum and tutorial materials developed by Code.org are licensed to you for use under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 Unported License. More information about this license can be found at: http://creativecommons.org/licenses/by-nc-sa/4.0/. Code.org grants you a non-exclusive, transferable, non-sublicensable, limited right and license to access, view, use, and display the Code.org curriculum and tutorial materials. The Code.org curriculum and tutorial materials may only be used for noncommercial, computer science educational purposes. You may use these Code.org resources in a classroom where you charge students a fee to cover such costs as instructor compensation, venue, snacks, etc., so long as you do not represent the Code.org resources as your own creation or restrict access to the resources behind a paywall. Except as set forth above, you may not otherwise use Code.org materials for commercial purposes. If you are interested in licensing Code.org materials for commercial purposes, contact us.

The Code.org JSON API and database of schools is also licensed via the Creative Commons Attribution-NonCommercial-ShareAlike 4.0 Unported License. More information about this license can be found at: http://creativecommons.org/licenses/by-nc-sa/4.0/, which means you are free to use the data to make derivative works, as long as you give Code.org attribution.

Any data provided by The Conference Board is provided “as is” with no warranty whatsoever, and is protected by United States and International Copyright laws. The data displayed are provided for informational purposes only and may only be accessed, reviewed, published, and/or used in accordance with, and the permission of, The Conference Board consistent with the Terms of Use displayed at www.conference-board.org. Such data may not be extracted for use in a database, used to create a derivative work, or otherwise misused by any means without express written permission from The Conference Board, except that you may make limited noncommercial use as consistent with Fair Use under Section 107 of the Copyright Act of 1976. The Conference Board® and The Conference Board Help Wanted OnLine® are registered trademarks of The Conference Board. The Conference Board reserves all rights in and to its trademarks. Further information regarding The Conference Board Help Wanted OnLine® can be found here.

Copyright Policy

Code.org respects the intellectual property rights of others and expects users of the Services to do the same. We will respond to notices of alleged copyright infringement that comply with applicable law and are properly provided to us. If you believe that your work has been copied in a way that constitutes copyright infringement, please provide us with the following information: (i) a physical or electronic signature of the copyright owner or a person authorized to act on their behalf; (ii) identification of the copyrighted work claimed to have been infringed; (iii) identification of the material that is claimed to be infringing or to be the subject of infringing activity and that is to be removed or access to which is to be disabled, and information reasonably sufficient to permit us to locate the material; (iv) your contact information, including your address, telephone number, and an email address; (v) a statement by you that you have a good faith belief that use of the material in the manner complained of is not authorized by the copyright owner, its agent, or the law; and (vi) a statement that the information in the notification is accurate, and, under penalty of perjury, that you are authorized to act on behalf of the copyright owner.

Digital Millennium Copyright Act

It is Code.org’s policy to respond to notices of alleged copyright infringement that comply with the Digital Millennium Copyright Act.

We reserve the right to remove Content alleged to be infringing without prior notice, at our sole discretion, and without liability to you. In appropriate circumstances, Code.org will also terminate a user’s account if the user is determined to be a repeat infringer. To report a copyright violation, please contact us. Our copyright agent for notice of claims of copyright infringement can be reached by directing an e-mail to the copyright agent at copyright@code.org.

Code.org Intellectual Property Rights, and Your License to Use the Services

All right, title, and interest in and to the Services (excluding User Content) are and will remain the exclusive property of Code.org and its licensors. The Services are protected by copyright, trademark, trade dress, patent and other laws of the United States. The content, information, data, designs, code, and materials associated with the Services (“Content”) are protected by intellectual property and other laws. You must comply with all such laws and applicable copyright, trademark or other legal notices or restrictions. Nothing in the Terms gives you a right to use the Code.org name or any of the Code.org trademarks, logos, domain names, and other distinctive brand features. Any feedback, comments, or suggestions you may provide regarding Code.org, or the Services is entirely voluntary and we will be free to use such feedback, comments or suggestions as we see fit and without any obligation to you.

Subject to these Terms, you may access and use the Services only for your own personal, noncommercial use. We reserve all other rights to the Services and Content, and otherwise you may not copy, reproduce, distribute, publish, display, perform, or create derivative works of the Services or Content without our permission, except with respect to Code.org’s library of videos, curriculum, tutorials, and API as set forth above.

Upon request, we may expressly authorize you to redistribute certain Content for personal, noncommercial use. We will identify specifically the Content that you are authorized to redistribute and describe ways you may redistribute it (such as via email, blogs, or embedded players). We may revoke this authorization at any time. If you redistribute Content, you must be able to edit or delete such publicly posted Content and you must edit or delete it promptly upon our request. In addition, notwithstanding any of the foregoing, use of Content or Services will NOT be permitted if such use constitutes an endorsement of a 3rd party brand, service or product or if access to such redistributed Content or Services is not provided free of charge.

The CODE® logo design is a registered trademark of Code.org. You may only use the Code.org logo or trademark with the permission of Code.org, and only in reference to Code.org. Mash-ups or combinations of the Code.org logo or name with other logos or names are specifically prohibited.

Code.org does not represent or warrant that the Services will be error-free, free of viruses or other harmful components, or that defects will be corrected. We do not represent or warrant that the information available on or through the Services will be correct, accurate, timely or otherwise reliable. We may make changes to the features, functionality or content of the Services at any time. We reserve the right in our sole discretion to edit or delete any Content, information or other materials made available as a part of the Services.

Other Entities’ Intellectual Property Rights

The Services may include intellectual property of other entities, which have provided Code.org limited use permission. Your use of the Services does not provide any right to copy, reproduce, or otherwise use such entities’ intellectual property except as explicitly stated herein. In addition to the trademarks and copyright limits set forth in the “Your License to Use Code.org Videos, Tutorial, Data, and APIs” section, other trademark and copyrights used on the Services include, but may not be limited to: Google Classroom is a trademark of Google Inc. © Google Inc. Amazon Web Services and the “Powered by AWS” logo are trademarks of Amazon.com, Inc. or its affiliates in the United States and/or other countries.

Code.org Store and Support Forums

The Code.org store and Code.org support forums are operated by third parties. Please read the User Agreement and Privacy Policy for these sites separately before purchasing an item from the Code.org store or before posting a question or answer to the support forum. By accessing the Code.org store and support forums, you agree to be bound by the respective user agreement and privacy policy of these third parties.

Teacher forum

Our teacher forum, located at https://forum.code.org, is operated by a third party. Please read the User Agreement and Privacy Policy for the forum separately before posting a question or answer to the forum. It allows teachers to share resources, ask questions, and get responses from Code.org staff or other members of the community. Teachers may not use the forum to promote external paid resources. Code.org reserves the right to monitor and take down any inappropriate content posted on the forum.

Volunteer mentors

Code.org encourages software engineers to volunteer as mentors in the classroom to assist teachers in computer science education.

Code.org’s platform does not connect students directly to volunteers or mentors. Instead, Code.org provides Educators information about potential volunteers without any warranty, references, or background checks. If you are an Educator who chooses to ask for the assistance of a volunteer sourced via Code.org’s database, it is entirely your responsibility to thoroughly check references or perform the necessary background checks. Code.org provides no warranty or information other than the ability to contact a potential volunteer, and all liability in any use of volunteers rests only with you. Code.org does not guarantee the accuracy or completeness of any information provided by volunteers and we neither adopt nor endorse, nor are we responsible for, the accuracy or reliability of any opinion, advice, or statement made by any party other than Code.org. Under no circumstances is Code.org responsible for any loss or damage resulting from any person's reliance on information or other content posted on the Service or transmitted by others.

