MathHill Privacy Policy

Information we collect

Enquiries and contact information

When a parent or guardian contacts us, we may collect their name, email address, optional phone number, their child’s grade, and anything they choose to include in a message. Please do not send sensitive information or unnecessary personal details about a child. Website contact-form submissions are sent through Resend to MathHill’s Gmail inbox so that we can respond. The website does not maintain a separate database of contact-form submissions, although copies may remain with Resend and Gmail under their respective retention practices. Calling, texting, or emailing MathHill directly also sends information through the communications providers used by you and MathHill.

To reduce spam and repeated automated requests, the contact form uses technical safeguards including a hidden spam field, a signed form timestamp, and a temporary request limit. For that limit, the server temporarily holds a salted representation derived from the connection’s IP address, together with a count and expiry time. It expires after approximately ten minutes or when the relevant server instance ends and is not sent to our analytics service.

Booking information

When a parent or guardian books a session, our scheduling provider may collect contact details, appointment information, and answers entered into the booking form. MathHill receives the information needed to arrange and provide the session. The booking page uses an embedded calendar provided by Cal.com. Loading or using the calendar connects the visitor’s browser to Cal.com, which receives connection information and information entered into the booking interface and may use its own cookies or browser storage. Depending on the booking, an online session may use Zoom, Google Meet, or Cal Video powered by Daily. The applicable provider processes the connection and meeting information necessary to provide the session. Calendar invitations and notifications may also create separate copies of booking information.

Parents may contact MathHill by email or phone if they prefer to arrange a session that way. MathHill’s website analytics preference controls MathHill’s optional browser analytics. It does not control processing performed directly by Cal.com or the applicable meeting provider.

Tutoring information

During tutoring, parents or students may choose to share homework, questions, test topics, learning needs, or other educational information. We use this information to provide tutoring, prepare or adapt instruction, and communicate about the student’s progress. MathHill does not record tutoring sessions.

Practice activities

Students may use our free Playgrounds without creating an account. MathHill does not save students’ names, answers, scores, questions, hints, or individual learning progress from these activities. When optional analytics are enabled, a Playground opening may be counted using a fixed page label, a date rounded to the UTC day, and a new random record identifier. MathHill’s server does not forward the visitor’s IP address, browser details, cookies, referrer, URL query, or a visitor identifier to PostHog as part of this Playground count. These counts are approximate page-opening counts rather than counts of individual children. They are kept separate from parent enquiry analytics and are not used for advertising, profiling, marketing attribution, or measuring an individual student’s learning progress. Ordinary hosting and security processing still occurs when a Playground page, image, or other website resource is requested.

Lesson videos

Students may watch MathHill’s lesson videos without creating an account. The videos are hosted and played by Mux, as described under Hosting and security. MathHill does not save which lesson videos a student watches or how much of a video a student watches.

Online assessments

Students may take our free online assessments without creating an account. An assessment asks multiple-choice questions only and does not ask for a student’s or parent’s name, email address, or other contact details. Answers are held in the browser’s memory while the assessment page is open, and refreshing the page or choosing Retake clears them. Results, including the score and skill-area results, are shown on screen only. MathHill does not receive, save, or send assessment answers, scores, or results, and assessment pages do not store them in cookies or browser storage. MathHill does not collect analytics events from assessment pages. Ordinary hosting and security processing still occurs when an assessment page, image, or other website resource is requested.

Website and device information

Like most websites, our hosting and security providers receive technical information needed to deliver and protect the website. This may include an IP address, browser information, requested address or page, and request time. Please avoid putting personal information into website addresses or URLs.

Optional website analytics

If optional analytics are allowed, MathHill uses PostHog’s U.S. service on parent-facing pages to understand how visitors find and use the website, improve its content and reliability, and measure enquiries and browser-observed booking activity. The website and Playgrounds remain usable when optional analytics are refused.

