Privacy notice

Privacy, plainly.

Effective and last updated: 25 September 2026. This notice explains what Clearline collects, why, who receives it, and the choices you have.

Account and public content

Google sign-in supplies an account identifier, email address, name, and profile image to establish a session. The service stores the signed-in profile fields needed for posts and comments. Posts, comments, display name, and profile image are intended to be publicly viewable. Do not include information in public content that you do not want others to see. Reports and appeals are available to authorized moderators, not shown as public content.

Private drafts and preferences may be stored in browser storage on your device; they are separate from server account data and are not included in an account export. Links saved while signed out are also stored only in that browser. Links saved while signed in are stored privately in the Clearline database with their URLs, titles, notes, platform labels and timestamps; they are included in the account export and account deletion. Device-only links are not uploaded automatically after sign-in. Clearing browser storage or using the app’s local controls affects that device only. A local video preview is not sent to Clearline by that preview action.

Optional Chrome extension

The Clearline Chrome extension reads the URL and title of the current tab only when you open its toolbar popup. It does not read your browsing history, other tabs, page content, or cookies, and does not contact Clearline in the background. If you click “Continue in Clearline,” it opens the Clearline app with that URL and title in a browser URL fragment. Fragments are not sent in the initial HTTP request; the app removes the fragment after reading it and fills the save form. The link is not saved until you choose “Save link.” The extension does not retain a copy. Your browser may still retain the page visit in its own history, and signing in or saving a link follows the account/device practices described above.

For signed-in saved links, Clearline may request the saved page from its server to read an Open Graph preview image. The page operator can see that server request. If an image is available, your browser loads it directly from the image host when its card appears; that host can receive your IP address and browser request information. Clearline does not read the entire linked page for this feature and falls back to the domain name when no usable image is available.

The optional “Beyond the feed” suggestions classify only the titles and notes of links already visible in your Clearline collection. This runs in your browser after you opt in; the inferred topic is not uploaded or stored as a server-side profile. The opt-in choice is saved in browser storage and can be switched off. You can also choose a topic manually without enabling classification. Suggested Wikipedia links are not contacted until you open one; then Wikipedia receives an ordinary browser request under its own privacy practices. Clearline does not obtain YouTube watch history from a user or channel ID.

Reports, appeals, and moderation records

A report may include its category, optional details, target, reporter account identifier, and time submitted. An appeal may include your account identifier, affected post or comment, reason, and submission/review times. Moderator actions can create records identifying the moderator, action, target, reason, and time. These records may be needed to review abuse, enforce the Terms, handle appeals, and investigate incidents.

YouTube discovery and links

The watch page displays YouTube thumbnails from i.ytimg.com before playback; loading those images may send your IP address and browser request information to YouTube. The embedded player loads when you choose to play and confirm the first-use notice. When discovery is enabled and you submit a search, Clearline sends the query to the YouTube Data API and receives video identifiers, titles, channel names, and thumbnail URLs. A short-lived edge cache may retain normalized results for up to three minutes. Discovery does not mean Clearline downloads or imports video files. Opening a YouTube player connects your device to YouTube, which may receive your IP address, device/browser information, and request details under its own terms and privacy practices. Google sign-in is a separate use of Google services.

Private uploads and AI images

During the limited beta, eligible signed-in testers can upload their own images or short videos to a private collection. These files, their titles, types, sizes, and creation times are stored in Cloudflare R2 and are available only through an authenticated account route; they are not published to the community. If you request an AI image, your prompt is sent to Cloudflare Workers AI for generation, and the generated image is saved privately to your collection. Do not include sensitive personal information in prompts. Upload and generation limits apply, and provider processing or security logs may persist outside your collection. Account export includes media metadata, but not copies of the media files; download anything you want to retain before account deletion. Deleting an item or your account removes its current R2 object, subject to provider-side backups and logs.

Home School private beta

Eligible signed-in testers who confirm they manage the learning space as a guardian can save a broad age range, learning stage/grade, any number of interests (chosen from presets or typed as custom entries, up to 50, each up to 40 characters), and a city or area in Thailand in a private learning profile. The city is used to show a "This week near you" list of local activity listings (currently live for Bangkok only, aggregated from the Greener Bangkok and NSM Curiosity organizer feeds) and a short weather outlook for every city; no precise device location is collected by this feature. Weather is fetched by Clearline's server from Open-Meteo using the chosen city's centre coordinates, not your device's location. Opening an activity link contacts that organizer directly; listings are not verified upcoming events or age ratings. They can also save private goals, skills, and guardian-entered progress, obstacles, or evidence. Do not enter a child's full name, contact information, health information, school records, or other sensitive details. These records are visible only to the signed-in account, included in account export, and removed by account deletion. A guardian may mark a goal achieved; the AI does not assess or certify a child's ability. The guardian declaration is self-attested and is not identity or parental-status verification.

