Privacy Policy

Last updated: October 20, 2026

Mathter (“Mathter,” “we,” “us”) operates the worksheet generator at mathter.ca. This policy explains what we collect, why, and your choices. Questions: [email protected].

What we collect

Account information: your email address and a securely hashed password, handled by our authentication provider (Supabase). We never see your password in plain text.
Usage activity: a log of the worksheet packs you generate (skill, grade, style, count, and timestamp), and the packs you save (their settings and title). We use this only to enforce plan limits and to operate the service.
Payment information: if you subscribe to a paid plan, payments are processed by Stripe. Stripe handles your card details directly; we never receive or store your card number. We keep only a Stripe customer reference and your subscription status.
Site visits: our own first-party visit log, kept in our database and shared with no one. It records a random ID stored in your browser (not a cookie, and not linked to who you are unless you sign in), the pages you view, the website you came from (just its name, such as google.com), any campaign tag in the link, your device type (phone, tablet or desktop), your browser type (such as Chrome or Safari, never the full browser details), and steps you take on the site, such as starting a download or creating an account. If you accept our cookie notice, the ID is kept so we can tell a returning visit from a new one. If you reject it, or haven't chosen yet, the ID lasts only until you close the tab. If you sign in, these visits are linked to your account. We use it to see which pages help teachers and where the site gets in their way.
Reviews: if you write a review, we keep your rating, text, the name and role you give, and may show it on our site. Email us to have it removed.
Invitations: if you invite a colleague, we store their email address to send the invitation and credit you if they join.
School accounts: for a school or district licence, the organization's name, its members, and its purchase orders and invoices.
API keys: if you create one, we store only a scrambled form of it, plus its label and when it was last used.
Logos you upload: if you or your school upload a logo to print on worksheets, we store the image privately and use it only on your worksheets.
Technical data: Cloudflare, which sits in front of our servers, keeps standard server and security logs (such as IP address) to keep the service available and secure. Our own systems never store your IP address in readable form: to limit abuse, such as many signups from one network, we keep only a scrambled value that cannot be turned back into the address.
Canva app: if you use the Mathter Worksheets app inside Canva, we process your IP address only for anti-abuse rate limiting when generating a worksheet. It's held in memory for a few minutes per request and reset daily. Never persisted to a database, never linked to any account or any other data (the Canva app has no accounts at all).

How we use it

To provide the service and generate your worksheets.
To enforce plan limits.
To process subscription payments and manage billing.
To secure the service and prevent abuse.
To contact you about your account when necessary.

We do not sell your personal information, and we do not use advertising or cross-site ad-tracking cookies. The cookies and similar storage we use are:

Essential: keep you signed in (authentication), process checkout (Stripe), and secure the service (Cloudflare). These are required for Mathter to work, so they are always on.
Referral (optional): if you arrive from a friend's referral link, a first-party mathter_ref cookie (30 days) remembers who invited you so they can be credited. We only set it if you accept cookies in our cookie notice; declining there doesn't affect the rest of the site.
Analytics (optional): Google Analytics, so we can see how the site is used (pages visited, where traffic comes from). It sets its own first-party cookies and only runs if you accept our cookie notice; declining does not affect the rest of the site. We do not enable Google's ad-personalization features (Google Signals) alongside it.
Email open tracking: emails we send may include a tiny invisible image (a tracking pixel) so we can tell whether account and product emails are being received and read. It does not track your browsing, and blocking images in your mail app disables it.

If you join through your school

If your account is on a school's or district's Mathter licence, your school's Mathter admin can see that you have an account, the email address on it, when you joined, and when you last created a worksheet. They also see totals for the school as a whole, such as how many worksheets were made and which grades and skills were used most. They cannot see or download your worksheets.

Service providers

We share data only with the providers needed to run Mathter:

Supabase: account authentication and database.
Stripe: subscription payments.
Cloudflare: network, content delivery, and security, in front of our own servers.
SMTP2GO: sending our emails, and telling us whether each one was delivered or opened.
Google Analytics: site usage and traffic analytics, only if you accept our cookie notice. See Google's Privacy Policy.

Data retention & your rights

We keep your account data while your account is active. We keep the site visit log for up to 13 months, and scrambled abuse records for up to 12 months, then delete them.

You can request access to, correction of, or deletion of your personal data at any time by emailing [email protected]. Deleting your account removes your profile and associated records, including your site visit history and our log of emails sent to you.

Two exceptions. If an email to you bounced or was reported as spam, we keep that record so we never write to that address again.

And so a free trial cannot be repeated, we keep a one-way fingerprint of the email address of anyone who has used a trial or held a paid plan. It is a scrambled value that cannot be turned back into your address, it holds nothing else about you, and it is used only to check whether that address has already had a trial. If you believe it was applied in error, email[email protected].

Children

Mathter is intended for teachers, tutors, and parents, not for direct use by children. We do not knowingly collect personal information from children.

Changes

We may update this policy; the date above reflects the latest version. Material changes will be noted on this page.