Information for Schools
Privacy & Security Overview for IT Departments and Administrators
✅ Quick Summary
- ✓ No student accounts required
- ✓ No student PII collected by us (names, emails, photos)
- ✓ Students identified by anonymous aliases only
- ✓ No advertising or data selling
- ✓ Teacher-controlled data retention and deletion
- ✓ Hosted on secure cloud infrastructure (Firebase/Vercel)
What is Outlaw Roundup?
Outlaw Roundup is a free, web-based vocabulary game designed for K-12 classrooms. Teachers create game sessions with vocabulary terms, and students join using a 6-character code and anonymous alias. Teams race to match terms with their definitions.
Active vocabulary learning through collaborative gameplay
K-12 students and teachers in US and Canada
Data Model: Alias-Only Design
| User Type | Account Required? | Data Collected |
|---|---|---|
| Teachers | Yes (email/password) | Email, settings, game configurations |
| Students | NO | Anonymous alias (e.g., "Cowboy7"), game scores only |
How Students Join:
- Teacher displays a 6-character game code (e.g., "ABC123")
- Student visits the join page and enters the code
- Student selects or types an anonymous alias (e.g., "Ranger42")
- No account, email, or real name required
Student Data We Do NOT Collect
No Advertising or Data Sales
- ✓No targeted advertising — Outlaw Roundup displays no ads
- ✓No data selling — We do not sell user data to any third party
- ✓No behavioral profiling — We do not build profiles on students for non-educational purposes
- ✓No third-party trackers — We do not use advertising trackers or analytics that share data with ad networks
Hosting, Security & Data Residency
📍 Data Residency Notice
All Outlaw Roundup data is stored on servers located in the United States. This includes teacher account information and game session data. We use US-based infrastructure from Google (Firebase) and Vercel. We do not currently offer data residency in Canada or other regions.
Infrastructure
- • Database: Firebase Firestore (Google Cloud) — US region
- • Authentication: Firebase Auth (Google) — US region
- • Hosting: Vercel — US-based CDN
Security Measures
- • HTTPS encryption for all data in transit
- • Encryption at rest for all stored data
- • Role-based access controls
- • Firestore security rules limiting data access
- • No advertising, no tracking pixels, no data selling
- • No storage of payment or financial information
Data Retention & Deletion
Teachers have full control over data retention:
- •Teachers can delete individual game sessions at any time
- •Automatic deletion can be configured (24 hours, 7 days, 30 days, 90 days)
- •Teachers can delete their entire account and all associated data
- •Schools can request deletion of all data for their organization
Compliance Positioning
Outlaw Roundup is designed as a "low-PII educational tool" that minimizes data collection to facilitate school adoption:
🇺🇸 US (COPPA/FERPA)
- • No direct collection of student PII
- • Teachers act as authorized school officials
- • Data used only for educational purposes
🇨🇦 Canada (PIPEDA / Alberta)
- • Data minimization by design
- • No student personal information collected
- • Teacher acts for the school as public body
Alberta school divisions
Alberta's FOIP Act was replaced in June 2025 by the Access to Information Act and the Protection of Privacy Act, which govern school divisions as public bodies. Two points a division's privacy officer will typically want:
- Data residency: our Firestore database is hosted in a United States multi-region. Game data held there contains anonymous aliases only — no names, emails or student identifiers.
- Class rosters: optional, and stored only in the teacher's own browser on their own device. Names are shortened to a first name and last initial on import, and are never transmitted to us. No student personal information leaves Canada through Outlaw Roundup.
Note: This overview is for informational purposes and does not constitute legal advice. Schools should review with their own privacy officer or legal counsel, and we are glad to complete a division's own privacy impact assessment on request.
How Schools Can Request Data Actions
🗑️ Request Data Deletion
Contact us at privacy@outlawroundup.com with your school domain and we will delete all data associated with teacher accounts from that domain.
📋 Request Data Export
Teachers can export game results as CSV files directly from their dashboard. For bulk exports, contact us at the email above.
❓ Questions or Concerns
For any privacy or security questions, please contact us at privacy@outlawroundup.com. We aim to respond within 2 business days.
Data Processing Addendum for Schools
Sample Data Processing Addendum (DPA)
Schools that require a formal data processing agreement can download our sample DPA. This document outlines our data handling practices, security commitments, and compliance positioning.
📥 View & Download DPAContact Information
Privacy Inquiries: privacy@outlawroundup.com
Technical Support: support@outlawroundup.com
General Information: info@outlawroundup.com
Need a PDF version of this document for your records?