Privacy notice
Last updated 10 October 2026
The short version. We hold your child's first name, surname, a scrambled PIN, the games they build, and a few lines they write themselves about each one. We hold one contact for you. It sits on servers in Mumbai, only our coaches and you can see it, we never sell or share it, and there is no advertising or behavioural tracking anywhere a child can reach. When your child is promoted we send you a newsletter — and, if you asked for it, a link that plays their game. Ask us to delete any of it and we will.
Who we are
Code Commanders is a coding academy for children, run by Prithvijeet Kulkarni in Hyderabad. For data protection purposes the data fiduciary is Prithvijeet Kulkarni. You can reach us at hello@codecommanders.in.
What we hold, and why
| What | Why |
|---|---|
| Child's first name and surname | So a coach knows who they are and their work is attached to them. |
| A four-digit PIN, scrambled | So the child can sign themselves in. We store a one-way scramble and cannot read the PIN itself. |
| Progress, scores and the games they build | So they can continue on any of our laptops, and so a coach can see who needs help. |
| Attendance and session times | To run the register and to bill correctly. |
| A few lines your child writes at the end of each Level | Explaining a thing in your own words is how a coach knows it was understood. A coach reads each one, and it goes to you when your child is promoted. |
| The words your child picks for their own game | After testing what they built they tap words like fun, brainteaser or too hard. It teaches them to judge their own work, and it is a lovely thing to show you. |
| Parent name and one contact | To reach you about your child, and to record that consent was given. |
| Photographs of builds (only if you agreed) | Kept in your child's own progress record. |
The write-up is a box a child types into, so we tell cadets it is about the Level and nothing else, and a coach reads every one before it leaves the building. If a child has written something personal in it, it does not go in your newsletter, and we will take it out of the record if you ask.
What we deliberately do not hold
We do not collect your child's date of birth, address, phone number, email address, photograph or any health information as part of their account. This is not a promise about how we behave — the system is built to refuse those fields, so a future screen cannot start collecting them quietly.
Children do not need a Microsoft account, a Google account or an email address to use anything we run.
No tracking, no advertising
There is no analytics, no advertising and no behavioural tracking on any page a child uses. We do not profile children, we do not build interest categories, and we do not pass anything to advertisers. Tracking and targeted advertising aimed at children are prohibited under India's DPDP Rules, and we have built the product so there is nothing to switch off.
The promotion newsletter
When your child is promoted we email you: their certificate, a note from their coach, the lines they wrote, and the words they chose for their own game. It goes to the contact on your consent form and nowhere else — never a society group, never a broadcast list, never carrying another child's name.
The link that plays your child's game
Only if you ticked that box. The newsletter then carries a QR code that opens your child's finished game in a browser.
We would rather be plain about what that is than let it sound safer than it is. The address is unlisted, not secret: it is a long random string, it carries no child's name, it is not listed anywhere, and it cannot be found by searching or by guessing from someone else's — but anybody you forward it to can open it. The page serves the game and nothing else; your child's record cannot be reached from it.
Tell us and we switch that link off the same day. Saying no to the link, now or later, changes nothing else — you still get the newsletter and your child's classes are unaffected.
Where it lives
On Google Firebase, in Google's Mumbai (asia-south1) region. Access is restricted by security rules enforced on the server, not in the browser. Parent contact details and consent records are kept in a separate place that a child's account cannot read at all.
Who else sees it
Our coaching staff, and you. Nobody else. We do not sell your data, rent it, or share it with other companies. The only third party involved is Google, who host the servers and do not use the data for their own purposes.
Children build their games inside Microsoft MakeCode Arcade, which runs in the browser. We load the editor; the child's project is saved to our database, not to Microsoft.
Our youngest cadets also use two other sites on our laptops before they start coding: Scratch, for learning the logic, and the BBC's Dance Mat Typing, for finding the keys. Neither needs an account and we create none. Nothing a child does on them is sent to us or linked to their name, and what they make in Scratch is saved as a file on the laptop, not to anybody's cloud.
How long we keep it
While your child attends, and for twelve months after they leave, in case they come back and want their work. After that it is deleted. Signed consent forms are kept for as long as we hold the child's data, because they are the record that we were allowed to.
Your rights
- See it. Ask us what we hold about your child and we will show you.
- Correct it. Tell us what's wrong and we will fix it.
- Delete it. Ask and we will erase it.
- Withdraw consent. At any time, in writing or in person. Your child can no longer attend, because we cannot run classes without holding their progress — but it costs nothing and we delete their data.
- Complain. If we get this wrong you can complain to the Data Protection Board of India.
Write to hello@codecommanders.in and we will respond within seven days.
Cookies
We use no tracking cookies and no advertising cookies. The learning site stores a small amount of information in the browser so a child does not have to sign in twice in the same session. That is all it does, it never leaves the laptop, and clearing the browser removes it.
Changes
If we change what we collect or why, we will update this page and tell parents directly. We will not quietly broaden what we do with a child's data on the strength of a consent you gave for something narrower.