Blooket Privacy Policy
Last updated June 25, 2024
Blooket LLC operates Blooket.com. We have recently experienced exponential
growth. We would like to thank the users and educators who have made this
success possible. The privacy of our users is very important to us.
Blooket LLC (“BLOOKET”) is concerned about the protection of privacy of all of
our users. Blooket wants you to be familiar with how we collect, use and
disclose information. This Privacy Policy describes our practices in
connection with information that we collect through websites operated by us
from which you are accessing this Privacy Policy (the “Website”) and through
HTML-formatted email messages that we send that link to this Privacy Policy
(collectively, the “Services”). By providing Personal Information to us, you
agree to the terms and conditions of this Privacy Policy.
BLOOKET IS COMMITTED TO REMAINING AN AD-FREE SERVICE TO OUR USERS. BLOOKET
WILL NOT ADVERTISE IN ANY FORM ON THE SITE.
This Privacy Policy explains:
- What information Blooket collects from you (and why we collect it).
- How we use and share that information.
-
The choices you have, including how to access, update and delete your
information.
-
This Policy applies to all services offered by Blooket LLC (hereinafter
referred to as “Blooket,” “we,” “us," and “our,”).
-
This policy applies to Blooket Users and Visitors as well as educators and
schools who utilize the service in a classroom setting. Blooket users are
our registered account holders. Blooket Visitors are parties invited to play
a game or engage in homework by a registered user or school. The primary
information collected from Visitors is a username of their choice.
We have done our best to write this Policy in simple, clear terms. We
encourage you to read it carefully, together with any other privacy notice we
may provide on specific occasions when we are collecting or processing
personal information about you, so that you are aware of how and why we are
using such information.
- Purpose of processing: provide access to and use of Blooket.com.
-
Legal grounds: processing based on user consent, contract performance and
the legitimate interest of the company or third parties.
-
Recipients: Blooket third-party service providers which help provide the
Service. Please see the Security measures section of this Privacy Policy for
more information.
-
User rights: access, rectification, erasure, restriction, objection and data
portability (see the Blooket Privacy Principles section of this Privacy
Policy).
-
Inquiries: for inquiries regarding this Privacy Policy please contact
Blooket at [email protected] or at the physical address listed at the
end of this Policy.
-
Additional information: to be found in Blooket's Terms of Service and this
Privacy Policy.
Personal information is any information you provide to us that personally
identifies you, like your name or email address, or any other information
which we could reasonably link to your identity. We will only collect, use,
and share your personal information in accordance with this Privacy Policy.
This Policy applies when you use Blooket through Blooket.com. In addition,
this Privacy Policy also covers Blooket's treatment of any personal
information about our users that our partners or other services might share
with us. This Policy does not apply to websites or services or practices of
companies that Blooket does not own or control. These other services have
their own privacy policies, and we encourage you to review them before
providing them with personal information. At the end of this Privacy Policy
you will find a list with our third-party service providers and a link to
their privacy policies, as well as an overview to how, why and under which
conditions they might process your personal information. Whether you are new
here (welcome!), or have been using Blooket for a long time (welcome back!),
please do take the time to get to know our privacy practices. We believe them
to be fairly clear and friendly, but if you have any questions, we are here to
help. To learn more about how we protect your privacy, send us an email at
[email protected].
BY USING THE SERVICE, YOU ACKNOWLEDGE THAT YOU ACCEPT AND AGREE TO THIS
PRIVACY POLICY. This Privacy Policy applies to your use of the Blooket
Services and personal data transferred to third parties which do not ensure an
adequate level of data protection. In addition to the foregoing, and to
further secure transfers of personal data to the United States, Blooket also
complies with the EU-US and Swiss-US Privacy Shield Frameworks as set forth by
the US Department of Commerce regarding the collection, use and retention of
personal information from European Union member countries, the United Kingdom
and Switzerland, respectively. Blooket remains responsible for any of your
personal information that is shared under the Onward Transfer Principle with
third parties for external processing on your behalf, as described in the
Europe section of this Privacy Policy.
BLOOKET provides a game-based learning tool that can be played through most
web browsers (https://www.blooket.com/). Welcome to the world of Blooket: a
new take on trivia and review games! Blooket creates an engaged learning
environment that motivates students. One player or teacher hosts the game, and
everyone else competes on their own devices.
Blooket collects user's gameplay responses. As further explained below, if the
school or teacher elects to utilize Blooket with students under a specific
age, the school will be responsible for obtaining any necessary parental
consent under the applicable laws. Users which may be teachers will be
provided with a unique code for each game. Users must consciously agree to
this Policy, by reading and accepting the Privacy Policy notice given prior to
signing up and in the verification email sent upon sign-up.
In collecting and processing your personal information, we will comply with
the data protection laws and regulations in force at the time. This requires
that the personal information we hold about you must be:
- Used lawfully, fairly and in a transparent way.
-
Collected only for valid purposes that we have clearly explained to you and
not used in a way that is incompatible with those purposes.
-
Relevant to the purposes we have told you about and limited only to those
purposes.
- Accurate and kept up-to-date.
-
Kept only as long as necessary for the purposes we have told you about.
- Kept securely.
Blooket collects personal information from users in order to provide the
Service. The personal information of students and teachers is collected and
used for the following purposes:
- To create the necessary accounts to use the Service.
- To assess the quality of the Service.
- To conduct product research and development.
- To secure and safeguard personal information.
- To access premium features, if applicable.
-
To comply with applicable laws or respond to valid legal process, including
from law enforcement or government agencies, to investigate or participate
in civil discovery, litigation, or other adversarial legal proceedings, and
to enforce or investigate potential violations of our Terms of Service or
policies.