Pledges, Donations and Payments

A. Pledges and Donations. If you make a pledge or donation on this website, You agree to pay all pledges and donations specified.

B. Payment Methods. Code.org will charge the pledge or donation you authorized, if any, to the credit or debit card you designate. You authorize the credit or debit card you designate to pay any amounts described herein and authorize Code.org, or any other company that acts as a billing agent for Code.org, to continue to attempt to charge all sums described herein to your credit or debit card account until such pledge or donation are paid in full.

C. Credit Card Authorization. If you use a credit card to pay for any pledge or donation related to the Website, you will be asked to provide Code.org with a credit card number from a card issuer that we accept. Code.org may seek pre-authorization of your credit card account to verify the credit card is valid and/or has the necessary funds or credit available to cover your pledge or donation. These pre-authorizations will reduce your available balance by the authorization amount until it is released or reconciled with the actual charge. Please contact your credit card issuer if you have additional questions regarding when an authorization amount will be removed from your statement.

Disclaimers and Limitations of Liability

Please read this section carefully since it limits the liability of Code.org and its parents, subsidiaries, affiliates, related companies, officers, directors, employees, agents, representatives, partners, and licensors (collectively, the “Code.org Entities”). Each of the subsections below only applies up to the maximum extent permitted under applicable law. Some jurisdictions do not allow the disclaimer of implied warranties or the limitation of liability in contracts, and as a result the contents of this section may not apply to you. Nothing in this section is intended to limit any rights you may have which may not be lawfully limited.

A. The Services are Available “AS-IS”

Your access to and use of the Services or any Content are at your own risk. You understand and agree that the Services are provided to you on an “AS IS” and “AS AVAILABLE” basis. Without limiting the foregoing, to the maximum extent permitted under applicable law, THE CODE.ORG ENTITIES DISCLAIM ALL WARRANTIES AND CONDITIONS, WHETHER EXPRESS OR IMPLIED, OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. The Code.org Entities make no warranty and disclaim all responsibility and liability for: (i) the completeness, accuracy, availability, timeliness, security or reliability of the Services or any Content; (ii) any harm to your computer system, loss of data, or other harm that results from your access to or use of the Services or any Content; (iii) the deletion of, or the failure to store or to transmit, any Content and other communications maintained by the Services; and (iv) whether the Services will meet your requirements or be available on an uninterrupted, secure, or error-free basis. No advice or information, whether oral or written, obtained from the Code.org Entities or through the Services, will create any warranty not expressly made herein.

B. Links

The Services may contain links to third-party websites or resources. You acknowledge and agree that the Code.org Entities are not responsible or liable for: (i) the availability or accuracy of such websites or resources; (ii) the content, products, or services on or available from such websites or resources; or (iii) the protection of the privacy of personal data collected on such websites or resources. Links to such websites or resources do not imply any endorsement by the Code.org Entities of such websites or resources or the content, products, or services available from such websites or resources. You acknowledge sole responsibility for and assume all risk arising from your use of any such websites or resources.

You may provide links to the code.org site, provided (a) that you do not remove or obscure, by framing or otherwise, the copyright, trademark service mark notices or other notices on the site, (b) your site does not engage in illegal or pornographic activities, and (c) you discontinue providing links to the site immediately upon request by us.

C. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE CODE.ORG ENTITIES SHALL NOT BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUES, WHETHER INCURRED DIRECTLY OR INDIRECTLY, OR ANY LOSS OF DATA, USE, GOOD-WILL, OR OTHER INTANGIBLE LOSSES, RESULTING FROM (i) YOUR ACCESS TO OR USE OF OR INABILITY TO ACCESS OR USE THE SERVICES; (ii) ANY CONDUCT OR CONTENT OF ANY THIRD PARTY ON THE SERVICES, INCLUDING WITHOUT LIMITATION, ANY DEFAMATORY, OFFENSIVE OR ILLEGAL CONDUCT OF OTHER USERS OR THIRD PARTIES; (iii) ANY CONTENT OBTAINED FROM THE SERVICES; OR (iv) UNAUTHORIZED ACCESS, USE OR ALTERATION OF YOUR TRANSMISSIONS OR CONTENT. IN NO EVENT SHALL THE AGGREGATE LIABILITY OF THE CODE.ORG ENTITIES EXCEED THE GREATER OF ONE HUNDRED U.S. DOLLARS (U.S. $100.00) OR THE AMOUNT YOU PAID CODE.ORG, IF ANY, IN THE PAST SIX MONTHS FOR THE SERVICES GIVING RISE TO THE CLAIM. THE LIMITATIONS OF THIS SUBSECTION SHALL APPLY TO ANY THEORY OF LIABILITY, WHETHER BASED ON WARRANTY, CONTRACT, STATUTE, TORT (INCLUDING NEGLIGENCE) OR OTHERWISE, AND WHETHER OR NOT THE CODE.ORG ENTITIES HAVE BEEN INFORMED OF THE POSSIBILITY OF ANY SUCH DAMAGE, AND EVEN IF A REMEDY SET FORTH HEREIN IS FOUND TO HAVE FAILED OF ITS ESSENTIAL PURPOSE.

SOME STATES OR OTHER JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF IMPLIED WARRANTIES, SO THE ABOVE EXCLUSIONS MAY NOT APPLY TO YOU.

General Terms

A. Waiver and Severability

The failure of Code.org to enforce any right or provision of these Terms will not be deemed a waiver of such right or provision. In the event that any provision of these Terms is held to be invalid or unenforceable, then that provision will be limited or eliminated to the minimum extent necessary, and the remaining provisions of these Terms will remain in full force and effect.

B. Controlling Law and Jurisdiction

These Terms and any action related thereto will be governed by the laws of the State of Washington without regard to or application of its conflict of law provisions or those of your state or country of residence. All claims, legal proceedings or litigation arising in connection with the Services will be brought solely in the federal or state courts located in King County, Washington, United States, and you consent to the jurisdiction of and venue in such courts and waive any objection as to inconvenient forum.

If you are a federal, state, or local government entity in the United States using the Services in your official capacity and legally unable to accept the controlling law, jurisdiction or venue clauses above, then those clauses do not apply to you. For such U.S. federal government entities, these Terms and any action related thereto will be governed by the laws of the United States of America (without reference to conflict of laws) and, in the absence of federal law and to the extent permitted under federal law, the laws of the State of Washington (excluding choice of law).

C. Entire Agreement

These Terms are the entire and exclusive agreement between Code.org and you regarding the Services (excluding any services for which you have a separate agreement with Code.org that is explicitly in addition or in place of these Terms), and these Terms supersede and replace any prior agreements between Code.org and you regarding the Services. No other person or company will be third party beneficiaries to the Terms.

D. Assignment

These Terms and any rights and licenses granted hereunder, may not be transferred or assigned by you, but may be assigned by Code.org without restriction. Any assignment attempted to be made in violation of these Terms shall be null and void.

