The short version
I built Class League to be safe for classroom use. Three things are worth knowing up front.
- Students never sign up. No email, no password, no account. They join a league with a code given to them by their teacher.
- No tracking on student pages. No analytics, no advertising, no third-party tracking.
- You can delete everything. Teachers can delete a league at any time, which removes all student teams and class lists.
What I collect
From teachers
When you create an account I store your email address and a hashed password (handled by Firebase Authentication, which is a Google product). This is needed so that you can sign in securely and access your league.
I also store the information you type into the website so that Class League can display and run your league. This may include the league name you choose, the names of students you add to your class list, team names students choose for themselves and the short reasons you record when awarding manager points.
From students
Class League is designed for teacher-led classroom use. Teachers decide what student names to enter and can use first names, initials, nicknames or anything else that works for their class.
The personal data stored about a student is the name entered by the teacher. Students also pick a made-up name for their team, which is not intended to hold personal data. The codes students use to join are randomly generated by the system and are not derived from their personal data.
Students do not provide an email address or password. There is no student account.
From visitors and contact forms
If you submit the "Contact" form, I receive the name, email and message you typed. These submissions are stored in the Class League database and a copy is sent to me by email via Web3Forms. I only use these to reply to you, never for marketing.
The homepage and teacher dashboard use Google Analytics to count visits and understand how the site is used. It runs in a cookieless mode, so it sets no cookies and cannot identify you across visits. No analytics run on the student pages.
Where it lives
Class League is built on Google Firebase, which handles sign-in, the database, and hosting. Form submissions are also relayed to my inbox by Web3Forms. Fonts are served from Google Fonts. Analytics are provided by Google Analytics.
The database is hosted in Google Cloud's European region (located in Belgium and the Netherlands), so your league and student data is stored within the EU.
That's the complete list of third parties. There are no ad networks, no embedded widgets, no social trackers.
Who can see your data
The teacher who owns a league can see everything inside that league: the class list, the codes, every student's team, points and bonus history.
I (David Riley) can see all account-level data because I run the service. I only look when I'm investigating a bug or responding to a support email, and never share data with anyone outside Class League.
No one else can see your students' data unless you, as the teacher, choose to share something (for example by printing the handout or showing the projector view of the league table).
Inside a league, students can see the class league table, which lists each team and its points. Students only ever see team names, never real student names. Each student's real name is kept in your class list, which only you can see. Anyone you give a league code to can view the team-name table and scores, so please share codes only with your own class.
How long I keep it
- Teacher accounts: as long as you keep them. Sign in any time to use them, or delete them when you no longer need the service.
- Leagues and student data: as long as the league exists. Deleting a league removes all student teams, codes, bonus history and class lists for that league.
- Form submissions: kept for as long as I might reasonably need to follow up. Email me to ask for deletion at any time.
Students' data
Class League is intended for use with students, so I designed it around data minimisation from the start.
- Students never sign up. They are not asked for an email, a password, a date of birth or any other personal detail.
- The only personal data stored about a student is the name you type for them in your class list, which only you can see. Teachers are encouraged to use first names, initials or nicknames.
- The student pages do not load Google Analytics or any other tracking tools.
- There is no advertising and no profiling. Points are calculated from in-game actions only.
Class League is intended to be used under the supervision of a teacher, who acts as the responsible adult for the students using the service in their class.
Class League is designed in line with the UK's Age Appropriate Design Code (the Children's Code), which sets out how online services should protect children's data.
Cookies
Firebase sets cookies and uses browser storage so that teachers stay signed in between visits.
Google Analytics runs in a cookieless mode on the homepage and teacher dashboard. It counts visits without setting any cookies or storing anything in your browser.
The student pages set only the minimum browser storage needed to keep the student's choices visible while they play.
Who is responsible for the data
When a school uses Class League with its pupils, the school is the data controller for that pupil data, and Class League is a data processor acting on the school's instructions. The school decides what pupil data is entered and handles any consent its own policies require. I process that data securely and only to provide the service. The Data Processing Agreement sets this out in full.
Why I'm allowed to use this data
I use teacher account and league data to provide the Class League service. I use contact form submissions to reply to you. I use cookieless analytics to understand whether the site is useful and working properly.
Your rights
Under UK and EU data protection law you can:
- Ask what data I hold about you
- Correct anything that's wrong
- Delete your account and all your leagues (deletion is available from the league picker)
- Object to processing
- Complain to the Information Commissioner's Office (ICO) if you are in the UK
To exercise any of these rights, email me through the Contact form on the homepage.
Contact
Class League is built and operated by David Riley, also the creator of Triptico. Reach me through the Contact form on the homepage.
Updates
I'll list any changes to this page here, with a date.
- 26 May 2026: clarified there is no tracking on student pages, added a plain-English legal basis section and noted that form submissions are only used to reply to you.
- 10 May 2026: first publication.