The optional Learning Companion sends the question to Cloudflare Workers AI together with either the selected goal, skill, optional age range and up to six recent notes, or, when no goal is selected, the profile’s age range, grade and interests, plus up to three of your saved notebook entries that share keywords with the new question. It sends nothing until you confirm; the Home School assistant bar asks once and remembers that confirmation only until the browser tab’s session ends. The conversation for the current topic is held only in your browser for that tab and is sent back with each follow-up question so the assistant can hold a conversation; it is cleared when you start a new topic or close the tab, and Clearline does not store it as a transcript. If you choose “Save to notebook” under an answer, Clearline privately stores the question and a short extracted summary of that answer, plus a few keyword tags, in your account’s learning notebook; that saved entry is included in account export and account deletion, is never shared across accounts, and may be reused as brief context in later Learning Companion conversations. Cloudflare may retain operational or security logs regardless of what you save. Responses may be inaccurate and should be reviewed by a guardian. This beta is not a child account, a substitute for a teacher or clinician, or a public school record. Home School features are for use by adults; Clearline does not offer accounts for children.

The Home School assistant bar can also take a limited set of actions on your behalf, but only through a fixed list of validated tools it does not control: it can read your learning profile, goals, recent activity, and saved resources, and can add or remove interests, save a note or resource, or update a plan step immediately. Creating or changing a goal, creating a multi-step learning plan, or changing the profile's age range, grade, or city instead creates a proposal that is shown to you with Approve/Cancel controls and only takes effect once a guardian approves it; cancelling discards it. It cannot create calendar events, registrations, or reminders, and cannot escalate to a person. To do this, Clearline privately stores, per account: a short rolling summary of the conversation and a few remembered facts, any action currently awaiting your approval, a log of every tool call it made (what it was asked to do, what it changed, and whether you approved or cancelled it), and any learning plans you approved. These are included in account export and removed by account deletion, are never shared across accounts, and the assistant is instructed never to ask for or store a child's full name, birthday, school name, home address, or health information. The dashboard's quiet suggestion cards remember which ones you dismissed, per account, so they are not shown again; that list is also included in account export and removed by account deletion. Clearline also privately tracks, per account, which learning topics (concepts) a child has seen, practised, or mastered — the topic label and status only, never a full name, school, or health detail — built from chat explanations, check-in answers, completed plan stages, watched videos, and reflections, shown on the dashboard's Progress tab and included in account export and removed by account deletion.

The Home School skill map (Subjects) lets a guardian pick a Thai or English program and records, per account and skill, a 0–100 practice score, attempt/correct counts, and last-practiced time; practice questions are multiple-choice sets generated by Cloudflare Workers AI for each skill, independently re-checked by the model and screened by Llama Guard before use, then cached and reused across accounts (the question text itself is not personal data and is not tied to any one account). Per-account skill scores are included in account export and removed by account deletion; a guardian may also set a chosen program and interface language, stored with the learning profile.

The optional learning brief reads only an English/Thai Wikipedia article summary fetched from Wikipedia, or an excerpt entered by the guardian. The selected goal, skill and excerpt are sent to Cloudflare Workers AI after a separate confirmation. Cloudflare-hosted Meta Llama Guard 3 checks submitted question or source text and generated responses; unclear or flagged results are withheld. Clearline does not save the excerpt or AI brief as a transcript. A pasted excerpt is not independently verified, and a Wikipedia summary is not a full article. Other platforms' videos and posts are not read by this feature. Text screening can miss harmful material and does not establish age suitability; a guardian should compare AI output with the source before sharing it with a child.

Home School video playback uses the official YouTube player. For each Home School video, Clearline stores server-side, per account and video: the furthest position reached, the video's duration, whether a forward skip was detected, how many check-in prompts were answered, how many were required, and the completion and last-updated times. This progress lets a lesson resume from where it left off on any signed-in device, blocks jumping ahead without watching (seeking back is always allowed), and marks a video "Completed ✓" only once the furthest position reaches about 95% of the duration, no forward skip was detected, and any check-ins were answered. This browser also keeps a local, unsynced fallback copy of playback position for up to 90 days, which can be cleared with browser storage. YouTube may receive playback information directly. During playback, one or two brief "Still with us?" check-in prompts may pause the video and ask for a tap plus an optional one-line answer; only whether you responded is kept (as a count, server-side, with the watch progress above) — the typed answer itself is never sent to Clearline or stored anywhere. Progress and check-in counts are included in account export and removed on account deletion. Neither a completion badge nor a seek indicator can prove a child watched or understood a video. After playback, an optional reflection sends the video title, broad topic, age range and learner's answer to Cloudflare Workers AI for screening and a draft suggestion. Clearline does not read the video transcript or verify its content. The answer and AI draft are stored privately for adult review, never posted publicly or emailed, and deleted after 30 days. By default, a guardian is asked to confirm this each time; a guardian setting, "Always send reflections to AI," turns off that repeated confirmation, is off unless a guardian turns it on, and is stored with the learning profile. Adult approval or rejection, an adult-chosen direction for future suggestions, and an optional adult comment are stored with the reflection. The adult review page requires the signed-in account plus a 6–10 digit PIN; the PIN is stored as a salted hash, but neither the PIN nor a self-declaration verifies parental status. Adult review data is included in account export and deletion. Do not enter identifying or sensitive child details. This remains an adult-managed beta, not a validated child assessment.