E. Indemnification

You agree, to the extent permissible by law, to indemnify, defend, and hold harmless Code.org, its affiliated companies, contractors, employees, agents and its third-party suppliers, licensors, and partners (“Code.org Indemnitees”) from any claims, losses, damages, liabilities, including legal fees and expenses, arising out of any use or misuse of the website, the Services, any violation of the Terms, or any breach of the representations, warranties, and covenants made herein, whether by You or by any Child associated with you if you are a Parent. Code.org reserves the right, at your expense, to assume the exclusive defense and control of any matter for which you are required to indemnify Code.org, and you agree to cooperate with Code.org’s defense of these claims. Code.org will use reasonable efforts to notify you of any such claim, action, or proceeding upon becoming aware of it.

We may revise these Terms from time to time and the most current version will always be at https://code.org/tos. If the revision, in our sole discretion, is material we will notify you via an e-mail to the email address associated with your account if we have it. By continuing to access or use the Services after those revisions become effective, you agree to be bound by the revised Terms.

If you have any questions about these Terms, please contact us.

Privacy Policy

Date of Last Revision: June 1, 2023

You can review the previous Privacy Policy here.

About Code.org

Code.org® is a US-based charitable nonprofit dedicated to expanding access to computer science in schools and increasing participation by young women and students from other underrepresented groups. Our vision is that every student in every school has the opportunity to learn computer science.

Your privacy is important to us. We want to be transparent about the personal data we collect, why we collect it, and what we do with it. Moreover, we want you to know your rights regarding your personal data. We recommend that you read this Privacy Policy carefully before accessing or using the Services. If you have any questions about this Privacy Policy, you can email us at privacy@code.org.

Code.org Privacy Principles

Our Privacy Policy is fueled by our commitment to the following Privacy Principles:

1. We’re deeply committed to creating a safe and secure learning environment for our students and teachers. We take the protection of this information seriously.
2. We do not require you to provide any Personal Information in order to try our courses, most of which are accessible without a User account (only your IP address is collected). However, learning progress won't be saved without creating an account.
3. The only reason we collect any data from Students or Teachers is to better succeed at our mission of providing high-quality computer science education for every student in every school.
4. We do not sell your Personal Information or exploit it for financial gain. We do not sell ads. We are a charitable nonprofit and almost all our revenue comes from philanthropic gifts and donations. We established ourselves as a nonprofit so our mission and your trust will not be in conflict with a for-profit motive.
5. Any Student academic data we provide to third-party evaluators for the purpose of evaluating our courses in meeting our mission will be de-identified (per standard industry practice).
6. We strive to provide you with access to and control over the information you give us (as detailed below), and we use physical, administrative, and technical safeguards designed to reasonably protect your information.
7. When Student Records are provided to Code.org by a school or school district, Code.org agrees to retain such information as directed by the school or school district.
8. We hold our partners and service providers to privacy and security practices no less stringent than our own.

Privacy Policy

We are committed to creating a safe and secure environment for learners of all ages and other visitors on our websites located at https://code.org, https://studio.code.org, https://hourofcode.com, https://curriculum.code.org, https://advocacy.code.org, https://k12cs.org, https://codeprojects.org, and any other websites or online services (collectively, our “Services”) that link to this Privacy Policy.

Visitors and users of the Services and participants in our education programs are referred to in this Privacy Policy individually as “User” (or “you” depending on the context) and collectively as “Users.” Any User that creates a student account is referred to as “Student” even if they are using the Code.org Services outside of a school setting. Similarly, any User that creates a teacher account is referred to as “Teacher.”

As a not-for-profit organization, we use the data we collect only insofar as it helps our mission of providing a high-quality computer science education for every student in every school. We established ourselves as a not-for-profit organization so that a for-profit motive will not interfere with our mission of providing a trusted educational resource.

Our Privacy Policy describes what information we collect, how we use it, when we may share it, how we protect it, and your choices and rights. Your use of the Services and any information you provide on the Services are subject to the terms of this Privacy Policy, which is incorporated into and subject to our Terms of Service.

By visiting or using our Services, you expressly consent to the information handling practices described in this Privacy Policy. In the event this Privacy Policy is translated into another language resulting in any potential conflict or ambiguity, the official version of the Privacy Policy shall remain the English version. Where we have entered into separate agreements with local education authorities or similar entities that supplement our Terms of Service for the processing of Student Records (as defined in the School Users and Student Records section below), such as our Student Data Privacy Addendum, the processing terms of those agreements may also apply.

Code.org is a signatory to the Student Privacy Pledge, which contains a set of principles intended to safeguard student privacy, including responsible stewardship, protection, and transparent handling of student data.

Quick Reference

How We Collect and Use Information

The sections below describe the ways Code.org collects and uses personal data, which refers to any information that Code.org can use to reasonably identify a User as an individual (directly or indirectly), as well as information that is or can be reasonably linked (directly or indirectly) to a User or a User’s device. This includes things like name, display name, email address, school name and address, telephone number, etc., provided by Users (“Personal Information”), persistent cookies or IP addresses automatically collected (“Persistent Identifiers”), as well as some of the non-Personal Information and technical information (described below) we collect that is associated with a User.

We generally collect personal data in three ways: (1) information a User voluntarily provides to us by using the Services, (2) information we automatically collect as a User uses the Services, and (3) information from third parties. The types and amounts of personal data collected vary depending on whether the User is a Student, Teacher, parent or other visitor, and on how they use the Services, but can be generally categorized as (a) account registration data (such as username, password, email address), (b) demographic data (such as age, gender, race), (c) Technical data (such as browser or device, IP address, login times), (d) User uploaded data (such as images and sounds), (e) User response or feedback data (such as survey responses and notes to and from Teachers); (f) platform usage data (such as progress data, projects created), and (g) contact data for non-curriculum processes (such as email addresses for educators, parents, and others who wish to receive newsletters and other updates).

We generally use personal data to (1) provide our Services, (2) personalize User experiences, (3) communicate with Users or others (such as donors or educators), (4) provide or facilitate professional development for CS teachers, (5) understand, improve, develop, and protect our Services, and (6) for legal, compliance, and safety reasons.

Our goal is to minimize the personal data we collect. We do not require Users to create a Code.org account or otherwise provide Personal Information in order to participate in the Hour of Code tutorials or to try our courses. However, we cannot save a Student’s learning progress or a Teacher’s class records unless a User creates a Code.org account.

Code.org Student and Teacher Accounts

The following table describes the data that Code.org collects and stores if a User creates a Code.org Student or Teacher account for use with Code.org courses.

* A Teacher account on Code.org has all the functionality of a Student account, and as a result the data collected and stored for a Teacher account is a superset of the data stored for a Student account.

Teachers can create accounts on behalf of Students. When registering an account for a Student who is under the age of 13, the Teacher represents and warrants that they or the educational organization they work for has proper permission to register the Student for a Code.org account, and that they or the educational organization has obtained the necessary parental consent for collection of the Student’s Personal Information for the use and benefit of the school and for no other commercial purpose. In addition, the Teacher agrees to be bound by the Code.org Terms of Service and this Privacy Policy on behalf of the educational organization they work for, and that they are authorized to do so. See Children’s Privacy Notice below for more information.