Your rights relating to your personal information include:
- to be informed about how Blooket uses your personal information;
-
to request access to personal information held by Blooket, and to have any
incorrect, inaccurate or incomplete personal information rectified;
-
where appropriate, to restrict processing concerning you or to object to
processing;
-
to have personal information erased where there is no compelling reason for
its continued processing; and
-
where applicable, to portability of personal data, that is to say, to
receive your personal information in a structured and commonly used format.
We require that your personal information is accurate. Please let us know if
the personal information you provided us for creating your account has
changed. If we do not have the correct information, we cannot take
responsibility for information-related errors. Additionally, if we determine
that you are in violation of this Policy, you will be subject to disciplinary
action that could eventually lead to the banning of your account.
Blooket is committed to securing your personal information.
Some of the ways in which we protect your personal information include:
- We encrypt your personal information when it is stored at rest.
-
We protect your personal information with encryption during transmission
over the public Internet.
-
We use reasonable organizational and technical safeguards designed to help
protect the privacy and security of your personal information.
Some of the ways in which we encourage you to protect your personal
information include:
-
We encourage you to create a username that does not reveal your identity.
- We encourage you to create (and keep) a strong password.
-
We encourage you to be thoughtful about what you post and continue to learn
about online safety.
We try to be transparent about what information we collect, so that you can
make meaningful choices about how it is used. For example, you can:
-
Access and manage your account information by using the account settings
within Blooket.
- Delete your account and information.
When providing you with information on the processing of your personal
information, such as its collection, transfer to other countries, types or
identity of third parties to which we disclose that information and the
purposes for which we do so, we will make sure that such information is
provided in clear and understandable language. Also, initial notice on our
practices and policies will be provided when you are first asked to provide
personal information to us, or as soon as practicable thereafter, and in any
event before we use the information for a purpose other than that for which it
was originally collected.
We will only use your personal information for the purposes for which we
collected it, unless we reasonably consider that we need to use it for another
reason which is compatible with the original purpose. If we need to use your
personal information for an unrelated purpose, we will notify you and we will
explain the legal basis which allows us to do so.
When you create a Blooket account, you provide your first and last name and an
email address. We require those data elements for you to enter into the Terms
of Service agreement with us, and we process those elements on the basis of
performing that contract.
Please note that Blooket provides its Service upon explicit consent given by
you when signing up. Prior to signing up, we will direct you to our Terms of
Use and this Privacy Policy. When signing up, you will be declaring to have
read such policies and consented to them. Remember, nonetheless, that you will
be able to withdraw your consent at any time bydeleting your account by
contacting Blooket to have your account deleted. EDUCATIONAL INSTITUTIONS AND
EDUCATORS UTILIZING THE SERVICE ARE RESPONSIBLE FOR MONITORING THE RIGHTS AND
INTERESTS OF THEIR STUDENTS AND MUST THEREFORE TAKE SPECIAL CARE WHEN
REVIEWING THIS PRIVACY POLICY. EDUCATIONAL INSTITUTIONS AND EDUCATORS SHALL BE
RESPONSIBLE FOR OBTAINING, WHERE APPLICABLE, PERTINENT CONSENT FROM PARENTS,
LEGAL GUARDIANS OR ELIGIBLE STUDENTS (THOSE WHO ARE 18 YEARS OF AGE OR ATTEND
A POSTSECONDARY INSTITUTION) PRIOR TO UTILIZING THE SERVICE. BLOOKET SHALL NOT
BE RESPONSIBLE FOR ANY NEGLIGENCE OF THE EDUCATIONAL INSTITUTION IN THE
REVIEWING OF THIS PRIVACY POLICY OR THE OBTAINMENT, WHERE APPLICABLE, OF THE
NECESSARY PARENTAL CONSENT. U.S. Educational Institutions and Parental
Consent: Consistent with the requirements of COPPA, if you or your school
decide to utilize the Service with children under 13, you will be electing to
either obtain parental consent or to consent on behalf of the children's
parents directly, which is commonly referred to as "school consent." At the
same time, yet subject to exceptions, FERPA prohibits schools from disclosing
personally identifiable information from a student's education record to a
third party without written consent from the parent or eligible student.
Accordingly, schools must either obtain parental consent, or ensure that their
use of Blooket meets one of FERPA's exceptions to the written consent
requirement. Typically, schools are exempted from obtaining parental consent
under FERPA when Blooket is identified as a "school official," meaning Blooket
is performing an institutional service or function for which the school would
otherwise use its own employees. Educators and schools may disclose certain
information about students under the exception to FERPA's general prior
consent rule that are set forth in the statute and the regulations for the
disclosure of "directory information" if the school follows certain procedures
set forth in FERPA. (34 CFR § 99.31(a)(11).) FERPA defines "directory
information" as information contained in the education records of a student
that would not generally be considered harmful or an invasion of privacy if
disclosed. Typically, "directory information" includes information such as
name, address, telephone listing, date and place of birth, participation in
officially recognized activities and sports, and dates of attendance. A school
may disclose "directory information" to third parties without consent if it
has given public notice of the types of information which it has designated as
"directory information," the parent's or eligible student's right to restrict
the disclosure of such information, and the period of time within which a
parent or eligible student has to notify the school in writing that he or she
does not want any or all of those types of information designated as
"directory information." The means of notification could include publication
in various sources, including a newsletter, in a local newspaper, or in the
student handbook. The school could also include the "directory information"
notification as part of the general notification of rights under FERPA. The
school does not have to notify a parent or eligible student individually.
