Privacy policy

Updated version on March 13, 2026.

Preambl

The company EduMedia publishes the educational game website Alec, en.alec-edu.com. 

EduMedia works exclusively in the field of educational digital resources. Since our creation in 2003, our clients have primarily been schools, libraries, school boards, academies, and ministries of education from several countries. We would not be here if we did not pay particular attention to respecting the privacy and protecting the personal data of our users. Before detailing our data collection policy, we would like to clarify the context of our activity:

• Alec's educational game model is based exclusively on sales of school, library, and family subscriptions.
• EduMedia does not generate any revenue from direct or indirect advertising and will never base its business model on advertising.
• Alec uses the HTTPS protocol to encrypt the data exchanged between your browser and the Alec site, so it cannot be spied on or modified.
• We only collect the data necessary to meet your pedagogical objectives from students.
• Schools and families can delete student information (first name, statistics) at any time.
• The en.alec-edu.com website servers are based in Canada. EduMedia is solely responsible for processing the data stored on its servers.
• This Charter is part of a continuous effort to protect personal data, and any updates will be communicated to users of the site, subscribers, and clients.

Definitions 

For the purposes of this document, the following terms will have the definitions mentioned below:

• Publisher or Us: EduMedia
• Alec or Resources: Collection of educational digital games for children in preschool and elementary school, accessible only with an internet connection.
• Site: Platform with access to Resources and Associated Services, accessible only to authenticated users.
• School: A public or private physical location that welcomes students to receive an education.
• You, the user: A person aged 18 or older who has an account that allows them to play games.
• Student: A minor or adult invited by the user to access the site.
• Subscription: A contract between the user and the EduMedia company for the use of the Site for a given period, the proof of which is a paid invoice.
• Class code: A four-character alphanumeric code used for student login, generated automatically by the site.
• Account: A personal account that can be created by a user from the site or by an EduMedia representative.
• Personal data: Any information relating to an identified or identifiable natural person, either directly or indirectly, by reference to an identification number or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity.
• Anonymous access: A way to connect to Alec games for which we do not collect any personal student data. The teacher will no longer be able to assign homework or follow usage statistics, but the child will be able to play.
• Partner: A person or entity that processes data for the account of EduMedia, as part of a service or performance.

1. What personal data about you is collected?

We collect two types of personal data:

• Data provided by the professor or parent via a form (registration, adding a student).
• The second type of data is collected automatically on our server via the site (pages viewed, time spent, etc.).

In addition to these data, the Site provider maintains precise records of events in log files, which record the actions of users within the system. These actions are collected automatically and sent by the user's browser. These actions are used for analysis and provide effective assistance for troubleshooting and improving the Site. These include the date and time of access to the Site, the user's IP address, reference URLs, and error messages. These data are not associated with other data sources. They are collected and stored in accordance with our privacy policy and are only used to protect the security of our users and ensure the integrity of our service.

The recipient of the data is the host of our server and operator of the website, Platform.sh. The data is exclusively processed on servers in certified data centers within Canada.

We also use third-party applications to provide our services. This includes, for example, the automatic sending of emails (activation emails, password recovery emails, etc.) or services that measure audience in order to improve our products. The list of these Partners that process personal data or that can use cookies on your computer is available in the Chapter 7.

At no time do we ask a Student to fill out a form.

Data provided by the client.

The data collected depends on the user's profile:

« Administrator » Account:

When a School subscribes to our « School » offer or requests a free trial, an Administrator profile is created for the person who will represent the School. The administrator must provide us with the following information:

• Name and first name
• Email address
• Hashed password (crypted so that it is unreadable, even for eduMedia)
• Name of the School

Purpose: The administrator is responsible for managing the administrative relationship with EduMedia as well as the commercial aspects, if applicable. He or she will also be responsible for inviting the teaching staff of his or her School.

« Teacher » Account:

When a teacher decides to subscribe to the « One Class » offer, requests a free trial, or is invited by their manager to create an account, EduMedia creates a Teacher profile for them. The teacher must provide the following data:

• Name and first name
• Email address
• Hashed password (crypted so that it is unreadable, even for eduMedia)
• Name of the School

Purpose: The ability to connect to the dashboard to play games and manage their class.

« Student » Account:

To understand what we mean by Student account, it is important to understand how a child accesses resources.

