Privacy Policy
Effective date: 4 August 2026 Last updated: 7 August 2026
PracticeBuds is operated by Root and Rise Enterprises, a sole proprietorship registered in India at House No. 499, Sector 31, Gurgaon, Haryana 122001, India ("PracticeBuds", "we", "us").
This policy explains what happens to information when you visit PracticeBuds. It is written to be read. If anything is unclear, email rootandrise.hq@gmail.com and we will answer in plain language.
1. The short version
- PracticeBuds is for adults — parents, guardians, tutors and teachers — who print practice worksheets for children.
- There are no accounts today. You cannot sign up, and we store nothing about you in our database.
- The only information collected as you browse is basic website analytics and standard server logs.
- The grade level you pick is stored in your own browser, not on our servers.
- We do not sell or share personal information.
- We do not currently display advertising. If that changes, this policy will be updated before any advertising technology goes live.
- We do not knowingly collect information from children. See our Children's Privacy Notice.
2. Scope
This policy covers the PracticeBuds website and any subdomains we operate. It does not cover third-party websites you reach by clicking a link from PracticeBuds.
PracticeBuds is intended for people aged 18 or over. A child may of course use a worksheet you printed for them, and may view pages with you — but the site has no games, no log-in, no chat, no uploads and no profiles.
3. What we collect today
3.1 Nothing goes into our database
PracticeBuds currently has no sign-up, no accounts and no user records. Worksheets are generated on demand from a numeric seed. We do not write any information about visitors to our database.
3.2 Information you send us voluntarily
If you email us or use a contact form, we receive your email address and whatever you write. We use it only to reply to you.
Please do not send us your child's name, age, school or any other information about a child. We do not need it and we do not want to hold it.
3.3 Information collected automatically
Loading a page causes the following to be received by us or by services acting for us:
- IP address — used transiently for routing, security and coarse country-level analytics; not used to build a profile of you
- Browser type, operating system and device category
- Referring page and pages viewed on PracticeBuds
- Date and time of visit
- A randomly generated analytics identifier stored in a cookie
3.4 Stored on your device, not with us
Your selected grade level is written to your browser's local storage under the key playworld_grade. It never leaves your device and is never transmitted to us. Clearing your browser data removes it.
"Grade 2" is a content filter, not a fact about a person. We never ask for a child's real age or date of birth.
3.5 What we deliberately do not collect
Children's names, ages, dates of birth or photographs; school, class or district identifiers; precise geolocation; biometric identifiers; worksheet answers, scores or progress of any kind; contact lists; advertising identifiers.
Worksheets are completed on paper, offline. Nothing a child writes is ever known to us.
4. Cookies and similar technologies
This is the complete list of what runs on PracticeBuds. If something is not here, it is not on the site.
Strictly necessary
| Name | Set by | Purpose | Duration |
|---|---|---|---|
playworld_grade | PracticeBuds — browser local storage, not a cookie | Remembers your selected grade on your device only | Until you clear browser data |
playworld_consent | PracticeBuds | Records your cookie preference so we do not ask again | 6 months |
| Session / security tokens | PracticeBuds, Vercel | Request routing, load balancing, abuse prevention | Session |
Analytics — optional
| Name | Set by | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics | Distinguishes one browser from another so visits are counted once | 14 months |
_ga_<ID> | Google Analytics | Maintains session state | 14 months |
How our analytics is configured: advertising features off, Google Signals off, ad personalization signals off, remarketing off, user-ID and cross-device tracking off, IP addresses not stored, data retention set to 14 months with automatic deletion, no export to any advertising platform.
Not present on PracticeBuds at this time: advertising cookies, ad networks or ad servers; social media pixels (Meta, TikTok, LinkedIn, X); session recording or heat mapping; cross-site tracking; data brokers; fingerprinting. If any of these is introduced, this page is updated before it goes live.
Your choices. Use the cookie preferences link in the site footer to accept or reject analytics at any time. Rejecting has no effect on your ability to browse, generate or print anything. All major browsers also let you block or delete cookies. We honour the Global Privacy Control signal; because there is no agreed standard for Do Not Track, we do not respond to DNT separately.
5. Persistent identifiers and internal operations
Analytics cookies are persistent identifiers, which children's privacy law treats as personal information. Being specific matters here.
The internal operations these identifiers support are:
- Distinguishing a returning visit from a new one, so page counts are not inflated
- Understanding which subjects, grades and worksheets are used, to guide what we build next
- Detecting and preventing scraping, fraud and abuse
- Diagnosing errors and monitoring site performance
How we ensure they are not used for anything else: advertising features, Google Signals, ad personalization and remarketing are disabled in our analytics configuration; cross-device and user-ID tracking are off; analytics data is not exported to any advertising platform; and these identifiers are not used to contact, recognize or profile any individual.