European Educational Institutions and GDPR: According to article 8 of the
GDPR, minors shall be entitled to give valid consent only if they are 16 years
old (unless Member States have set a lower age limit which, nonetheless,
cannot be under 13 years old). Under that age limit, processing of personal
information related to minors shall be subject to parental consent. Schools
are in control of their students' personal information and are obliged to take
all necessary measures for protecting said information. This means that
schools will have to be especially cautious when contracting any service that
may require disclosure of student personal information. In other words,
schools are data controllers in terms of GDPR and thus determine the purposes
and means of the processing of student personal data. As a consequence,
schools will also be responsible for informing students and their parents
accordingly about what data is collected, which are the purposes of
collection, how data is used and to which third parties it is disclosed,
including Blooket.
This School and Student Use notice supplements our Privacy Policy in
connection with school use. Blooket strives to implement best practices to
protect the privacy of all of our student and non-student users, alike. We
have implemented additional controls and procedures for schools, school
districts and teachers (collectively referred to as “Schools”) when they use
the Service for educational purposes through individual accounts. When the
Service is used as part of the School's educational program, the personal
information related to the School's student users (“School Users”) may include
information defined as “education records” by the Family Educational Rights
and Privacy Act (“FERPA”) or other information protected by similar state
student data privacy laws. We refer to this information as “Student Personal
Data”.
Our collection and use of Student Personal Data is often governed by our
contracts with Schools, by our Privacy Policy, and by applicable privacy laws.
For example, we work with Schools to protect Student Personal Data consistent
with FERPA and, for School Users under 13, the Children's Online Privacy
Protection Act (“COPPA”). If you have any questions about reviewing,
modifying, or deleting the personal information of a School User, please
contact your School directly.
Generally, the remainder of the processing of personal information we perform
is necessary for the purposes of our legitimate interests or those of third
parties. For example, for legal compliance purposes or to maintain ongoing
confidentiality, integrity, availability and resilience of Blooket's systems,
website, and overall services, we must keep logs of Technical Information. As
foreseen in the "Restrictions" and "Account Bans" sections of our Terms of
Service, the breach of certain rules in the use of the Service may lead to the
suspension or indefinite ban of your account, depending on the severity of the
offense. In the event of an indefinite account ban, Blooket may keep part of
your personal information, such as, but not limited to, IP address and email
address, to prevent you from accessing or using the Service.
We may occasionally update this Privacy Policy. You can see when the last
update was by looking at the “Last Updated” date at the top of this page. We
will not reduce your rights under this Privacy Policy without your explicit
consent. If we make any significant changes, we will provide prominent notice
by posting a notice on the Service and/or notifying you by email (using the
email address you provided) prior to and after changes taking effect, so you
can review and make sure you're aware of them. We encourage you to review this
Privacy Policy from time to time, to stay informed about our collection, use,
and disclosure of personal information through the Service. If you do not
agree with any changes to the Privacy Policy, you may delete your account
(although we will be sad to see you go!). By continuing to use the Service
after the revised Privacy Policy has become effective, you acknowledge that
you accept and agree to the current version of the Privacy Policy.
Blooket permits registered users to invite visitors to the website. Visitors
are only required to provide a username to play a game or complete a homework
assignment. Blooket permits children under the age of thirteen to become users
only with parental consent.
Blooket collects the minimal amount of information from users necessary to
create accounts on our Service. Beyond this information, users and visitors
can submit responses. In addition to the information entered by the child, we
automatically collect some information from any use of our Service as set
forth in the "Information Collected Automatically" section. We use this
information to provide the Service to the child, for security and safety
purposes, or as required by law or to enforce our Terms. We will not require
children to provide more personal information than is reasonably necessary in
order to participate in the Service. If we discover that we have collected
information from a child in a manner inconsistent with COPPA, FERPA or any
other applicable laws or regulations, we will take appropriate steps to delete
the information. We do not disclose any personal information about children to
third parties, except to service providers necessary to provide the Service,
as required by law, or to protect the security of the Service for other users.
Information collected from students (including personal information and
information collected automatically) is never used or disclosed for
third-party advertising, including any kind of first- or third-party
behaviorally targeted advertising, and children's personal information is
never sold or rented to anyone, including marketers or advertisers.
Blooket does not permit children under the age of 13 (a “Child” or “Children”)
to create an account without the consent and at the direction of a Parent or
School official consenting in loco parentis. Children under 13 may create an
account with the parent's consent.
When Blooket is used by a School in an educational setting, we may rely on the
School to provide the requisite consent for Blooket to collect information
from a School User under the age of 13, in lieu of parental consent as is
described in detail above in the Consent Section.
No student's profile is made available or visible to the public, or to any
other students, through Blooket. If the teacher chooses to display Blooket in
their classroom by projecting via a smartboard or interactive whiteboard,
students physically present in that classroom may see other students'
usernames, responses, comments or total scores. EDUCATIONAL INSTITUTIONS AND
TEACHERS SHALL MAKE A RESPONSIBLE USE OF THE SERVICE AND AVOID COMPROMISING
CHILDREN'S PERSONAL INFORMATION AT ALL TIMES WHEN DISPLAYING BLOOKET IN THE
CLASSROOM OR ON SOCIAL MEDIA ACCOUNTS OF TEACHERS OR SCHOOLS. BLOOKET SHALL
NOT BE HELD LIABLE FOR THE INAPPROPRIATE USE OF THE SERVICE BY THE EDUCATIONAL
INSTITUTION OR THE TEACHER.
We store the data of visitors including usernames in order to allow users to
evaluate the homework or evaluate participation in games.
