A summary for your safeguarding lead or data protection officer.
Children do not have accounts on Coderboy. No email address and no password. In a school, a child signs in with the class code and taps their name on the class list; at home, the parent holds the account. Nothing a child does creates a contactable identity.
| Data | Why | Who can see it |
|---|---|---|
| Child's name | To show whose progress is whose | Their teacher, their parent |
| Lesson progress | Completion and certificates | Their teacher, their parent |
| Certificate record | So it can be verified later | Public, name-limited |
| Adult's email | To sign the teacher or parent in | Coderboy only |
Anyone holding a certificate number can confirm it is genuine. That page deliberately shows learner's name, the course, the date and the issuing school — so the certificate can be trusted by a school or an employer. It shows nothing else: no email address, no photograph, no address and no contact details, and the page cannot be browsed or searched — a certificate can only be looked up by someone already holding its number.
Honesty note. Lessons are delivered as embedded YouTube videos, so YouTube may set its own cookies when a video plays. We pass YouTube no information about the child.