Under a Home School video, an optional "Talk about this clip" panel offers two or three discussion prompts generated by Cloudflare Workers AI from that video's title, topic, and description only — never a transcript — and cached so the same clip is not regenerated for every learner. If a child types an answer, it is screened by the same self-harm/privacy pre-checks and Llama Guard used elsewhere in Home School, then sent to Cloudflare Workers AI only after a guardian's one-time confirmation or the "Always send reflections to AI" setting, and the model replies as a Socratic tutor (it asks for reasoning or offers another viewpoint, and never simply states an answer as fact). Each clip's conversation is capped at a few exchanges. The discussion thread — the child's answers and the tutor's replies — is stored privately per account and video for 30 days, is included in account export and deletion, and a "Save to notebook" button copies it into the learning notebook described above if a guardian or learner chooses to keep it. A mid-video check-in prompt may use one of these same discussion prompts instead of a generic question; an answer there follows the same consent and safety rules, or stays local and is not sent anywhere if consent has not been given. The same video metadata (title, topic, description) is also used to generate an optional "3-question challenge" multiple-choice quiz once per clip; Clearline grades it on the server, awards a small in-app badge for a perfect score, and records only which topics were answered correctly or not (no chat text) as learning-topic evidence, described above. Neither feature reads or infers anything from the video itself beyond its public title/topic/description.

A guardian may also turn on an optional "Presence check (camera)" for Home School videos; it is off unless a guardian enables it, and the setting is stored with the learning profile. When on, it asks your browser's own camera permission and, while a lesson plays, shows a visible "Camera on" indicator. Detection runs entirely on your device using the open-source MediaPipe Face Detector, downloaded from the jsDelivr CDN (script from cdn.jsdelivr.net/npm/@mediapipe/tasks-vision, its short-range BlazeFace model file from storage.googleapis.com/mediapipe-models) — it only detects that a face-shaped region is present in a downscaled camera frame roughly every two seconds; it does not identify, recognize, or distinguish who is present. No image, video frame, or face data is drawn, saved, uploaded, or sent to Clearline or any other server — the boolean "someone is present" never leaves your device and is not stored anywhere, even locally. If no one is detected for about 20 seconds, the video pauses with a "come back to continue" prompt. The camera turns off (all camera tracks are stopped) whenever the video pauses or ends, you leave the page, or a guardian turns the setting off. If camera permission is denied or the detector fails to load, Home School falls back silently to the check-in prompts above with no error shown.

Followed interests and in-app updates

In the limited beta, following a topic is always an explicit action. Clearline stores the topic and private alert cards for your account; watch history or saved links never follow a topic automatically. Scheduled checks search public Clearline posts and, when configured, YouTube Data API results for that topic. YouTube receives the topic as a search query from Clearline. Alerts contain source, title, publisher, source URL, publication time and read state. They are not public, are included in account export and deletion, and are removed if you unfollow. Alerts older than 90 days or beyond the newest 200 per account are pruned. No browser push, email, or autoplay is enabled. Clearline does not monitor every website or social platform.

Hosting and service providers

Clearline is hosted on Cloudflare and uses Google for sign-in and YouTube for discovery or playback when those features are enabled. These providers may process network, device, and request information to deliver and secure their services. Cloudflare request/security logs, database backups, and provider-side retention are controlled in part by provider settings and follow those providers’ own retention periods. See Google’s Privacy Policy, YouTube’s Terms, and YouTube API Services Developer Policies.

Access, export, deletion, and retention

Signed-in users can download server-held account data and request account deletion from Settings. Device-only drafts and saved links are separate and are not included in server export or deletion. You may also email a deletion or data request to Geowahaha@gmail.com. Before acting on an emailed request, we may ask you to confirm it from the email address linked to your account. Removing content from public view may not erase provider logs, backups, or copies already made by others. Depending on where you live, you may have additional rights under local law; use the contact below to exercise them. Unless a shorter period is stated above, account data and saved content are kept until you delete them or your account; moderation records may be kept as long as needed to handle abuse, appeals, and incidents.

Contact and changes

Clearline is operated by Eibpo Tawat Talpolkrang. For privacy questions, data requests, or report-related requests, contact Geowahaha@gmail.com. If our data practices change materially, we will update this page and its effective date.