-
Minimal information: As mentioned before, Blooket collects the minimal
amount of information from students necessary to utilize our Service: we ask
students who are invited to play the games or participate in homework to
only create a username. Students who join as users with parental consent or
who are above specified ages only provide names, email addresses and
usernames. Consistent with the requirements of FERPA and COPPA in the United
States and of GDPR in Europe, among other applicable laws, we only collect,
use, share, and retain student personal information for purposes for which
we were authorized by the educational institution/agency, teacher or the
student. Beyond this information, students can submit responses depending on
the activities they are assigned, that will remain private between teacher
and student. In addition to the information entered by the child, we
automatically collect some information from any use of our Service as set
forth in the "Information collected automatically" section.
-
Deleting inactive accounts: Blooket will delete inactive accounts and data
in compliance with the data retention policy of the company.
After deletion of the account or data, Blooket may retain copies and/or
backups of the mentioned information for a maximum term of eighteen (18)
months. Nevertheless, Blooket shall not be responsible for the accidental loss
or destruction of data on behalf of users. Blooket will not be obliged to
recover erased data stored in backups when erasure is attributable to users.
EDUCATIONAL INSTITUTIONS UTILIZING THE SERVICE ARE RESPONSIBLE FOR COMPLYING
WITH THE RETENTION OF STUDENT EDUCATION RECORDS FOR AS LONG AS LEGALLY
APPLICABLE. STUDENT PROGRESS MAY BE SAVED FOR EITHER SHORTER OR LONGER PERIODS
THAN THE ONES STATED ABOVE IF SO DECIDED BY THE EDUCATIONAL INSTITUTION.
TEACHER ACCOUNTS WILL BE PROVIDED WITH NECESSARY TOOLS TO MANAGE AND DELETE
STUDENT INFORMATION. BLOOKET SHALL NOT BE RESPONSIBLE FOR ERASURE OF STUDENT
PROGRESS DUE TO ACCOUNT DELETION AFTER AN EXTENDED PERIOD OF INACTIVITY OR
BECAUSE OF THE VOLUNTARY ELECTION TO DELETE TEACHER ACCOUNTS. SCHOOL OFFICIALS
MAY REQUEST DELETION OF STUDENT INFORMATION AND CONTENT AT ANY TIME BY
CONTACTING BLOOKET AT
[email protected].
Any parents that want copies of their children's personal information that we
may have stored can contact their children's school personnel to that end. If
a parent has authorized an account, they also may contact Blooket to retrieve
their child's personal information. At any time, the school can also refuse to
permit us to collect further personal information from its students, and can
request that we delete the personal information we have collected from them by
contacting us at
[email protected]. Please keep in mind that deleting
records may require us to terminate the account in question. Also remember
that before we can share the information with the school, or delete it per
your request, we will, by reasonable means, proceed to verify the identity of
the requester.
Blooket collects two types of information about you: (1) information that you
voluntarily provide us by using the Blooket Service (described below under
"Information you provide to us") and (2) information collected automatically
as result of your use of the Service (described below under “Information
collected automatically”). The types and amounts of information collected will
vary depending on whether the user is a visitor to the site invited to
participate in a game. Only minimal information is collected for both users
and visitors
There are currently two categories of users on our Service: users and
visitors. We collect and store the following types of information from each
type of user:
-
Account Sign-up and Profile Information: To create a Blooket account, you
may be asked to provide some basic information. If you create a Blooket
account as a user, you will be asked to enter your first name, last name,
username, password and email. Visitors who participate in games will be
asked only for a username.
-
Contact Information: When you choose to provide us with your personal
information through the Service in some other manner (e.g., when you request
a quote for upgrading to a "Blooket Plus", when you submit a copyright claim
or report any media on our platform, when you send us an email asking a
question, or submit a support request).
-
Billing Information: When subscribing to any of our "Blooket Plus" options,
you will be asked to provide necessary information for processing the
payment (e.g., credit/debit card number). As further explained in the
Security Measures section of this Privacy Policy, payments are processed
over Stripe through their third party website service.
Like most web-based services, we (or our service providers) may automatically
receive and log information on our server logs from your browser or your
device when you use the Service. For example, this could include the frequency
and duration of your visits to Blooket. If you use Blooket on different
devices, we may link the information we collect from those different devices
to help us provide a consistent Service across your different devices. If we
do combine any automatically-collected information with personal information,
we will treat the combined information as personal information, and it will be
protected as per this Privacy Policy. The technologies and information we
automatically collect include:
-
Cookies and Other Similar Technologies: We (or our service providers) may
use various technologies to collect and store information when you visit our
Service, including clear GIFs (also known as “web beacons”), “tags”,
“scripts”, and “cookies”. We also make use of persistent secure cookies:
persistent cookie remains after you close your browser (although they can be
removed) and may be used by your browser to identify you on subsequent
visits to the Service. We may also use, collect and store information
locally on your device using mechanisms such as browser web storage
(including HTML 5). Like many services, Blooket uses these technologies to
tailor the Service for you, and to help the Service work better for you -
for example, by remembering your language preferences.
-
Device Information: We collect, through our third-party analytics services,
device-specific information such as your operating system, hardware version,
device settings, file and software names and types, battery and signal
strength, and device identifiers. This helps us measure how the Service is
performing, and improve Blooket for you on your particular device.
-
Log Information: Like most online services, when you use our Service, we
automatically collect and store certain information in our server logs.
Examples include:
-
Details of how you used our service, such as your activity on the Service,
and the frequency and duration of your visits to the Blooket Website.
- IP Address.
-
Device event information such as crashes, system activity, hardware
settings, browser type, browser language, the date and time of your
request and referral URL.
This information helps us make decisions about what we should work on next -
for example, by showing which features are most (or least!) popular.