Depending on the page and interaction, analytics may include the page viewed; event time; fixed link, control and section labels; scroll or section milestones; estimated foreground activity; form stages and fixed field or error categories; calendar readiness and fallback events; bounded page, calendar and form timings; supported web-performance measurements; and fixed application-failure categories. We do not send typed form values, unrestricted page text, error messages, stack traces, console contents, pointer coordinates, or individual click timestamps to PostHog.

For certain booking and contact controls, we may measure whether the control was visible and detect a short sequence of repeated clicks as a limited signal that an interface may not be working as expected. This does not record what a visitor types and is not treated as proof that a visitor was frustrated.

Analytics may also include limited technical information such as a window-width class, estimated mobile, tablet, or desktop device type, browser and operating-system family and major version when available, and a broad browser-language code. We do not use raw user-agent strings, specific device models, or fingerprinting identifiers for this analytics setup.

Referral and campaign information

Where supplied by the browser, we may use reviewed referring-site categories, root or fixed service domains, and approved campaign source, medium, name, or content labels to understand how visitors find MathHill. Reviewed sources may include search engines, social websites, and recognized AI-assistant referral domains. We exclude full referrer URLs, personal or unapproved campaign text, advertising click identifiers, unrelated query parameters, and URL fragments. When referral information is unavailable, it may be categorized as direct or unknown rather than guessed.

Analytics identifiers

On parent-facing pages, optional analytics use a random first-party browser identifier to estimate repeat visits and a random session identifier to connect activity within a visit. The browser identifier is used for up to 90 days from its creation. A session ends after 30 minutes without recorded activity or after a maximum of 24 hours. These identifiers, visit counts, and limited attribution information may be stored in the browser’s local storage. If browser storage is blocked, some measurements may be limited to the current page or document. We do not use contact details as analytics identifiers, connect analytics identifiers across devices, or create PostHog person profiles. These analytics events are pseudonymous rather than legally anonymous.

Approximate location

When optional analytics are allowed, MathHill may obtain an approximate country, state or region, and city from connection metadata supplied by Vercel. Vercel derives this information from the connection’s IP address. Approximate location can be inaccurate because of VPNs, mobile networks, routing, and other technical factors. It does not establish a visitor’s home or precise physical location. MathHill does not request GPS permission or collect coordinates, a postcode, or a street address for analytics. Refusing optional analytics or enabling Global Privacy Control prevents MathHill’s optional analytics location lookup.

Network requests to PostHog necessarily expose the connection IP address to PostHog while the request is being transmitted and before PostHog’s storage controls apply. MathHill’s PostHog project is configured to discard client IP addresses and disable PostHog’s GeoIP enrichment. MathHill instead uses the limited Vercel-derived location described above.

Enquiry and booking analytics

When our email provider accepts a genuine contact-form submission, MathHill may record a separate analytics count using a fresh random record identifier without the message contents, browser or session identifiers, device information, or location information. If parent-page analytics are allowed, MathHill may also use validated random browser, session, and submission identifiers to associate an accepted contact submission with the observed parent website journey. Typed form values are not included in these analytics events. An email-provider acceptance event indicates that the provider accepted the message for processing. It does not establish that the message was ultimately delivered, that an enquiry was qualified, or that tutoring was purchased.

When supported by the embedded booking calendar, MathHill may observe fixed booking-status events such as booking creation, cancellation, or rescheduling. A booking reported as created may still require confirmation. These analytics events do not include attendee details, booking-form answers, or meeting links.

MathHill may also receive signed server-to-server booking notifications from Cal.com. After validating those notifications, MathHill may send PostHog limited operational categories, notification time, and protected booking-record identifiers used for duplicate detection and status changes. We do not send attendees, booking answers, appointment times, meeting links, the raw Cal.com notification, parent browser or session identifiers, device information, location information, or campaign information with these operational booking totals. These operational totals are not joined to parent browsing journeys. Because these server-to-server booking notifications occur separately from a visitor’s browser, the website analytics preference does not control these limited operational booking totals.

