Privacy
Last updated 23 September 2026.
This page explains what Natteroo stores, why, and what you can ask us to do about it. It is written plainly on purpose.
Who this is for
Natteroo accounts are for teachers. Children never create an account and never give us an email address. When a class plays, each child types a first name so their teacher can see who is who on the board. That name lives only in the running lesson and is gone when the lesson ends.
What we store
If you create an account:
- Your email address.
- Your password, stored only as a salted hash. We cannot read it and neither can anyone who gets hold of our database.
- If you sign in with Google, the email address of your Google account. We ask Google for nothing else and we never get your Google password.
- The date you signed up, and whether you confirmed your email.
- The picture sets you save: the name you gave the set and the pictures in it.
- Any photographs you upload for your own sets.
- Counts of how the site is used — lessons started, sets made, sheets printed. These are kept against an account number, not against your email address.
If you only leave your email address for launch news, we store the address and the date, and nothing else.
Why we store it
To give you an account, to keep your saved sets so they are there next time, to send you a password reset when you ask for one, to tell you when something launches if you asked to be told, and to know roughly how much the site is being used so we know what to build next.
We do not sell anything to anyone, we do not run advertising, and we do not share your details with anybody for their own purposes.
Photographs you upload
Pictures you upload are yours. We store them so your sets work, and unless you choose to publish the set they are shown only to you and to the class you are teaching with them. We delete them when you delete the set or the account.
Please do not upload photographs of children. Natteroo does not need them and is not built to hold them. If you do, you are responsible for having the permission to do so, and you can delete them at any time.
Sets you choose to publish
Natteroo has a shared library. If you publish a card deck or a dictation, it goes into that library and every other teacher with an account can find it, use it and save their own copy — including any photographs and words in it.
This only ever happens because you chose it. Nothing you make is published unless you publish it, and a set you have not published is visible to nobody but you and the class you are teaching with it. If you would rather keep something to yourself, simply do not publish it.
The library does not show who published a set. Other teachers see the set, its name and its pictures; they do not see your name or your email address.
You can unpublish a set at any time and it comes straight out of the library. Be aware of the one thing we cannot undo: a teacher who already saved a copy keeps that copy, because it is theirs now and sits in their own account.
Who else touches the data
Three companies, each doing one job:
- Cloudflare hosts the site and stores the data, on their network.
- Resend sends the emails — the confirmation, the password reset, the launch email. They see the address the email goes to.
- Google, only if you choose to sign in with Google, and only to confirm your email address to us.
Nobody else.
How long we keep it
Your account and your sets stay until you delete them. Ask us to delete your account and we will, along with everything in it. Usage counts are kept as totals with no way back to you. An email address left for launch news is removed when you ask, and at the latest once the launch emails have been sent.
Your rights
Wherever you are, you can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Write to hello@natteroo.com and we will do it, normally within a few days. If you are in the UK or the EU, those are your rights under data protection law, and we honour them for everyone.
Security
Passwords are hashed, never stored as text. The site is served over HTTPS throughout. No system is perfect, and we will tell you promptly if something goes wrong that affects you.
Changes
If this page changes, the date at the top changes with it. If a change matters to you, we will email you about it rather than hoping you notice.