-
Location Information: When you use our Service we may collect and process
information about your geographic location, for example through GPS,
Bluetooth, or Wi-Fi signals. We collect coarse (i.e., city-level) location
data. We will not store or track your device location on an ongoing basis or
without your permission. We do not share precise geolocation data with third
parties, other than our service providers as necessary to provide the
Service.
Automated Decision Making (ADM) refers to a decision which is taken solely on
the basis of automated processing of your personal data. This means processing
using, for example, software code or an algorithm, which does not require
human intervention. Profiling means using automated processes without human
intervention (such as computer programs) to analyze your personal information
in order to evaluate your behavior or to predict things about you which are
relevant in the context of using Blooket, such as what kind of games or
Blooket sets you utilized. As profiling uses automated processing, it is
sometimes connected with automated decision-making. Not all profiling results
in automated decision-making, but it can.
First and foremost, you should know that Blooket does not sell or rent any
personal information to any third party for any purpose including for
advertising or marketing purposes. We use the information we collect from you
to provide you with the best Blooket experience. More specifically, this
information is used to:
-
Provide and improve the Service, for example by developing new products and
features.
- Respond to your requests for information or customer support.
- Customize the Service for you, and improve your experience with it.
-
Send you information about new features and Blooket products we believe you
may be interested in.
-
Most crucially, to protect our community by making sure the Service remains
safe and secure.
We use automatically collected information (described in the "Information
Collected Automatically" section above) to provide and support our Service,
and for the additional uses described in this section of our Privacy Policy.
We store your personal information for as long as it is necessary to provide
products and Services to you and others, including those described above
pursuant to our Data Retention Policy. Deletion will affect any on-going paid
subscriptions, which will be immediately canceled. Note we may retain and use
de-identified data (i.e., data which has been stripped off all information
that can be used to identify a person) for purposes of research, improvement
of our products and services, and/or the development of new products and
services. We may also have to retain some information after your account is
deleted, to comply with legal obligations, to protect the safety and security
of our community or our Service, or to prevent abuse of our Terms. In case we
keep copies or backups of personal information, such copies or backups will be
kept for a maximum term of eighteen (18) months after the deletion of your
account.
First and foremost, you should know that Blooket does not sell or rent your,
or your students' personal information to any third party for any purpose -
including for advertising or marketing purposes. We do not share personal
information with any third parties except in the limited circumstances
described in this Privacy Policy. No student profiles are made available to
the general public through our Service. Furthermore, students cannot share
their account information with anyone on Blooket. If you are a user, you may
choose to share information or content through the Service with other Blooket
users - for example, things like your account information or Blooket sets.
Please keep in mind that information (including personal information or
children's personal information) or content that you voluntarily disclose to
others - including other Blooket users you interact with through the Service
can be viewed, copied, stored, and used by the people you share it with. We
cannot control the actions of people with whom you choose to share
information.
-
Service Providers: We do work with vendors, service providers, and other
partners to help us provide the Service by performing tasks on our behalf -
we can't build everything ourselves, after all! We may need to share or
provide information (including personal information) to them to help them
perform these business functions, for example sending emails on our behalf,
database management services, database hosting, providing customer support
software, and security. Generally, these service providers do not have the
right to use your personal information we share with them beyond what is
necessary to assist us. Additionally, these service providers must adhere to
confidentiality and security obligations in a way that is consistent with
this Privacy Policy.
-
Analytics Services: We use analytics services, including mobile analytics
software, to help us understand and improve how the Service is being used.
These services may collect, store and use information in order to help us
understand things like how often you use the Service, the events that occur
within the application, usage, performance data, and from where the
application was downloaded.
-
Aggregated Information and Non-Identifying Information: We may share
aggregated, non-personally identifiable information publicly, including with
users, partners or the press in order to, for example, demonstrate how
Blooket is used, spot industry trends, or to provide marketing materials for
Blooket. Any aggregated information shared this way will not contain any
personal information.
-
Legal Requirements: We may disclose personal information if we have a good
faith belief that doing so is necessary to comply with the law, such as
complying with a subpoena or other legal process. We may need to disclose
personal information where, in good faith, we think it is necessary to
protect the rights, property, or safety of Blooket, our employees, our
community, or others, or to prevent violations of our Terms of Service or
other agreements. This includes, without limitation, exchanging information
with other companies and organizations for fraud protection or responding to
government requests.
-
Sharing with Blooket Companies: Over time, Blooket may grow and reorganize.
We may share your personal information with affiliates such as a parent
company, subsidiaries, joint venture partners or other companies that we
control or that are under common control by us, in which case we will
require those companies to agree to use your personal information in a way
that is consistent with this Privacy Policy.
-
Change of Control: In the event that all or a portion of Blooket or its
assets are acquired by or merged with a third party, personal information
that we have collected from users would be one of the assets transferred to
or acquired by that third party. This Privacy Policy will continue to apply
to your information, and any acquirer would only be able to handle your
personal information as per this policy (unless you give consent to a new
policy). We will provide you with notice of an acquisition within thirty
(30) days following the completion of such a transaction, by posting on our
homepage, and by email to your email address that you provided to us. If you
do not consent to the use of your personal information by such a successor
company, you may request its deletion from the company. In the unlikely
event that Blooket goes out of business, or files for bankruptcy, we will
protect your personal information, and will not sell it to any third party.
-
With your Consent: Other than the cases above, we won't disclose your
personal information for any purpose unless you consent to it. Additionally,
as discussed above, we will never sell or rent your personal information to
advertisers or other third parties.