Limits of analytics measurements

Analytics reports describe observed events, sessions, and estimated browsers rather than verified individual people or exact attention. Shared devices, cleared browser storage, analytics refusal, browser or content blockers, failed event delivery, and other technical factors can affect these measurements. MathHill uses fixed scroll and section milestones rather than continuous mouse or scroll recordings. We do not enable session recordings, heatmaps, unrestricted autocapture, analytics surveys, analytics experiments, or advertising profiles. Enquiry and website-performance reports describe observed associations and should not be interpreted as proof that a particular website interaction caused an enquiry, booking, or purchase. MathHill has opted out of PostHog’s optional Product and Model Development use of our customer content and limits access to analytics information to authorized people.

How we use information

• Respond to enquiries from parents and guardians
• Schedule and provide tutoring sessions
• Prepare for tutoring and communicate about lessons and student progress
• Operate, secure, troubleshoot, and improve the website
• Understand general interest in MathHill’s pages and services
• Measure enquiries and limited booking activity
• Maintain appropriate business, tax, and accounting records
• Comply with legal obligations
• Protect the safety, security, and rights of MathHill, our students, families, and others

We do not sell personal information. We do not use a child’s personal information for targeted advertising. We do not use Playground or assessment activity to build advertising or learning profiles about individual children.

Who receives information

We use service providers that help us operate MathHill, including:

• Cal.com for scheduling
• Zoom, Google Meet, Cal Video, or Daily when applicable to online sessions
• Resend and Gmail for messages and email delivery
• Vercel for website hosting, delivery, and security
• Mux for hosting and playing lesson videos
• PostHog for the limited analytics described in this policy

These providers receive information appropriate to the services they provide and process information under their respective terms and privacy practices. We may also disclose information when required by law, when reasonably necessary to protect someone’s safety or legal rights, or as part of a merger, acquisition, sale, reorganization, or other future business transfer where applicable. We do not share personal information with unrelated companies for their own marketing. Our analytics setup does not send information to advertising networks or use information to create advertising profiles.

Hosting and security

Vercel hosts the current MathHill website and processes connection and request information necessary to deliver the website and protect it from abuse. This may include IP addresses, browser information, requested addresses, and request times, including requests made from Playground pages. MathHill does not currently configure Vercel log drains for the website. Website fonts are served as website files rather than being requested from Google when a visitor loads MathHill. MathHill’s application is designed not to log contact-form contents, analytics country-lookup payloads, Playground counter payloads, or provider error messages.

Mux hosts MathHill’s lesson videos and delivers them to the video player on MathHill’s pages. When a page shows a lesson video, the visitor’s browser connects to Mux, which processes the connection and request information necessary to deliver the video, such as IP addresses, browser information, requested addresses, and request times. MathHill sets up the Mux video player with Mux’s viewer analytics turned off and without Mux cookies.

We use reasonable administrative and technical safeguards and limit access to information to people who need it to operate MathHill. No website, online service, transmission method, or storage system can guarantee absolute security.

Students and children

MathHill serves children, so we design our public website and practice activities with that in mind. Our home, booking, and contact pages are intended for parents and guardians. Parents and guardians, not children, should complete contact and booking forms.

A student under 13 may use the free Playgrounds and online assessments without creating an account but should not send MathHill their name, email address, phone number, files, or other personal information through the website. MathHill does not currently offer student accounts or store individual Playground or assessment answers, scores, questions, hints, results, or learning progress. The PostHog browser SDK is not loaded on Playground, lesson video, or assessment pages. Playground, lesson video, and assessment pages do not use parent analytics identifiers or the parent analytics location lookup.