First, the teacher creates a class and provides the following information:

• Name of the class (e.g., Madame Catherine's class, Grade2 or Group 201)
• Levels (e.g., Pre-K, Cycle 2 or 3rd-4th grade)

Once a class is created, the site generates a Class code to allow all Students to play from home. It is up to the teacher to transmit this code to the Students.

At this point, Students can already play Alec games with this Class code. No personal data is collected since no Student accounts are created. It is an anonymous access.

If the teacher wants to use the additional services for Student tracking, they must register each Student individually to distinguish them in their tracking. To do so, he or she must provide one piece of personal information: 

The first name, initials, or a pseudonym.

Purpose:  The ability for Students to connect with the Class code, then click on their name to play the game and complete the homework assigned by the teacher.

Once again, a Student never fills out a form.

« Parent » Account :

When a parent decides to subscribe to Alec's « Family » offer, EduMedia must create a Parent user account. This person must provide the following information:

• Name and first name
• Email address
• First name or nickname of the children.

Purpose: The ability for the parent to connect to his/her dashboard to play and manage their children's accounts.

No banking data is collected. EduMedia works with trusted Partners to manage online payments. See chapter 7.

« Library » Account:

Lorsqu'une bibliothèque-médiathèque décide de souscrire à l’offre « Bibliothèque » d’Alec, pour offrir les jeux à ses membres, EduMedia renseigne en base les coordonnées d’une personne contact. Cette personne doit nous communiquer les données suivantes :

• Nom et prénom
• Email

Finalité : Assurer la relation commerciale, administrative et technique, notamment en ce qui concerne la réalisation du connecteur avec le portail du client.

Pour jouer avec Alec, les membres de la bibliothèque se connectent sur le portail de la bibliothèque via un accès anonyme sur lequel ne transitent aucune donnée personnelle.

When a library or media center decides to subscribe to the « Library » offer, EduMedia enters the contact person's information into the database. This person must communicate the following data:

• Name and first name
• Email

Purpose: Ensure the commercial, administrative, and technical relationship, especially regarding the creation of the connector with the client's portal.

To play with Alec, library members connect to the library portal via an anonymous access, through which no personal data is transmitted.

Newsletter, quote :

Registering for the newsletter or requesting information via our contact form (such as a quote) requires the user to provide their email address.  The data and information you provide will be stored by us for the purpose of processing the request and resolving any additional questions, if necessary. These data will not be transmitted without your consent.

Data collected automatically by the site

When the User plays on Alec, they interact with the Site. A certain number of learning data are recorded at that time:

• Game opened
• Level chosen
• Correct answers in a game
• Incorrect answers in a game
• Time spent in a game

Purpose:  Provide teachers with relevant and objective statistics on their Students' use of games.

2. Your consent

By using this Site, the User is required to accept the privacy policy and expressly consent to the collection and processing of certain data for the purposes described in the first chapter. 

The consent of the administrator or teacher is required to validate their registration. This is a checkbox (opt-in principle: if it is not « yes » it is « no ») when filling out the registration form.

Consent of Students (School offer): Since they are minors, parental consent may be necessary. It is the teacher's responsibility to obtain parental consent for the use of Alec. By accepting this privacy policy, you confirm that you have the right to use Alec with your Students. We would like to remind you that the only Student data collected is a first name or a nickname, and that the teacher can opt for anonymous access. You will also find a « letter to parents » template in your class dashboard to help you obtain parental consent.

Parent consent (Family offer): The parent must check the box to accept our Terms of Use and Privacy charter before proceeding to payment (opt-in principle: if it is not « yes » it is « no »). He then enters the names of his children.

3. Our commitments to good practices

You had the courage to read the details of the previous chapters. It is important to us to summarize in simple terms how much we care about your personal data, especially that of your students and children. 