Blooket does not track its users over time and across third-party websites to
provide targeted advertising and therefore does not respond to Do Not Track
(DNT) signals.
It is important to us that we keep your information safe and secure. To best
provide our services, and keep your information safe, we work with a few other
companies (we can't do it all ourselves!). These companies ("third-party
service providers", "collaborators" or "agents") will only have access to the
information they need to provide the Blooket service. Below is a list of the
service providers which, subject to their terms of service and privacy
policies, may have access to personal data to process on our behalf in
accordance with our instructions, Privacy Policy and any other requirements
regarding confidentiality, security or integrity:
-
Amazon Web Services (AWS) for hosting Blooket's servers, videos, images and
audios.
-
Google Services for cloud storage, hosting Blooket's servers, analytics on
our website ("Google Analytics"), and for spam and abuse protection
("reCAPTCHA").
-
Cloudinary for creating, managing and delivering images and audio across any
browser.
- Sendgrid and Mailjet for email messaging.
-
Mongodb is a general purpose, document-based, distributed database built for
modern application developers and for the cloud era.
- Stripe as a payment processing service.
This list may change over time, and we will work hard to keep it up-to-date.
Blooket reserves the right to change or add service providers which provide
services in concert with the provisions of this agreement.
We will transfer your personal information to third-party service providers
only for limited and specific purposes. We will obtain contractual assurances
from our collaborators that they will safeguard personal information in a
manner consistent with this Policy and that they will provide the same level
of protection as per best industry standards. We recognize our responsibility
and potential liability for onward transfers to agents. Where we have
knowledge that an agent is using or disclosing personal information in a
manner contrary to this Policy and/or level of protection as required by
applicable laws and regulations, we will take reasonable steps to prevent,
remediate or stop such use or disclosure. If we transfer personal information
to non-agent third parties, that is to say, any new collaborators that are not
included in the previously mentioned list, we will (1) notify you with all
necessary information on any key elements affecting the processing of your
personal data, and (2) obtain contractual assurance from these parties that
they will provide the same level of security as per best industry standards
and in accordance with any applicable laws and regulations.
Your Blooket account is protected by a password. You can help us protect your
account from unauthorized access by keeping your password secret at all times.
The security of your personal information is important to us. We work hard to
protect our community, and we maintain administrative, technical and physical
safeguards designed to protect against unauthorized use, disclosure of or
access to personal information, such as:
-
Security Protocols: We periodically review our information collection,
storage and processing practices, including physical security measures, to
protect against unauthorized access to systems.
-
Security Technology: We continually develop and implement features to keep
your personal information safe - for example, when you enter any information
anywhere on the Service, we encrypt the transmission of that information
using secure socket layer technology (SSL) by default.
-
We ensure passwords are stored and transferred securely using encryption and
salted hashing.
-
Employee Access: We use best-effort practices to secure usernames, passwords
and any other means of gaining access to users' data.
Although we make concerted good faith efforts to maintain the security of
personal information, and we work hard to ensure the integrity and security of
our systems as per best industry standards, no practices are 100% immune, and
we can't guarantee the security of information. Outages, attacks, human error,
system failure, unauthorized use or other factors may compromise the security
of user information at any time.
-
Initial Notice: Upon the discovery of a security breach that results in the
unauthorized release, disclosure or acquisition of personal information, we
will notify electronically of such discovery to all affected users. This
initial notice will include, to the extent known at the time of the
notification, the date and time of the breach, its nature and extent, and
the Service's plan to investigate and remediate the breach.
-
Detailed Notification: Upon discovery of a breach, we will conduct a deep
investigation in order to electronically provide all affected users with a
more detailed notice of the breach, including but not limited to the date
and time of the breach, nature and extent of the breach, and measures taken
to ensure that such breach does not occur in the future. We may also post a
notice on our homepage (www.blooket.com) and, depending on where you live,
you may have a legal right to receive notice of a security breach in
writing. When it is not possible to provide all of the aforementioned
information at the same time, we will provide you with the remaining
information without undue further delay.
Both notifications will be written in plain language, will be titled “Notice
of Data Breach” and will present the information described above under the
following heading: “What Happened,” “What Information Was Involved,” “What We
Are Doing,” “What You Can Do” and “For More Information”. Additional
information may be provided as a supplement to the notice.
Upon request and in accordance with the applicable laws and regulations, we
will grant you reasonable access to your personal information that is held by
Blooket. In addition, we will take reasonable steps to permit you to correct,
amend, or delete your personal information that is demonstrated to be
inaccurate, incomplete or processed in violation of this Privacy Policy.
-
Accessing Your Information: To request access to the personal information we
have about you on file, users can contact us at [email protected]. In
some cases, we will not be able to guarantee complete access due to legal
restrictions; for example, you will not be allowed to access files that
contain information about other users or information that is confidential to
us. Furthermore, we may not be able to fulfill requests that are
unreasonably repetitive, require disproportionate technical effort or would
be extremely impractical.
-
Updating Your Information: You may update, correct, or delete some of your
profile information or your preferences at any time by logging into your
account on Blooket and accessing your account settings page. You may also,
at any time, update, correct, or delete certain personal information that
you have provided to us. To that end, users can contact us at [email protected]. Please note that while your changes may be reflected
promptly in active content, users that have previously accessed the content
may still have access to old copies cached on their device or may have
copied and stored your content. In addition, we may retain a backup copy of
the prior version for a limited period of time (maximum 18 months) or for
legal purposes.