If we later introduce advertising or any other new use of these identifiers, we will update this policy first and obtain consent where the law requires it.
6. Why we use information
Where Indian law applies, we process personal data as a Data Fiduciary under the Digital Personal Data Protection Act, 2023, on the basis of your consent or for the legitimate uses permitted by that Act.
Where the UK or EU GDPR applies to you, our legal bases are legitimate interests (operating, securing and improving PracticeBuds, and replying to your messages — assessed as not overriding your rights, given the limited data involved and that it is not used for profiling or sold), consent (analytics cookies where consent is required, and marketing email), and legal obligation.
7. Who receives information
We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not disclose it to data brokers.
| Provider | Role | Location |
|---|---|---|
| Vercel Inc. | Website hosting and content delivery | United States / global edge network |
| Supabase | Database and file storage | India (Mumbai region) |
| Google LLC | Website analytics | United States |
If this list changes, we will update this page before the change takes effect.
We may also disclose information where legally required, to establish or defend legal claims, to prevent fraud or harm, or in connection with a sale of the business — in which case we will give notice before your information becomes subject to a different policy.
We may publish aggregate, de-identified statistics such as which topic was most printed in a month. This cannot identify you and we will not attempt to re-identify it.
8. Where information is held
PracticeBuds is operated from India, and our database and file storage are hosted in India (Mumbai). Our website hosting and analytics providers are based in the United States.
If you are outside India, information relating to you will be transferred to and stored in countries other than your own, which may have different data protection laws. Where required for UK or EEA visitors, we rely on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with our providers' own transfer frameworks.
9. How long information is kept
We keep personal data only as long as needed for the purpose it was collected, and we do not retain it indefinitely.
| Category | Retention |
|---|---|
| Analytics data | 14 months, then automatically deleted |
| Server and security logs | 30 days |
| Email correspondence | 24 months from last contact |
| Mailing list subscription | Until you unsubscribe, then 30 days |
Backups may persist up to 30 days beyond these periods before being overwritten.
10. Security
We maintain security measures proportionate to the small amount of data we hold: encryption in transit (TLS) and at rest; row-level security on every database table; least-privilege access; secrets held in a managed secret store and never in source code; and dependency and vulnerability monitoring.
No system is perfectly secure. If a breach affects personal data we will notify affected people and the relevant regulator as required by law, including the Data Protection Board of India where applicable.
11. Your rights
Depending on where you live, you may have the right to access the information we hold about you, correct it, delete it, obtain a portable copy, withdraw consent, object to processing, opt out of sale or targeted advertising (we do neither), appeal a decision we make, nominate another person to exercise your rights on your behalf (India), and complain to a supervisory authority. You will never be treated differently for exercising any of these.
To exercise a right, email rootandrise.hq@gmail.com with the subject line "Privacy Request". We will acknowledge within 10 business days and respond within 30 days, or sooner where the law requires. We verify identity proportionately — usually by replying to the address on file.
California residents: we have not sold or shared personal information in the preceding 12 months. Categories collected: identifiers and internet activity information, as described in Section 3. We collect no sensitive personal information.
12. Children
PracticeBuds is directed to adults. We do not knowingly collect personal information from children. Please read our Children's Privacy Notice, which sets out our approach in full and how a parent or guardian can contact us.
Under India's Digital Personal Data Protection Act, 2023, a child is anyone under 18. Under the US Children's Online Privacy Protection Act, a child is anyone under 13. We apply the stricter standard.
13. When accounts launch
We may introduce optional sign-in in the future so that users can save custom preferences. We are describing this now so there are no surprises. When it launches:
- Sign-in will use Google, and we will request the minimum scopes needed — an identifier and email address. We will not request your name, profile photo or contacts.
- You will be asked to confirm you are 18 or over at sign-up. We will not ask for, or store, a date of birth.
- We will store only what is needed to run your account: an internal user identifier, your email address, and saved preferences.
- We will not store any information about a child, and there will be no field anywhere in which to enter a child's name.
- Account data will be deleted within 30 days of you deleting your account, and self-serve deletion will be available from within the product.
This policy will be updated with the specifics before any of this goes live.
14. Links to other sites
PracticeBuds may link elsewhere — to curriculum standards or educational research, for example. We do not control those sites and this policy does not apply to them.
15. Changes
Material changes will be posted here with a revised date and a notice on the site. Information already collected remains governed by the policy in force when it was collected, unless you consent otherwise.
16. Contact
Email: rootandrise.hq@gmail.com Root and Rise Enterprises House No. 499, Sector 31, Gurgaon, Haryana 122001, India
Grievances relating to personal data may be raised at the address above. If you are in the UK or EEA and are unsatisfied with our response, you may complain to your national supervisory authority. In India, you may approach the Data Protection Board.