Privacy notice

Updated 23 October 2026

This notice describes the data handled by the current LessonMint service.

Accounts store your name, email, verification status and password hash. Sessions use necessary HttpOnly cookies. Preferences, owned projects, immutable revisions and export metadata are stored in PostgreSQL. Individual PDFs are generated on demand. Saved batch revisions also retain their original ZIP archive, including worksheet and answer PDFs, in PostgreSQL so you can preview and download the same files again.

Data is used to sign you in, deliver verification/reset email, save your worksheets and enforce usage limits. Browser session storage holds generator settings. No student accounts or student names are needed to create a worksheet; do not put sensitive student information in project titles or descriptions.

Email is delivered through the configured SMTP provider. Hosting and backup providers process service data. When optional analytics is enabled, it starts only after your consent, respects Do Not Track and Global Privacy Control, and can be disabled through Analytics preferences. A random 30-day cookie measures return visits. Only approved page categories and product events are sent to our private Umami service; account details, worksheet content, URL parameters and your IP address are not forwarded. The operator must disclose providers and hosting region before launch. If paid subscriptions launch through Paddle, Paddle will process checkout and payment information under its own privacy notice. LessonMint will receive the customer/subscription identifiers, billing status and contact information needed to provide paid access and support; we will not receive full payment-card details. Paid checkout is currently disabled.

Projects in trash are recoverable for 30 days and then eligible for permanent purge. Export metadata expires after one day. Sessions expire after seven days; reset and verification links expire after one hour. Expired records are removed by scheduled maintenance. Where backups are enabled, deleted data may remain until scheduled rotation.

Use account settings to export your data, revoke sessions or delete your account with your current password. Account deletion removes active owned projects and revisions. For other data questions, use the published privacy contact. Rights and applicable rules depend on the actual operator and country; no unconfigured jurisdiction is claimed.

Anonymous worksheet feedback is retained for up to 90 days. Do not include personal student information. Anti-spam counters use short-lived keyed hashes; raw IP addresses are not stored with feedback.