Third Party Authentication Services

If you register for a Code.org account through an authentication service (such as Google Accounts, Microsoft Accounts, Facebook Connect, or Clever), you give Code.org permission to store and use information already associated with your authentication service consistent with this Privacy Policy and the table above. In these instances, Code.org only receives information from the authentication services - Code.org does not share information with such services.

When using a third-party authentication service, Code.org may receive personal data (such as a Student's full name or gender) that is not required for use of the Services. For example, districts or schools that use Clever as an authentication service can permit Code.org to use existing Clever teacher and student account information to sign in to Code.org Services. Districts or schools may revoke Code.org’s access to this information in Clever at any time.

You may revoke Code.org’s access to your account on any authentication service at any time by disconnecting the respective authentication service from your account settings. You should check your privacy settings on each authentication service to understand and change the information sent to us through such service. Please review each authentication service’s terms of use and privacy policies carefully before connecting them to our Services.

Non-Curriculum Features and Other Services

When you use certain non-curriculum features of our Services, Code.org may ask you to provide Personal Information including your full name, email address, age, school or company name, and postal code or school street address, as well as your billing and/or shipping information when necessary to complete a purchase or make a donation. Examples include signing forms or petitions to help advocate for computer science, providing information to put your school on the map of schools teaching computer science, contacting us for help or information via customer support pages, subscribing to receive email communications from Code.org, participating in a workshop, signing up as a local volunteer, bringing Code.org programs to your school or district, donating to Code.org, purchasing t-shirts or other items, nominating a teacher, or participating in online surveys. This information is used to enable your participation in the relevant feature and to send you occasional emails with information about Code.org that we feel may interest you. All non-transactional emails we send include an “unsubscribe” link. (When a User identified as under the age of 16 signs our online petition supporting Code.org’s mission, any name or email address they provide is deleted from our servers and thus never used.)

If you enter your name to create a certificate of completion upon finishing select courses or exercises, we store the certificate data in order to allow you to print and/or share the certificate digitally (e.g., on social media). We periodically delete this data, which may impact the certificate sharing function.

We may ask Users to provide us with optional demographic information (such as gender, age, race or ethnicity), which we use in aggregate to better understand our User base.

Computer science educators may provide a school or classroom street address, along with a description of course offerings, in order to allow students or parents to find local schools, summer-camps, or workshops that teach computer science in their neighborhood.

If you use the Services to request that we send someone information about Code.org (e.g., nominate a teacher or administrator for professional development, or send a teacher “thank you”), we will only send them emails for the specific purpose you identify - they will not be added to any mailing lists (unless they sign up). The recipient may see your name and your description of why you submitted their information. Additionally, in the US and where applicable, we may share a nominated teacher’s name, school, and city (but not the teacher’s email address or your name) with our Regional Partner in the teacher’s state, so that our partner knows the teacher was recommended and to help process the teacher's application for a scholarship to the partner’s local workshops.

Location Information

Code.org does not request or collect GPS or other precise location data. We may collect and store non-precise location information (e.g., the approximate geographic region of a computer or mobile device, as determined from the IP address) to help provide educational experiences or email updates that are tailored for that region.

Information from Other Sources

In certain situations, we may obtain information, including Personal Information, from third parties or other sources. If we combine or associate information from other sources with personal data that we collect through the Services, we will treat the combined information as personal data in accordance with this Privacy Policy. Your sharing of Personal Information or other personal data with those third parties will also be subject to their privacy policies.

Technical Information

To provide a personalized learning and high-quality experience for our Users, we may use various technologies that automatically record certain technical information from the User’s browser or device, including browser language settings, standard log files, web beacons, or pixel tags. This technical information may include Internet Protocol (IP) address, browser type, internet service provider (ISP), referring or exit pages, click stream data, operating system, and the dates and times the User visited the Services. This information assists us in providing the Services and understanding how our Users are using the Services.

To assess information about use of our Services, we use various technological tools. For example, whether or not a User is a registered member, we may send one or more cookies to the User’s browser when they visit our Services. For more information, see the Code.org Cookie Notice or the Hourofcode.com Cookie Notice.

We may also use pixel tags (also known as a “clear GIF” or “web beacon”), which are tiny images – typically just one pixel – that can be placed on a Web page or in an email to tell us when the recipient has displayed that page or opened that email. We may allow third-party service providers to place and read their own cookies, pixel tags, and similar technologies to collect information through the Services to perform the service we’ve requested. This technical information is collected directly and automatically by these third parties.

Custom Content

Student and Teacher profiles cannot be customized with a photo.

As part of certain in-browser programming tools available on Code.org (such as “App Lab,” Game Lab,” “Web Lab,” and “Sprite Lab”), Students can upload custom images, text, sound, and videos to the Code.org platform to use within applications or “apps” that they create. These files are stored by Code.org, but are not used by Code.org for any purpose other than within the applications created by Users. When we allow uploads of images, sounds or videos by Students under age 13, we implement controls that block Student sharing of such projects as described in the table above.

Internet Simulator and Other Messages

Code.org offers a tool called the “Internet Simulator” for use in High School classrooms to model how the Internet functions. With this tool, Students participating in a Teacher-supervised classroom activity can send text-based messages to their Teacher and to other Students in their specific classroom section. Message contents are visible to the classroom Teacher and are not accessed or used by Code.org for any purpose other than in this educational tool. All messages are deleted after two hours of class inactivity, or upon a manual reset by the Teacher.

In select courses, such as the Code.org CS A AP course, Teachers may optionally enable peer review groups within their classroom sections to allow students to provide feedback on other students’ projects. The student feedback is visible only to the Teacher and to students within the group designated by the Teacher. The Teacher may disable the feature at any time and may also delete specific feedback.

In addition, Teachers may provide written feedback to their Students on coursework. Users may also send messages to Code.org for customer-support requests.

Other than the above, the Services do not directly provide any other form of messaging among Users (although Users could use Code.org tools to create apps that support messaging among individuals).

Student Email Addresses

When Students use an email address for login, Code.org does not store the email address provided by those Users in a retrievable format. Instead, we immediately create and store only a one-way hashed version of the email address (which cannot be converted back into the original address), and use it only for the purposes of login, account management, and password recovery. In fact, when creating or signing into a Student account, the actual account email address is never even transmitted to Code.org's servers. The only circumstance when Code.org's servers receive a Student's email address is if the Student forgets their password and asks to reset it. At that point, the Student is prompted to enter their email address, which is used to send them a password reset link after we verify the email address through the same one-way hashing algorithm. We then delete the clear text email address. We will, however, store and use email addresses provided by Students when they choose to participate in Non-Curriculum Features and Other Services to the limited extent described above.

For a small minority of our Students, and only if they are over the age of 18, we may offer the opportunity to participate in a “longitudinal” study to understand the multi-year impact of learning computer science. Participation in such a study is entirely optional. Students who receive an offer and choose to participate will be asked to provide their contact information (email address and optionally other forms of contact that may be more convenient for the Student). This contact information will not be shared with third parties, nor used in any way outside the purpose of such a study – to ask Students to participate in surveys. If we learn that we have inadvertently collected this information from a Student under 18, we will delete such information immediately.