• We collect the minimum amount of data necessary:
  • We could ask for a student's name, age, and gender. However, we only ask for their first name or a username. 
  • We could ask for the gender or address of the parent/teacher for statistical purposes or to personalize our interactions. We only ask for the minimum required to connect: an email address and a name. 
• We do not collect any « sensitive » data, i.e., data related to gender, appearance, religion, photos, address, etc.
• As soon as a form is presented, the link to this privacy policy is recalled, even if the « opt-in » consent has already occurred.
• We offer Schools the option of anonymous access, which does not collect any Student data, even though this mode prevents teachers from using many of the Site's services.
• The teacher's role is central, as it is he who will register his Students. When an educator registers, we request their consent for the collection of personal data by a « opt-in » checkbox that they must check.
• When the teacher prepares to enroll their Students in their class, we remind them of the link to our privacy policy, even if they have already given their consent. We also suggest a « Letter to Parents » to raise awareness among parents about the importance of registering their child.
• Our purging policy is stricter than what the regulations require. Thus, all data from a class (Students' first names, Class code, student statistics) is automatically deleted from our servers within one year of registration. Any inactive Teacher account is automatically deleted after 12 months, even if the Alec account of their School is active.
• We ensure that each provider (list in Chapter 7) is a qualified subcontractor under the General Data Protection Regulation (GDPR: n° 2016-679) and the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA).
• EduMedia is committed to maintaining the security of our computer systems and services through regular updates.
• The data collected is not shared, sold, or rented to any third party. We constantly improve and apply patches (also called hotfixes) to ensure the effectiveness, optimal performance, and security of our systems. These updates may include modifications to enhance security, fix bugs, or improve functionality. EduMedia reserves the right to implement these updates without notice, ensuring they do not interfere with the user experience and in accordance with our Privacy Policy. Despite the adoption of best practices to secure information and data, EduMedia cannot guarantee total security due to the evolution of malicious technologies (virus, hacking, etc.) and other unpredictable risk factors such as hardware or software failures. Consequently, EduMedia declines all responsibility for any loss or alteration of data. If a security breach affecting an user is detected, EduMedia will inform that user by email within three days of discovering the situation.

4. Who is responsible for processing your personal data on Alec?

EduMedia is responsible for processing your personal data. We act as a subcontractor based on the instructions of the payer (your school administrator or academic director of educational services, or school services center manager).

EduMedia remains your preferred contact for any questions regarding the collection and use of your personal data. You can send your questions via email to dpo@edumedia.com.

For more information about EduMedia and its contact information, please visit the Legal Notices page.

5. How long do we keep your data, and when is it deleted?  

Here, we distinguish between data related to student accounts and data related to accounts for users with the "Administrator," "Teacher," or "Parent" roles. 

• Personal data from Administrator, Teacher, and Parent accounts is kept for as long as it is necessary for the proper functioning of your account and for contact purposes, with a 2-year extension following the termination of your account. After this date, the accounts will be deleted, along with all the data associated with them.
• Inactive "Teacher" accounts are automatically deleted after 12 months, even if the subscription remains active.
• Data from Student accounts, as well as the evaluation data and class codes associated with them, are deleted at the end of the school year, even if the subscription remains active. This deletion also applies to the class codes for anonymous access.
• Regarding your consent to receive our newsletter and the email address you provided for this purpose, we will keep them for three years from the date of your subscription or your last contact with us.
• If you decide to unsubscribe by clicking the unsubscribe link at the bottom of each email, your data will be automatically deleted with immediate effect.
• Data from the contact form: The data that you enter into the contact form will be stored with us until you request that we delete it or when the purpose of storing the data no longer applies (e.g., after your request has been processed). They will be deleted one year after the request is closed.
• Log files are deleted after one year.

6. Who has access to your personal data?

Our internal services:

The personal data collected is only accessible to the members of the staff who use it. These include the customer service, accounting, and IT departments. Access to these data is protected by two-factor authentication.

Our external service Providers:

Alec subcontractors perform services for us and can access only the data necessary for the proper functioning of the services they provide.

We ensure that each provider is a subcontractor under the General Data Protection Regulation (GDPR: n° 2016-679) and the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA).

7. Alec's subcontractors

Platform.sh

All of our website data is stored on Platform.sh cloud servers, which are located in Canada for the Site.

The security of our users' data is our priority, and it is the most important criterion in evaluating our hosting choice. We have chosen to host your data with a provider that is, on the one hand, compliant with the Canadian law (PIPEDA) — the law that applies to international and interprovincial transfers of personal information — and, on the other hand, with the European regulation (GDPR), which imposes the strictest constraints on data collectors and hosts in terms of collecting and securing personal data.
Platform.sh is SOC 2 Type 2 certified for data security, confidentiality, and availability.

