Privacy Policy

Last updated: February 17, 2026

Think2Master LLC ("Think2Master," "we," "us," or "our") operates the website think2master.com (the "Platform"). This Privacy Policy explains how we collect, use, and protect information when you use our Platform.

1. Information We Collect

Account Information (Registered Users)

When you create an account, we collect:

• Email address — for authentication, password reset, and account notifications
• Display name — optional, for personalization and social features
• Grade level — to provide age-appropriate content and difficulty levels
• Authentication provider — which sign-in method you use (email, Google, Microsoft, or Apple)
• Age verification — whether you confirmed you are 13+ or a parent/guardian created the account

Usage Data (Registered Users)

When you use the Platform while signed in, we collect:

• Game progress — puzzle completions, achievements, streaks, and save data
• Coins earned — in-app currency for tracking progress
• Bookmarks — apps you mark as favorites
• Login history — timestamps and device type (mobile or desktop) for security auditing
• Theme preferences — light/dark mode, header color

Guest Users

Guest users can access the Platform without creating an account. We collect no personal information from guest users. All guest data (coins, preferences, game progress) is stored in the browser's localStorage on your device and is never transmitted to our servers.

Error Reports

When errors occur, we may automatically collect technical information (error type, page URL, browser type) to fix bugs and improve the Platform. Manual bug reports submitted through the "Report an Issue" feature include the description you provide.

2. Information We Do NOT Collect

• No credit card or payment information
• No location data or GPS coordinates
• No phone numbers
• No photos or camera access
• No contacts or address book data
• No browsing history outside the Platform
• No advertising tracking or third-party ad networks
• No analytics cookies (we do not use Google Analytics)

3. How We Use Your Information

• To provide and maintain the Platform
• To authenticate your account and keep it secure
• To save your game progress, achievements, and preferences
• To provide age-appropriate content based on your grade level
• To fix bugs and improve Platform performance
• To respond to support requests

4. Third-Party Services

We use the following third-party services to operate the Platform:

• Firebase Authentication (Google LLC) — handles login and stores authentication tokens
• Firebase Firestore (Google LLC) — stores user data and app content
• Firebase Hosting (Google LLC) — serves the website
• Google OAuth — optional sign-in method (user-initiated)
• Microsoft OAuth — optional sign-in method (user-initiated)
• Apple OAuth — optional sign-in method (user-initiated)

We do not sell, rent, or share your personal information with third parties for advertising or marketing purposes.

5. Children's Privacy (COPPA Compliance)

Think2Master is an educational platform designed for K-12 students and adults. We comply with the Children's Online Privacy Protection Act (COPPA):

Age Verification

• During account creation, users select a grade level. Selecting Kindergarten through Middle School (grades K-8) indicates the user is under 13 and triggers child account protections.
• Users selecting High School or above are treated as 13+ and can create standard accounts.

Parental Consent

• Child accounts require verifiable parental consent. When a grade level indicating under-13 is selected, the parent must check a consent box and provide their email address.
• We send a confirmation email to the parent with a link to verify consent. The link expires after 48 hours.
• Child accounts are created immediately but with restricted functionality until parental consent is confirmed.

Child Account Restrictions

Child accounts (under 13) cannot:

• Post comments or replies
• Like or dislike puzzles
• Submit puzzle suggestions
• Change their display name
• Participate in any social features

Child accounts can:

• Play educational games (puzzles, quizzes)
• Track learning progress and achievements
• Save game progress

Guest Access

• Children under 13 may use the Platform as guests without creating an account. Guest mode collects no personal information — all data stays in the browser's localStorage and is never transmitted to our servers.

Parent/Guardian Rights

• Review collected data — Parents can download all data collected about their child from the Settings page.
• Revoke consent — Parents can revoke their consent at any time from the Settings page. This disables social features for the child account.
• Request deletion — Parents can request complete account deletion by contacting us at admin@think2master.com.
• If we discover an account was created by a child under 13 without parental involvement, we will delete the account and associated data within 30 days.

6. Cookies and Local Storage

We use the following browser storage mechanisms:

• Theme preference (cookie + localStorage) — remembers your light/dark mode choice
• User settings (localStorage) — header color, animation preferences
• Firebase Auth tokens (IndexedDB) — keeps you signed in between visits
• Guest game data (localStorage) — coin balance, puzzle progress for guest users

All cookies and storage are strictly functional — required for the site to work properly. We do not use advertising cookies, analytics cookies, or third-party tracking cookies.

7. Data Retention

• Account data — retained while your account is active. Deleted within 30 days of an account deletion request.
• Game saves — deleted with your account.
• Error logs — retained for 90 days, then automatically deleted.
• Guest data (localStorage) — controlled entirely by your browser. Clear your browser data to remove it.

8. Your Rights

• Access — view your data via the Profile page in the Platform.
• Correction — update your display name and profile via the Profile page.
• Deletion — request account deletion by contacting admin@think2master.com.
• Data portability — request an export of your data by contacting admin@think2master.com.

9. California Residents (CCPA)

If you are a California resident:

• We do not sell your personal information.
• We do not share your personal information with third parties for advertising purposes.
• You have the right to know what data we collect, request deletion, and opt out of any future sale of data.
• To exercise these rights, contact admin@think2master.com.

10. Data Security

• All data is transmitted over HTTPS (TLS encryption).
• Firebase security rules restrict data access to authenticated users and their own data.
• No passwords are stored in plaintext (handled by Firebase Authentication).
• Accounts are temporarily locked after 5 failed login attempts.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify users via a banner on the Platform dashboard. The "Last updated" date at the top of this page indicates when the policy was last revised.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: admin@think2master.com