No Commercial Use of Student Personal Information

Some laws, such as California’s Student Online Personal Information Protection Act (SOPIPA) and similar state laws, prohibit the gathering of the Personal Information of K-12 students for targeted advertising purposes. Code.org abides by such laws and shall not use, disclose, or compile Personal Information of Students on the Services for the purpose of marketing or advertising commercial products or services. We do not disclose Personal Information or other personal data of Students to third parties for marketing purposes.

Service Improvement and Internal Operations

We may use data (including personal data) we obtain or generate from the operation of our Services to (1) conduct internal research to improve, repair, or develop products, services, or technology; (2) identify and repair technical errors; (3) prevent, detect, protect against and respond to security threats or incidents; and (4) perform internal operations.

How We Share or Transfer Information

We do not rent or sell personal data or any other information that we collect from Users, or exploit it for financial gain in any other way. Code.org will never share or grant rights to personal data with other third-party organizations to use without your consent, except as part of a specific program or feature for which you will have the explicit ability and choice to opt-in. In particular, we do not share any personal data you provide with our donors or sponsors (only de-identified reports as described below) without your explicit consent.

The sections below explain circumstances in which we may share personal data with third parties. We may also share de-identified or aggregate data that does not reasonably identify any individual or User.

We may share personal data with third-party service providers

Code.org may use a variety of third-party service providers to support our operations. For example, we may use third parties such as email service platforms to send email, analytics companies to understand our Services usage and performance, and social networking platforms to host our videos. Similarly, we may use third-party service providers to implement and host our Services and associated services and features, provide teacher forums, process donations, provide contract and workflow management services, assist with customer support, and provide other functions in support of our organization. When we give service providers access to data, including personal data, they are only allowed to use the data to provide services for which we have contracted and based on our direction. They are not allowed to use personal data for any other reason without the user’s consent or at the user’s direction. You can find a list of third-party service providers we use here.

We may share Student personal data with the Teacher and Teacher personal data with the Student

If a Student belongs to a Teacher’s section, we will share Student account information, course progress, and standalone projects with that Teacher so the Teacher can help manage the Student’s progress. The Student will also see limited information about their Teacher including their Teacher’s display name and section information.

We may share personal data on classroom usage and Student achievement with the school or school district

In order to support school and district needs to oversee Code.org usage in their classrooms, we may allow a Student’s school or school district to access reporting data on student progress and achievement, presented on a student-level, classroom-level, teacher-level, grade-level or school-level basis for Students enrolled in a Teacher’s section. The reports available to school and district administrators will be based on the same data that is displayed on the Student progress report that is also shared with the Student's Teacher(s). If Teachers choose to give Students feedback on coursework and projects through Code.org, we may also share this with school or district administrators upon request. We may also share personal data in Student Records with third parties as directed by a school or school district. For more information about the data we may be sharing with a Student's school or school district, please click here.

We may share Teacher personal data with the Teacher's training facilitators, our Local Partner, the school district, and other partners

Code.org partners with U.S.-based nonprofit professional learning organizations (our “Regional Partners”) as well as similar organizations outside the U.S. (our “International Partners”) (collectively our “Local Partners”). We share limited personal data (never including Student personal data) with these partners to allow them to run local professional development workshops and support teachers and schools in their region. Each Local Partner signs an agreement with Code.org that requires them to comply with this Privacy Policy and to treat any information received through the partnership as confidential.

If you are a Teacher participating in one of the professional development workshops run by our Local Partners, your name and contact information will be shared with the facilitator and/or the Code.org Local Partner(s) who runs the professional learning program in your area. In addition, the facilitator, Local Partner(s), and your school district will have the opportunity to access your continued progress in our in-person and online professional learning courses in order to coach you, facilitate your additional learning, and follow your professional development progress. In some cases, your school district may require this information in order to compensate you for workshop attendance. They may also be able to see your overall class progress to support your classroom. Local Partners and facilitators will not have any data on specific Students, but they will be able to see the overall number of students and class demographics. If Code.org is paying for your travel to our professional learning workshops for Teachers, we will - with your explicit permission - share your name and contact information with our travel partner to facilitate booking your travel.

We may also share the list of schools (solely the school identities, without any personal data about Teachers or Students) that use Code.org or have participated in our professional learning program with select partners, such as a local, state, regional, or national education agencies or authorities, so long as such partners agree to treat the information as confidential.

We also provide Teachers other opportunities (such as when adding their school to the map of schools teaching computer science) to share their contact information (name, school, email) — at their option and under their control — with a Code.org Local Partner so that teachers can be contacted about local professional learning workshops, resources, and events.

Our Local Partners or other partners can sometimes provide additional programs or services such as scholarships or free supplies for schools. When these services or programs are available locally, Teachers will have the option to share their personal data, such as email address, school name, and school ID with a specific partner to opt in to a specific service or program to support their classroom.

We may share personal data Users choose to post publicly

In certain cases, Users may choose to post information that is publicly accessible on our Services. This includes making public posts as a Teacher on our forum, offering to be a volunteer if a User is over the age of 18, or choosing to put information about a User’s school or organization on a public map. When you are filling out a form to post information on our Services, we will always make it clear exactly what will be shared publicly.

Some of our Users choose to post their code-creations or other information to social networks. This functionality is entirely optional. When you post content to social networks, the content posted is entirely under your control, and never posted automatically on your behalf by Code.org. Typically this content includes only the code (i.e., the app or animation or game or other content that is part of the project) that you wrote, posted alongside any other remarks you may choose to add to it.

We may also re-share (e.g., retweet) public posts made by Users, educators, media, governments, or others on social media platforms without seeking permission.

We may share personal data when Users contact us for support

When a User contacts us with a support request, they may provide personal data, which is shared with a Code.org support representative in order to process the User’s request. Code.org support representatives are either employees or independent contractors of Code.org, and will always have signed an agreement requiring them to protect and not disclose confidential information including personal data of Users, and to use it only in the context of resolving product support requests.

We may share personal data if Users are chosen (and give permission) to be profiled on our Services

Code.org promotes Student and Teacher work on our Services and social media channels. These profiles and similar testimonials are published with the permission of the participating Student or Teacher and, if applicable, their parent, legal guardian, or teacher, and may include personal data such as the name, likeness, and photo or video of the person being profiled. As indicated above, we may also re-share public posts from other platforms (where we are not the original publisher) without seeking permission.

We may share personal data when required by law

Code.org may disclose personal data if required to do so by law, or if we have a good-faith belief that such action is necessary to comply with local, state, federal, international, or other applicable laws or respond to a court order, judicial or other government order, subpoena, warrant, or administrative request. In some cases, we may make such disclosures without first providing notice.

We may share personal data when necessary or appropriate to protect Code.org or others

Code.org may disclose personal data that we believe, in good faith, is appropriate or necessary to: take precautions against liability; protect Code.org from fraudulent, abusive, or unlawful uses; investigate and defend ourselves against third-party claims or allegations; assist government enforcement agencies; protect the security or integrity of the Services; or protect the rights, property, or personal safety of Code.org, our Users, or others.

We may share or transfer personal data in the context of a change of business, including a merger or acquisition

In the event that Code.org is acquired by, or combined or merged with, another entity, we may transfer or assign the personal data that we have collected as part of such merger, acquisition, sale, or other change of control. Our promise to you is that any personal data we have collected will be used, shared, and safeguarded by the acquiring organization under the same conditions described in this Privacy Policy.

