Buffalo Knight protecting your privacy

Privacy Policy

How we protect your data

Last updated: September 2026

1. Information We Collect

Educator Account Information: Name, email address, password (encrypted), and payment information (processed securely via Stripe). Only educators and authorized school personnel create accounts on our platform.

Usage Data: Features used, browser and device information, and error logs to improve our service. This data is collected only from educator interactions with our website and dashboard.

2. Information We Do NOT Collect

Be The Buffalo does not collect, store, process, or transmit any student data. Specifically, we do not collect:

  • Student names or personal information
  • Student responses or activity data
  • Classroom roster information
  • Student IP addresses, device identifiers, or location data
  • Any data that could directly or indirectly identify a student

Our platform requires no student accounts. Students do not log in, register, or interact with our systems in any way. All classroom content is delivered by the educator through a projector or shared screen.

3. COPPA Compliance

Be The Buffalo is fully compliant with the Children's Online Privacy Protection Act (COPPA). Because our platform is designed exclusively for educator use and collects no student data whatsoever, there is no collection of personal information from children under 13. No parental consent mechanism is required because no student data is collected.

4. FERPA Compliance

Be The Buffalo does not access, collect, or store student education records as defined under the Family Educational Rights and Privacy Act (FERPA). Our platform does not function as a "school official" under FERPA because educators use the platform to deliver content to their classrooms without any student data entering our systems. No Data Sharing Agreement or student data addendum is required.

5. Analytics

With your permission, we use two analytics services to understand how educators use and interact with our website and account dashboard so we can improve them:

  • •PostHog for product analytics (which pages and features are used) and session replay (a reconstruction of how a page was navigated). Session replays mask everything you type into forms, and PostHog is configured to discard IP addresses.
  • •Google Analytics for aggregate page-view statistics.

Neither service runs until you choose "Accept all" in our cookie preferences. If you choose "Necessary only," or your browser sends a Global Privacy Control signal, no analytics cookies are set and no analytics data is collected. You can change your choice at any time from the "Cookie preferences" link in the footer.

Analytics apply only to our educator-facing website and account dashboard. They do not run on classroom-delivered content, projector activities, or student-facing materials. Students are never tracked by our analytics tools.

For more information about how these providers handle data, see the PostHog Privacy Policy and the Google Privacy Policy.

6. Data Sharing

We do not sell, rent, or trade your data. We share educator data only with the following service providers as necessary to operate the platform:

  • •Stripe for secure payment processing
  • •Email provider for transactional emails only (such as account confirmations and receipts)
  • •PostHog for product analytics and session replay, only after you accept analytics cookies, as described above
  • •Google Analytics for aggregate page-view statistics, only after you accept analytics cookies
  • •Legal requirements when required by applicable law

7. Data Storage and Location

All data is stored on servers located in the United States, including analytics data, which is held in PostHog's US Cloud region. We use industry-standard security measures including encryption in transit (TLS) and encryption at rest to protect your information.

8. Data Retention

Educator account data is retained for the duration of your active subscription. Upon account cancellation or deletion, your personal data is removed from our active systems within 30 days. Anonymized usage data that cannot identify you may be retained for service improvement purposes.

You may request immediate deletion of your data at any time by contacting us.

9. Your Rights

You can access, correct, delete, or export your data at any time. To exercise any of these rights, contact us.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of any material changes via email or through our platform. Continued use of the platform after notification constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us.

Back to Home