Parents may nevertheless provide information about a child when contacting MathHill or booking tutoring. Before introducing a website feature designed to collect personal information directly from a child under 13, MathHill will provide any notice and obtain any parental permission required by applicable law. If you believe a child has provided MathHill with personal information without appropriate permission, please contact us. We will review the information and delete it where required. An analytics preference is not age verification or parental consent.

Retention

We keep personal information only as long as reasonably necessary for tutoring, communication, security, recordkeeping, legal obligations, and the other purposes described in this policy. Different systems have different retention arrangements.

Contact enquiries

Our policy is to review closed contact enquiries regularly and generally delete them when they are more than 12 months past the last interaction. Deleted Gmail messages may remain in Gmail’s Trash for a period before final removal under Google’s applicable processes.

Analytics identifiers

MathHill stops reusing a remembered browser identifier after 90 days from its creation. A session identifier expires for MathHill’s analytics purposes after 30 minutes without recorded activity or after a maximum of 24 hours. Expired local-storage records may be replaced or removed during a later eligible website visit. Browser local storage does not itself provide automatic physical expiration in every circumstance.

Analytics preference

The website’s analytics preference is stored in a first-party cookie for up to one year. Clearing the website’s data in the browser clears that preference.

PostHog

MathHill’s current PostHog plan provides a documented one-year event-query window where PostHog applies that limit. This should not be interpreted as a guarantee that every underlying provider copy or backup is physically erased at exactly one year. Because MathHill does not create PostHog person profiles, the ability to identify and selectively delete older or unlinked analytics events may be limited. If a deletion request concerns analytics information, we will assess what information can reasonably be located and use available provider processes where appropriate.

Resend

Resend describes standard email-data retention and separate backup retention periods. MathHill uses Resend’s ordinary retention process and may use available provider procedures when responding to an appropriate deletion request.

Cal.com and connected services

Booking information may remain with Cal.com under its applicable retention practices. Deleting a booking from one service does not necessarily delete copies that were created in connected calendars, email systems, meeting providers, or other services.

Hosting

Vercel maintains hosting and runtime information according to the applicable service configuration and retention practices. Provider security records or backups may follow different retention periods.

Your choices and privacy requests

A parent or guardian may contact MathHill to request access to, correction of, or deletion of personal information associated with them or their child. Where applicable law provides additional privacy rights, MathHill will handle qualifying requests in accordance with those requirements. We may need enough information to locate the relevant record and reasonably verify that the requester is authorized to receive, correct, or delete it. Please do not send unnecessary sensitive information when making a privacy request. MathHill does not routinely request identity documents or a child’s birthdate merely to locate analytics information. Random browser identifiers may help locate certain parent analytics events while those identifiers remain available, but we may be unable to associate older, operational, aggregated, or otherwise unlinked records with a particular visitor.

Analytics choices and Global Privacy Control

Visitors can refuse optional analytics, reset the website’s analytics identifiers, or enable Global Privacy Control in a supported browser. Refusing optional analytics does not prevent use of the MathHill website or Playgrounds. Refusing analytics, enabling Global Privacy Control, resetting analytics, or clearing site data stops or clears the applicable browser identifiers and prevents new optional browser analytics as described in this policy. These actions can discard pending browser analytics work, but they cannot recall a request that has already been transmitted or automatically delete historical analytics events already received by a provider.

These controls apply to MathHill’s optional website analytics. They do not control processing performed directly by third-party services a visitor chooses to use, such as Cal.com or a meeting provider. They also do not control the limited server-to-server operational booking totals described under Enquiry and booking analytics, because those notifications do not contain the visitor’s browser analytics preference. An analytics preference is not age verification or parental consent.

Changes to this policy

We may update this policy as MathHill, its website, or its information practices develop. If we make a material change, we will update the effective date and provide additional notice when appropriate.

Contact MathHill

Questions, privacy requests, or concerns about a child’s information can be sent to:

Email: hello@mathhill.comCall or text: (832) 852-0403Website: mathhill.com

See also our Terms of Use.