We may share de-identified or aggregate data

We may share or publish de-identified or aggregate data about Students, Teachers, and our Services for various purposes. De-identified and aggregate data does not contain any personal data. For example:

We may provide our Local Partners with de-identified demographic information and information about usage of courses and professional learning programs for schools and districts in their area. They will not see names or contact information of any Teacher unless that Teacher chooses to share it as part of signing up for a local professional learning workshop or joining their professional learning program.

We may publish de-identified information (e.g., code.org/statistics) about Student performance on our Services. These reports will never include personal data. Instead, aggregated, de-identified data over large populations of Students may be reported by demographic criteria such as age, general location, gender, race or ethnicity, and socioeconomic status.

We may work with third parties (such as universities and education research organizations) to improve our services or offerings and disclose automatically collected and other aggregated and de-identified data to these authorized partners to conduct research on online education or assist in understanding the usage, viewing, and demographic patterns for certain programs, content, services, promotions, and/or functionality on the Services. We require any research partner that receives de-identified data from us to agree in advance that they will not attempt to use this data to identify Users.

How We Protect Information

We use reasonable safeguards to help ensure that our Services are secure, but no security measures are perfect

Code.org uses physical, administrative, and technical safeguards designed to reasonably protect the confidentiality, availability, integrity, and security of personal data and other information we collect and maintain in connection with the Services. These safeguards include, for example, restrictions on physical access to the data center, hardened system configuration, two-factor authentication, patch management, disaster recovery processes, employee security and privacy training, employee background checks, and third-party security resources, among others. We encrypt Personal Information in transit and at rest, and we have generally aligned our security practices to the NIST Cybersecurity Framework.

However, no security measures can fully ensure the security of any or all of the personal data or other information we collect and store. If you transmit personal data to Code.org you do so at your own risk. We cannot guarantee that such personal data and other information may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, administrative, or technical safeguards.

If we learn of a data security incident that compromises or appears to compromise your Personal Information or that of your Students, we will attempt to notify you electronically so that you can take appropriate protective steps.

We try to minimize the personal data we collect and store

Code.org’s goal is to minimize the personal data we collect. For instance, Code.org does not directly collect or store payment instrument data. Donations to Code.org or purchases from the Code.org store are processed via third parties, and although Code.org receives a receipt for donations (for tax purposes), we never receive the payment instrument data (such as credit card number or wallet information). Similarly, Code.org does not collect or store biometric or health-related data and other sensitive categories of data except as disclosed in this Privacy Policy.

Even when Code.org collects personal data in order to provide the Services, we attempt to minimize the data we store. For instance we intentionally choose not to store email addresses for Code.org Student accounts or phone numbers used in our send-to-phone feature.

We limit employee and authorized party access to personal data

Code.org’s officers, directors, employees, agents and contractors must have a legitimate business reason (related directly to furthering our charitable, nonprofit, education-focused mission) to access personal data we maintain about Users or others (e.g., to assist in product support). Code.org provides staff privacy and security training and will require our officers, directors, employees, agents, and contractors to comply with this Privacy Policy, and to treat any personal data of Code.org Users as confidential information.

Your Choices - How to Access, Correct, Update, or Delete Your Information

If, at any point, you wish to access, correct, update, or delete your personal data on the Code.org learning platform, you may do so from your Code.org account settings page as described below. Alternatively, you can email us at support@code.org or enter a request at https://code.org/contact. We will promptly review all such requests in accordance with applicable laws after verifying your identity. For Student accounts with a personal login, we will authenticate the request by requiring an email from the email address used to establish the account - and we will run the same one-way hash algorithm to match the request to the student account. For requests from Teachers (related to either Student Accounts in the Teacher’s section or to the Teacher’s account), we will generally require an email from the email address used to establish the account, but may be able to authenticate the account through other methods where we have additional teacher information in our records.

In the event you believe your request has been improperly denied or insufficiently processed, you may appeal that decision by submitting your request and the reasons you believe your request was improperly denied or insufficiently processed in an email to privacy@code.org. Within forty-five (45) days after receipt of an appeal, we will inform you of any additional action taken or not taken in response to the appeal, along with a written explanation of the reasons in support of the response.

Due to the nature of the Services, projects and other data created while using the Services are generally meaningful only in the context of the Services and it is not technically feasible to transmit such data to the user or other entities for use outside of Code.org. We will, however, consider specific requests for data portability on a case-by-case basis.

Unless we receive a deletion request, we may retain your personal data as long as a User account is active, as long as the personal data is necessary or useful for operational purposes, or as required under any contract or by applicable law. We may indefinitely retain information which has been de-identified or aggregated such that it is no longer personal data.

We do not engage in targeting advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning a User. Therefore, we do not process requests to “opt-out” of such processing.

Managing and Deleting Code.org Accounts

Code.org does not require an account to try our courses. However, Students and Teachers with an account may update, correct, or delete Personal Information and other personal data in their Code.org accounts at any time via the account settings page after logging into their account. Teachers can go to their section’s “Manage Students” tab to update the most common settings or to access and delete a Student’s login information. Teachers also have the ability to reset the password of any Student not using a personal email login in their section who is not also a Teacher. A parent or legal guardian of a Student under the age of 18 may also review Personal Information and other personal data and correct erroneous information, if any, by asking the Student or Teacher to access the Student account.

Except as described below, personal data of any Student that is in a Teacher's section will be under the control of the Teacher. The Teachers for these sections get access to the Student’s course progress and display name, but not their email address. If a Student is no longer associated with a Teacher’s section, that means the Student’s account will no longer be managed by the Teacher and the Student may retain possession and control of the Student-Generated content by creating a personal email login. If a Teacher deletes their own Teacher account (and all sections under their account) or removes a Student from a section they manage, the Student account in the section will also be deleted unless the Student has created a personal email login for their Student account. If the Student has created a personal email login, the Student account generally will be removed from the Teacher’s section but the Student account will not be deleted. However, we may be contractually obligated to delete, at a school’s request, all student accounts enrolled in a teacher’s section even if the student account uses a personal login. If a student wishes to maintain full control over a student account they use outside of school, the student should not use that account to enroll in a teacher’s section, and should instead create and use a separate student account for the teacher’s section.

In order to allow Users to recover deleted accounts, we will save progress, code creations and other data for a short period of time after a User executes an online deletion request. A User can email support@code.org or enter a request at https://code.org/contact to request an immediate permanent deletion of their account and all the associated data. A Teacher may also request the immediate deletion of Student accounts or particular Student projects or Student personal data the same way. Deleting a Student’s project will not delete other Students’ creations that were previously remixed from the deleted project. As part of the deletion process, we may de-identify data by removing identifiers such that remaining data cannot reasonably be used to re-identify a user. We do this to allow for ongoing research or product improvement (e.g., retaining a gender identifier to help analyze ongoing efforts to improve discrepancies in computer science learning).

We automatically delete personal data associated with Student or Teacher accounts that have remained unused and inactive for a period of time in accordance with our data retention policies.

Managing and Deleting Other Data

Deleting your Code.org account will not delete data that you may have submitted outside of Code.org's learning platform (such as signing our petition to support advocacy in your area) or on related services hosted by third parties such as our support forum or the teacher forum. Please send us an email at support@code.org or enter a request at https://code.org/contact if you would like to have this information deleted and we will take reasonable steps to do so.