-
Limitations: Without prejudice to the aforementioned, please note that we
may limit or deny access to personal information (a) where the burden or
expense of providing access would be disproportionate to the risks to your
privacy; (b) where the legitimate rights of persons other than you would be
violated or if necessary to safeguard important countervailing public
interests (e.g., national security) or in other limited circumstances (e.g.,
disclosure would breach a legal privilege); and (c) where applicable law or
regulatory requirements allow or require us to refuse to provide some or all
of the personal information that we hold about you. In addition, the
personal information may have been destroyed, erased or made anonymous in
accordance with our record retention obligations and practices. In the event
that we cannot provide you with access to your personal information, we will
endeavor to inform you of the reasons why, subject to any legal or
regulatory restrictions.
We hope you will love using Blooket now and always. However, if for some
reason you ever want to delete your account, you can do so by contacting us at
[email protected] and we will proceed to delete the requested data
within a reasonable period of time. Parents, legal guardians, or eligible
students may delete their accounts by contacting their educational
institution. When we delete your account, we delete any personal information
that you provided in your profile (such as your name, username, password, and
email address) and also questions, responses and comments. Please note that
information that you have shared with others, that others have shared about
you, or content other users may have copied and stored, is not part of your
account and may not be deleted when you delete your account. Part of your
personal information will remain in our possession as a copy or backup that is
part of our disaster recovery storage system for such period of time
identified in our data retention policy.
You may file a complaint concerning Blooket's processing of your personal data
to
[email protected] or by regular mail to the following address:
Blooket LLC, 409 South Ridge Avenue, Middletown, DE 19709 USA.
If you are in the European Union, you may address privacy-related inquiries to
our EU representative pursuant to Article 27 GDPR:
EU: EU-REP.Global GmbH, Attn: Blooket LLC, Hopfenstr. 1d, 24114 Kiel, Germany:
[email protected]
If you are in the United Kingdom, you may address privacy-related inquiries to
our UK representative pursuant to Article 27 GDPR:
UK: DP Data Protection Services UK Ltd., Attn: Blooket LLC, 16 Great Queen
Street, Covent Garden, London, WC2B 5AH, United Kingdom:
[email protected]
We will take steps to remedy issues arising out of Blooket's alleged failure
to comply with the principles set out in this Privacy Policy. We will respond
to your complaints within thirty (30) days. If your complaint cannot be
resolved through our internal processes, we will direct you to the state or
national data protection authority in the jurisdiction where you reside.
EEA residents and residents from the United Kingdom (UK) will have the right
to lodge a complaint to the EU Data Protection Authorities or the Swiss
Federal Data and Information Commissioner (FDPIC), Blooket will comply with
the advice of competent European Union authorities in such cases, and will
provide appropriate recourse. Blooket is also subject to the investigatory and
enforcement powers of the US Federal Trade Commission.
Blooket LLC complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and
the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework
(Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Blooket LLC
has certified to the U.S. Department of Commerce that it adheres to the
EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard
to the processing of personal data received from the European Union and the
United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the
EU-U.S. DPF. Blooket LLC has certified to the U.S. Department of Commerce that
it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF
Principles) with regard to the processing of personal data received from
Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict
between the terms in this privacy policy and the EU-U.S. DPF Principles and/or
the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more
about the Data Privacy Framework (DPF) program, and to view our certification,
please visit https://www.dataprivacyframework.gov/
In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and
the Swiss-U.S. DPF, Blooket LLC commits to refer unresolved complaints
concerning our handling of personal data received in reliance on the EU-U.S.
DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to
TrustArc, an alternative dispute resolution provider based in the United
States If you do not receive timely acknowledgment of your DPF
Principles-related complaint from us, or if we have not addressed your DPF
Principles-related complaint to your satisfaction, please visit
https://trustarc.com/ for more information or to file a complaint. The
services of TrustArc are provided at no cost to you. Blooket LLC is obligated
to arbitrate claims and follow the terms as set forth in Annex I of the DPF
Principles, provided that an individual has invoked binding arbitration by
delivering notice to your organization and following the procedures and
subject to conditions set forth in Annex I of Principles.
In the event that Blooket or the aforementioned authorities determine that
Blooket failed to comply with this policy, Blooket will take appropriate steps
to address any adverse effects arising directly from such failure and to
promote future compliance.
As part of a global organization, Blooket operates both within and outside the
European Economic Area (the “EEA”) and from time to time we may transfer your
data from the EEA for processing in a territory outside the EEA that does not
have the same statutory levels of data protection as the EEA. Residents in the
European Union are entitled to certain rights with respect to personal
information that we hold about them:
-
Right of access and portability.
The right to obtain access to your personal information, along with certain
related information, and to receive that information in a commonly used
format and to have it transferred to another data controller;
-
Right to rectification.
The right to obtain rectification of your personal information without undue
delay where that personal information is inaccurate or incomplete;
-
Right to erasure.
The right to obtain the erasure of your personal information without undue
delay in certain circumstances, such as where the personal information is no
longer necessary in relation to the purposes for which it was collected or
processed;
-
Right to restriction.
The right to obtain the restriction of the processing undertaken by us on
your personal information in certain circumstances, such as where the
accuracy of the personal information is contested by you, for a period
enabling us to verify the accuracy of that personal information; and
-
Right to object.
The right to object, on grounds relating to your particular situation, to
the processing of your personal information, and to object to processing of
your personal information for direct marketing purposes, to the extent it is
related to such direct marketing.
You may also have the right to make a complaint to the relevant Supervisory
Authority. If you need further assistance regarding your rights, please
contact us and we will consider your request in accordance with applicable
law. In some cases, our ability to uphold these rights for you may depend upon
our obligations to process personal information for security, safety, fraud
prevention reasons, compliance with regulatory or legal requirements, or
because processing is necessary to deliver the services you have requested.