Data protection policy of the subcontractor: 

https://platform.sh/trust-center/security/data-security/ 

Stripe

Stripe is the payment platform used by parents to subscribe to Alec's « Family » offer. No banking information is transmitted to eduMedia. Stripe is a PCI Level 1 Service Provider (PCI DSS 1), the highest level of certification in the payment industry.

Data protection policy of the subcontractor: https://stripe.com/en-ca/privacy

Brevo

Brevo est un outil permettant l’envoi d’emails dits "transactionnels", nécessaires au bon fonctionnement du Site.

Data protection policy of the subcontractor: https://www.brevo.com/legal/privacypolicy/

Plausible

Plausible is an audience measurement tool for the Site. It records sequences of events. The publisher uses this tool to improve the user experience on the site. The recorded data is anonymous and reflects only the nature of the interaction (clicking on a given link).

Plausible uses cookies to carry out its mission. This means that if a user disables cookies, no data will be collected. This will not negatively impact their navigation or games. 

We do not transmit any personal information to Plausible. 

Data protection policy of the subcontractor: https://plausible.io/privacy

Adobe Fonts 

It is a service that allows access to a library of fonts to standardize the presentation of our content according to the computer systems.

We do not transmit personal information to Adobe.

The information collected by Adobe Fonts is available at the following URL:

https://www.adobe.com/ca/privacy/policies/adobe-fonts.html

Polyfill.io

This service ensures that the presentation of the site is the same on different browsers, even those that are outdated.

Data protection policy of the subcontractor:

https://polyfill.io/v3/security-policy

Sentry

We want to offer our users the best possible customer experience, which is why we are constantly improving and developing our site. However, not all malfunctions can be reliably excluded from the outset, for example due to programming errors. That's why we use the Sentry technical error analysis tool, which monitors system stability and identifies code errors via the temporary placement of a cookie. This analysis helps us improve our site and correct unidentified code errors. This processing is in our legitimate interest because the data is used solely to identify and analyze errors.
We do not transmit any personal information to Sentry.

Data protection policy of the subcontractor: https://sentry.io/privacy/

Neverbounce

Discord

Google Workspace

8. What data is deposited via cookies?

Cookies are small text files that are stored on a terminal (computer, tablet, smartphone) when a website is visited, an email is read, or software or a mobile application is installed or used, regardless of the type of terminal used.

The publisher uses three types of cookies on the site and other tracking technologies for the following purposes:

• Session cookies (required): These cookies store a unique session identifier and allow the user to remember their login information to the site. These cookies do not store any personal information and are not used for profiling or tracking the user. They are activated directly, even without positive action by the user.
• Essential cookies (required): These cookies improve the performance of the services to provide the user with a better experience on the site. These cookies do not require the user's prior information or consent to be deposited on their terminal.
• Analytics cookies (optional): We use Plausible to measure audience on the site. This service has been configured to anonymize the data transmitted to Plausible.

When you first visit the website, an explanatory banner about the use of cookies will ask for your consent before installing certain cookies on your device. 

The consent given will be valid for a period of 12 months.

You will find instructions regarding cookies on the most commonly used browsers and they are available via the following links:

• For Chrome, Click here
• For Edge, Click here
• For Firefox, Click here
• For Opera, Click here

9. What are your rights? 

The user has fundamental rights of access, rectification, portability, opposition, and erasure of their personal data. In accordance with its regulatory obligations, EduMedia has appointed a data protection officer. You can exercise these rights on your own behalf and on behalf of your students by writing to him at any time:  

• by email at dpo@edumedia.com
• by mail at one of the following addresses:

EduMedia                                         EduMedia
Attention to the DPO                       Attention to the DPO
8 rue Borie                                        835 avenue Turnbull
33300 Bordeaux                              Québec, Qc, G1R 2X4
France                                              Canada

Then, we will be able to request proof of your identity to verify the legitimacy of your request. 

Attention: Any request for deletion will result in the permanent closure of the corresponding accounts, which will consequently prevent access to the various contents. This irreversible decision may affect other users.

10. Modifications

This document regarding personal data may be modified in accordance with any changes to the Site.

These changes may occur at any time and without notice. In the event of a modification, users with an active subscription will receive a notification via email or a banner on our website. 

If you find these modifications unacceptable, do not use EduMedia's services.