School Users and Student Records

Code.org may be used in a classroom setting by schools, school districts, or teachers (collectively referred to as “Schools”). When the Services are used as part of a School’s educational curriculum, the personal data related to the School’s Student Users that is provided to Code.org by the School or collected by Code.org during the provision of the Services to a School, may include information defined as “educational records” by the Family Educational Rights and Privacy Act (“FERPA”) or be covered by other similar student data privacy laws, to which the School may be subject. In these cases, the Student’s personal data we collect, along with any other student records the school provides to us and any student-generated content is referred to as “Student Records” and we have implemented controls and procedures to help the Schools address their obligations under such laws. In some cases where we process Student Records, we may enter into separate agreements with Schools that supplement our Terms of Service, such as our Student Data Privacy Addendum.

Because many of our Student accounts are used for both School and non-School purposes, only personal data relating to Code.org accounts that are (1) created by a School (for example, when a Teacher creates the user name, login and password to establish the Student account, or when the teacher rosters a class using Google Classroom, Clever, or similar authentication service), or (2) created by a Student at the direction of a School or Teacher, using a School email address and associated with a Teacher’s section, are “Student Records.” Student Records do not include information a Student or other individual may provide to Code.org independent of the Student’s use of the Services at the direction of the School. However, if a Student User links their existing personal account to a Teacher’s section, information associated with the personal account may be considered Student Personal Data to the extent it contains data generated as part of the curriculum in the Teacher’s section. In such cases, the account may have hybrid qualities, with some control over the account shared by the Teacher (and school) and the Student. For example, refer to the data deletion discussion above under Managing and Deleting Code.org Accounts.

Children’s Privacy Notice

This privacy notice supplements our full Privacy Policy and provides additional information about how we collect, use and share Personal Information from children under the age of 13 (a “Child” or “Children”). The Code.org Services are designed for Users of all ages, including Children with the involvement of and pre-authorization by their school, teacher, parent or legal guardian. As a nonprofit entity, Code.org is not subject to the Children's Online Privacy Act (“COPPA”). However, Code.org takes numerous steps to promote parental involvement in their Child’s use of Code.org and to minimize the collection and use of Personal Information from Children as described throughout this Privacy Policy, some of which go beyond COPPA requirements, including:

• We do not collect or maintain actual Student email addresses for Student accounts (even those for Students 13 or older). We only collect and maintain a one-way hashed version of the email address which we cannot reverse.
• We do not collect full dates of birth, only age.
• We do not collect Student physical addresses or phone numbers.
• We do not generally support the display of public user profiles, except when we highlight or profile a user, with appropriate permission.
• We do not support online messaging between Students (except for the Internet Simulator function for classrooms).
• We encourage the use of screen names that are first name or first name and last initial only.
• We only display a Student’s first initial when we display projects on our Services.
• We only provide a mechanism for Students age 13 or over to post projects to their social media accounts.
• We automatically monitor some text entered in projects for elementary school courses, such as Play Lab and Sprite Lab, to help prevent sharing of personal data such as email address and phone number.
• When we allow uploads of custom images, sounds, and videos by Students under age 13, we implement controls that block Student sharing of such projects.

We do not require Users to create a Code.org account or otherwise provide Personal Information in order to participate in the Hour of Code tutorials or to try our courses. However, we cannot save a Student’s learning progress or a Teacher’s class records unless the User has a Code.org account (whether an account with a personal login or an account created by a Teacher).

Code.org account sign-up

When a Child creates a Code.org account using a personal login, we request a username, age (not birthdate), password, and email address (although we retain only a one-way hash of Student email addresses). In some jurisdictions, we may seek the consent of a parent or legal guardian before establishing the account for a Child.

A School may create a Code.org account for a Child

When Code.org is used by a School in an educational setting in classrooms with Children, we strongly recommend that Teachers not ask their students to create Code.org accounts with personal logins. Instead, we recommend that Teachers use one of the account creation methods noted below.

Teachers who have classrooms with Children can create Code.org accounts without personal logins by using either a rostering service like Google Classroom or Clever, or by creating Code.org logins with picture passwords or secret word passwords that Teachers set for each student in a Teacher section (in which case the School may avoid providing any Personal Information). When Schools create Code.org accounts in these manners, we rely on the Teacher/School to obtain required consent, if any.

As previously noted, in some jurisdictions if a Teacher chooses to have students create accounts with personal logins, we may require parental consent for the account creation - which can result in delays and hinder classroom participation. Similarly, if a Child later seeks to add a personal login to access their Code.org account independently of their Teacher or School (e.g., they wish to maintain their account and projects for use outside of school or after the school year ends), we may require parental consent in some jurisdictions to create the personal login - however, the Child will continue to be able to use their existing School login credentials pending the parental consent for the personal login.

How Parents can provide consent (where required)

Although parental consent is not generally required, in those jurisdictions where we require such consent in connection with a Child account, the parent may provide consent by responding affirmatively to an email sent by Code.org to the Parent’s email address provided by the Child during registration. We will send a reminder email after a few days if no response is received, but if we do not receive consent within the time prescribed, the Child’s account will be closed and all account information (including the parent’s email information) will be deleted from our systems. If parental consent is received, the Parent’s email address will be automatically linked to their child’s account to stay updated on their Child’s progress and projects - and the Parent email address can also be used for password recovery and to request support (including account deletion at any time) for the Child’s account. Parents will need to ensure they know their child’s email address and username for support requests.

How we restrict functionality for Child accounts

As explained in more detail in the full Privacy Policy, Code.org attempts to restrict Child account access to certain features that could potentially increase the inadvertent disclosure of the Child’s personal information through the Service.

What information we collect for a Child account, and how we use this information

We collect a username, age (not birthdate), password, and email address (although we retain only a one-way hash of Student email addresses) when a Child registers for the Service and creates a personal login. We collect information about the Child’s use of the Service (e.g., course progress; project creations; technical information; etc.) as detailed in the table at the outset of our full Privacy Policy. We use this information to provide the Service and for the purposes described in the table.

How we share or transfer information relating to a Child account

We do not rent or sell information that we collect from Users (including Child accounts), or exploit it for financial gain in any other way. We take steps to restrict user-initiated sharing of Personal Information related to Child accounts. As outlined in more detail in our full Privacy Policy, we may disclose Personal Information related to Child accounts under limited circumstances, such as to service providers who we contract with to provide services to us, Teachers and Schools, and when required by law or when necessary or appropriate to protect Code.org or others.

No Third Party Tracking and No Targeted Advertising

Code.org does not display targeted advertising on the Service. We do not disclose personal information of Children for direct marketing purposes or for targeted advertising purposes - on our site or on other sites.

How to access, modify and delete Children Accounts

As a Parent, you have the ability to access and control information about your Child - including requesting deletion of the Child account - by either logging into their account with their credentials and using the self-help delete function or by contacting us from your Parent email address associated with the child’s account (if any) at support@code.org.

In some cases, administrative controls including the ability to modify or delete the account, are held by the School and you will need to direct your request to the School. For more information, please review School Users and Student Records in the full Privacy Policy.