Where this is the case, we will inform you of specific details in response to
your request.
California AB 1584
Regarding California AB 1584 (Buchanan) Privacy of Pupil Records: 3rd-Party
Digital Storage & Education Software (Education Code section 49073.1), Blooket
will adhere to the following:
-
Student records obtained by Blooket from an educational institution continue
to be the property of and under the control of the educational institution.
The educational institution retains full ownership rights of the personal
information and education records it provides to Blooket.
-
Blooket users may retain possession and control of their own generated
content by signing into and accessing their Blooket account and deleting,
where applicable, modifying or updating their information within Blooket.
-
Blooket will not use any information in a student record for any purpose
other than those required or specifically permitted by Blooket's Terms of
Use and Privacy Policy.
-
Parents, legal guardians, or eligible students may review personally
identifiable information in the student's records and correct erroneous
information by contacting their educational institution. Additionally,
Blooket users may access, correct, update, or delete personal information in
their profile by signing into Blooket, accessing their Blooket account, and
making the appropriate changes.
-
Blooket is committed to maintaining the security and confidentiality of
student records. Towards this end, we take the following actions: (a) we
limit employee access to student data to only those employees with a need to
such access to fulfill their job responsibilities; (b) we conduct background
checks on our employees that may have access to student data; (c) we conduct
regular employee privacy and data security training and education; and (e)
we protect personal information with technical, contractual, administrative,
and physical security safeguards in order to protect against unauthorized
access, release or use.
-
In the event of an unauthorized disclosure of a student's records, Blooket
will promptly notify users unless specifically directed not to provide such
notification by law enforcement officials. Notification shall identify: (i)
the date and nature of the unauthorized use or disclosure; (ii) the Private
Data used or disclosed; (iii) a general description of what occurred
including who made the unauthorized use or received the unauthorized
disclosure; (iv) what Blooket has done or shall do to mitigate any effect of
the unauthorized use or disclosure; (v) what corrective action Blooket has
taken or shall take to prevent future similar unauthorized use or
disclosure; and (vi) who at Blooket the user can contact. Blooket will keep
the User fully informed until the incident is resolved.
-
Blooket will delete or de-identify personal information when it is no longer
needed, upon expiration or termination of our agreement with an educational
institution with any deletion or de-identification to be completed according
to the terms of our agreement with the educational institution, or at the
direction or request of the educational institution.
-
Blooket agrees to work with educational institutions to ensure compliance
with FERPA and the Parties will ensure compliance by providing parents,
legal guardians or eligible students with the ability to inspect and review
student records and to correct any inaccuracies therein as described in
statement (4) above.
-
Blooket prohibits using personally identifiable information in student
records to engage in targeted advertising.
New York Ed. Law § 2-D
In compliance with the requirements set forth in New York Education Law § 2-D,
Blooket shall incorporate a Data Privacy and Security Plan ("DPSP") to each
contract or other written agreement it enters into with an educational agency
from the State of New York. Such DPSP shall outline how all state, federal,
and local data security and privacy contract requirements will be implemented
over the life of the agreement, consistent with the educational agency's
policy on data security and privacy. Such plan shall also include, but shall
not be limited to, a signed copy of the parents' bill of rights for data
privacy and security, which shall be provided by the educational agency prior
to the commencement of the agreement, and a requirement that any officers or
employees of Blooket and its assignees who have access to student, teacher or
principal data have received or will receive training on the federal and state
law governing confidentiality of such data prior to receiving access. In
attention to the foregoing, Blooket hereby commits to:
-
(1) limit internal access to education records to those individuals that are
determined to have legitimate educational interests (e.g., Blooket employees
or third-party service providers);
-
(2) not use the education records for any other purposes than those
explicitly authorized in the Agreement (i.e., our Terms of Service and this
Privacy Policy);
-
(3) except for authorized representatives of Blooket to the extent they are
carrying out the agreement, not disclose any personally identifiable
information to any other party: (i) without the prior written consent of the
parent or eligible student; or (ii) unless required by statute or court
order and Blooket provides a notice of the disclosure to the department,
district board of education, or institution that provided the information no
later than the time the information is disclosed, unless providing notice of
the disclosure is expressly prohibited by the statute or court order;
-
(4) maintain reasonable administrative, technical and physical safeguards to
protect the security, confidentiality and integrity of personally
identifiable student information in its custody;
-
(5) use encryption technology to protect data while in motion or in its
custody from unauthorized disclosure using a technology or methodology
specified by the secretary of the United States department of health and
human services in guidance issued under Section 13402(H)(2) of Public Law
111-5; and
-
(6) notify the educational agency, in the most expedient way possible and
without unreasonable delay, of any breach of security resulting in an
unauthorized release of student, teacher or principal data, as outlined in
applicable State and Federal laws.
Transfers of Personal Information to the U.S.
Blooket is hosted in the United States. If you use the Service from any other
regions with laws governing data collection, protection and use that may
differ from United States law, please note that you may be transferring your
personal information outside of those jurisdictions to the United States. By
using the Service, you consent to this, and to the use and storage of personal
information in accordance with this Privacy Policy. Third parties that have
content embedded on the Blooket website, such as a social feature, may set
cookies on a user's browser and/or obtain information about the fact that a
web browser visited the Blooket website from a certain IP address. Third
parties cannot collect any other personally identifiable information from
Blooket's websites unless you provide it to them directly.
For users from other countries, Blooket will make sure that all appropriate
physical, technical and organizational safeguards are adopted in accordance
with this Privacy Policy against accidental, unauthorized or unlawful
destruction, loss alteration, disclosure, access, use or processing of users'
personal information in Blooket's possession.