If Code.org learns that it has inadvertently collected Personal Information or Persistent Identifiers from children under the age of 13 without prior parental or teacher consent, Code.org will take appropriate steps to delete this information. If you are a teacher, parent or legal guardian of a Student on Code.org, you can ask us to deactivate the Student’s account and delete any hashed email address or inadvertently collected Personal Information or Persistent Identifiers. To make such a request, please email us at support@code.org or enter a request at https://code.org/contact. Before processing your request, we may verify your identity and your relationship with the Student.

Links to Other Sites and Services

The Code.org Services may link to, and may be linked from, websites operated by other entities or individuals. Some third-party websites, such as the Code.org Facebook page and Twitter page, may be co-branded with our name or logo. Use of these third-party services are completely optional and typically meant only for adult users. These services are governed by the privacy policy of these third parties. We encourage you to review these third-party privacy policies for details about how they may collect, store, and use your personal data if you choose to engage with them.

We Do Not Allow Advertising on Our Services

Code.org does not allow advertising on our Services, and we do not have the ability to collect web search history across third-party Internet websites or search engines. However, if you navigate to the Code.org Services via a web search, your web browser may automatically provide to us the web search term you used in order to find Code.org. Because Code.org doesn’t display advertising or track browsing on third-party sites, we do not do anything different in response to “do not track” signals transmitted by web browsers.

We use the embedded YouTube player in Privacy Enhanced Mode to deliver computer science videos within our curriculum. This means that YouTube does not place cookies or track viewing behavior for advertising purposes. Our student-facing curriculum does not embed any YouTube videos that are not part of our curriculum. We have disabled the “rel” functionality of YouTube, which prevents the embedded YouTube player from playing related content outside of our curriculum. We have also tagged our “YouTube” videos on the site for “child-directed treatment.” Schools can also choose to block access to YouTube, in which case we use a fallback option that plays videos directly from our Services.

We offer clearly marked links to visit Facebook or Twitter to share various things such as User creations or certificates on Code.org. Using an account on these third-party social networking services is entirely at your option and under your control, and will not result in behavioral tracking of your browsing behavior on Code.org. However, because we know that these services use behavioral targeting as part of their advertising business model, on student-facing course and activity pages, we don’t offer links to these services to Students under the age of 13, or in schools that have blocked Internet access to these services.

To opt out of various forms of internet advertising by third parties, you may visit the following links: http://www.networkadvertising.org/choices or http://www.aboutads.info/choices/. If you use these tools, you will need to opt out separately for each of your devices and for each web browser on each device. If you reside in the EU, you may manage certain advertising cookies by visiting the EU-based http://www.youronlinechoices.eu/. You may also be able to limit interest-based advertising through the settings on your mobile device by selecting “limit ad tracking” (iOS) or “opt-out of interest based ads” (Android).

International Users

Our Services are operated and managed on servers located within the United States. If you choose to use our Services from regions of the world with laws governing data collection and use that differ from U.S. law, then you acknowledge and agree that you are transferring information, including personal data, outside of those regions to the United States and that, by providing your personal data on the Services, you are providing your consent to that transfer.

Rights Under the General Data Protection Regulation (GDPR)

If you are an individual in the European Economic Area (EEA) and you choose to use our US-based Services, we collect and process personal data about you only where we have a legal basis for doing so under the GDPR or other applicable EU laws. This means we process your personal data only where:

• You give us consent to do so for a specific purpose;
• The processing is necessary for the performance of a contract between us (e.g., our terms of service) or in order to take steps at your request prior to entering into a contract;
• The processing is necessary to provide you the functionality of the Services, including to operate the Services, provide customer support and personalized features, and to protect the safety and security of the Services;
• The processing is necessary for the purposes of our legitimate interest (which is not overridden by your data protection interests), such as for research and development, to market and promote the Services, and to protect our legal rights and interests; or
• The processing is necessary to comply with a legal obligation.

If you have consented to our use of personal data for a specific purpose, you have the right to change your mind at any time, but this will not affect any processing that has already taken place. When we are using your personal data because we or a third party have a legitimate interest to do so, you may have the right to object to that use though, in some cases, this may mean no longer using the Services.

If you use our Services from the EEA, your personal data will be transferred to and processed in the United States. The United States has not sought nor received a finding of “adequacy” from the European Union under Article 45 of the GDPR. Therefore, Code.org generally relies on derogations for specific situations as set forth in Article 49 of the GDPR for such transfers. In particular, Code.org collects and transfers to the U.S. personal data (1) with your explicit consent or (2) to perform a contract with you. Code.org endeavors to apply suitable safeguards to protect the privacy and security of your personal data and to use it only consistent with your relationship with Code.org and the practices described in this Privacy Policy.

In most cases, Code.org is the controller of personal data we collect and process through the Services. In some cases, however, such as where we have entered into an agreement with an educational authority to provide the Services to its students, they may be the controller and we may be their processor (in which case you should direct any requests regarding your personal data to the controller). Where we are the controller of your personal data, you have the following rights:

• Right of access and portability. The right to obtain access to your personal data, and to receive the personal data in a commonly used format and to have it transferred to another data controller;
• Right to rectification. The right to obtain rectification of your personal data without undue delay where that personal data is inaccurate or incomplete;
• Right to erasure. The right to obtain the erasure of your personal data without undue delay in certain circumstances, such as where the personal data is no longer necessary in relation to the purposes for which it was collected or processed;
• Right to restriction. The right to obtain the restriction of the processing undertaken by us on your personal data in certain circumstances, such as where the accuracy of the personal data is contested by you;
• Right to object. The right to object, on grounds relating to your particular situation, to the processing of your personal data; and
• Right to Complain. The right to file a complaint with a supervisory authority if you believe that we have violated any of the rights concerning personal data about you. We encourage you to first reach out to us at privacy@code.org so we have an opportunity to address your concerns directly before you do so. A list of Supervisory Authorities is available here.

To exercise the foregoing rights, please contact us by sending us an email at support@code.org or enter a request at https://code.org/contact. We will consider your request in accordance with applicable law. In some cases our ability to uphold these rights may depend upon our obligations to process personal data for security, safety, and fraud prevention reasons, compliance with regulatory or legal requirements, or because processing is necessary to deliver the services you have requested. Where this is the case, we will inform you of specific details in response to your request.

Changes and Updates to Our Privacy Policy

We may update our Privacy Policy from time to time. Code.org will notify Users of any change to our Privacy Policy by posting the revised Privacy Policy with an updated date of revision on our Services. If we make material changes to the Privacy Policy we will highlight that fact with a short notice of the revision conspicuously posted on the Services homepage. We will contact Users and notify them of the changes if required by law.

We stand behind the promises we make, and will not change how we use personal data we have already collected from Users in any material way without also providing notice of the change via email, through the Services, or through other means, and obtaining consent via your continued use to any new data use policies after such notice.

Where applicable, we will not make any material changes to the Privacy Policy that relate to the collection or use of Student Records without first giving notice to the School and providing a choice before Student Records are used in a materially different manner than was disclosed when the information was collected.

Contacting Code.org

Please contact Code.org with any questions or comments about this Privacy Policy by emailing us at privacy@code.org. As set forth above, requests to access, update, or delete your personal data should be submitted by email to support@code.org or entered at: https://code.org/contact.