Privacy Policy
1. Introduction
IvritSuite (the "site") is a free collection of Hebrew literacy tools for teachers and students, operated by Harrison Bleiberg. This Privacy Policy explains what information the site collects, what it stores when you sign in to an account, how that information is used, and the choices you have. By using the site you agree to the practices described here.
2. Information We Collect
IvritSuite runs in your browser. You never need an account, and unless you sign in, the site stores no personal data on a server. Specifically:
- No personal information without an account. Using the tools does not ask for, transmit, or store your name, email address, school, class list, or any other personally identifiable information.
- Tool content stays in your browser. Anything you create with the tools — worksheet presets, classroom-dashboard schedules and settings, flash-card decks and preferences, word lists, dictionary filters, favorite Torah readings, Torah Trainer, Trope Tutor and Letter Learner settings, Parsha Emojis print settings, class lists — is stored locally in your browser using the standard
localStorageAPI. It never leaves your device through any channel operated by the site unless you sign in (next point). - An optional account, for adults. If you sign in (with an emailed code or a Google account), the site stores your email address (and, for Google, the name Google shares), a display name you give when you first sign in, and — while you are signed in — the items the tools save: presets, decks, settings, saved schedules, word lists, favorite Torah readings, mastery progress, your suite-wide preferences (language, theme, keyboard layout, default Hebrew font and size, the name you sign fonts with, and dictionary display choices), the fonts you added to My Fonts, Font Maker projects (with the letter photos they were traced from and the fonts exported from them), student names and practice results from Flash Cards, and class lists (student names, in Hebrew and English) from the Classroom Dashboard and other tools. Saving to the account is automatic while you are signed in. The first time you sign in on a device that already holds saved items — presets, decks, lists, student profiles, class lists, fonts, practice progress — you choose whether to add them to your account or remove them from the device; a tool's settings take your account's copy when the account has one. Everything in an account is visible only to that account, is never sold or shared, and can be downloaded as a file or deleted by you at any time (Section 5). Signing out with the account button removes the account's saved items from that device, except your suite-wide preferences (including the name you sign fonts with) and My Fonts, which stay until you use Erase All Settings; using the tools signed out keeps everything on the device.
- No tracking pixels or fingerprinting. For aggregate usage statistics the site uses only Google Analytics 4, described in Section 3.
3. Cookies & Analytics
The site uses Google Analytics 4 (measurement ID G-CMLC81Z0HC) to understand which tools are used and how visitors arrive at the site. GA4 collects aggregated, anonymized data such as page views, approximate geographic region, device class, and referral source. IP addresses are anonymized by GA4 by default and are not stored by the site operator.
You can control or block analytics in several ways:
- Use your browser's "Do Not Track" or tracking-protection settings.
- Install the Google Analytics Opt-out Browser Add-on.
- Block third-party scripts via your preferred ad/tracker blocker.
For details on Google's data handling, see Google's Privacy Policy.
4. Third-Party Resources
Some tools fetch or link to third-party content. Visiting or interacting with these resources is governed by their own privacy policies, not by IvritSuite:
- Kaikki.org — source of the Hebrew word data used in the dictionary and worksheet generator.
- PocketTorah — chanted-audio source used by the Torah Trainer.
- Google Fonts — Hebrew and Latin web fonts.
- Public weather APIs used by the Classroom Dashboard to display current local weather (only the location you enter is sent, in the standard form required to look up a forecast).
- Supabase — the sign-in service and database behind optional accounts (Section 2). It processes your sign-in email and stores the items your account holds, on servers in the United States (Amazon Web Services, Oregon). Each account can reach only its own data, and the site operator never uses that data for anything but giving it back to you. Supabase's own privacy policy applies to its handling of the service.
- Web3Forms and hCaptcha — used only if you send a message through the contact page or the "Suggest a Resource" form on the resources page. The information you enter in those forms is passed to Web3Forms solely to deliver the email to the site operator, and the form uses hCaptcha to block automated spam; both process that data under their own privacy policies. Nothing from the form is stored by IvritSuite.
5. Local Storage & Your Control Over Data
Signed out, your settings live in your browser; signed in, the tools keep their saved items in your account and your browser keeps a copy. Either way you control them:
- The Import / Export All Settings button on the home page lets you download a single JSON backup of every tool's data, restore from a backup, or erase everything in one click.
- Clearing your browser's site data for IvritSuite removes all stored settings and presets. Signing out with the account button removes the account's saved items from that device (they stay in your account); if a session ends by itself — it expired, or the account was deleted on another device — that device keeps its copies as its own data until you erase them. Erase All Settings removes everything on the device and signs it out.
- Using a different browser, device, or private/incognito window gives you a fresh, separate set of settings — unless you sign in there, which brings your account's items to it.
- An item you delete in a tool while signed in is deleted from your account and, at their next load, from your other signed-in devices, each of which keeps a copy you can download until you dismiss its note there — a device that changed it since re-adds it, so delete it on every device or delete the account. A
.ivritfile you saved stays yours. Font Maker projects are listed under Load Project ▾ → In your account, where each can be opened or deleted. - Your account page shows everything your account holds, downloads all of it as one file, and deletes the account with everything in it — right away, with no email to write; it offers that download before you delete.
6. Children's Privacy
IvritSuite is designed to be safely usable by students of all ages, including children under 13, and the tools never require an account. Accounts are meant for adults — teachers, parents and tutors — and a student never has to enter an email address to use anything on the site. The site does not knowingly collect personal information from children; if an account turns out to belong to a child under 13, we delete it as soon as we learn of it. If you believe any personal information has been collected in violation of this policy, please contact us through the contact page and we will remove it.
7. FERPA Compliance For Schools
This section is provided for school administrators, IT departments, and educators evaluating IvritSuite for classroom use under the U.S. Family Educational Rights and Privacy Act (FERPA, 20 U.S.C. § 1232g; 34 CFR Part 99).
No collection of student records; storage only when a teacher signs in
IvritSuite does not collect, receive, or use personally identifiable information (PII) from student education records on its own. The site has no grade books and no submission of student work, and unless a teacher signs in, everything a teacher or student creates — worksheets, presets, decks, schedules, tool preferences, practice results — is stored exclusively in the local browser using localStorage and remains on the user's own device. A teacher who signs in keeps their tools' saved items in their own account, and that can include a Flash Cards student profile (a student's name and practice results) or a class list (student names, in Hebrew and English) from the Classroom Dashboard or another tool. Such items are stored for that teacher only, are visible only to that account, are never used, sold, or shared by the site operator, and can be deleted by the teacher at any time. Whether a teacher may store student names in an online service is governed by the school's own policies; teachers who prefer not to can use the tools without signing in, and everything stays on the device.
Analytics do not constitute education records
The site's only data collection is anonymized, aggregated Google Analytics 4 usage data (page views, device class, region). GA4 anonymizes IP addresses and is not associated with any student identifier; this data is not directly or indirectly linkable to individual students and therefore does not constitute "education records" or "personally identifiable information" under 34 CFR § 99.3.
School-official designation is not required
Using the tools discloses no PII or education records to the site, so schools and districts may permit teachers and students to use IvritSuite without entering into a separate data-sharing or "school official" agreement under the FERPA exception at 34 CFR § 99.31(a)(1). Student profiles and class lists reach a teacher's account only while that teacher is signed in, which is optional; a district that wants to allow it and requires a written acknowledgment of these practices may rely on this policy as a public statement of them, or ask us for one through the contact page.
No advertising or sale of data
IvritSuite does not sell, rent, license, or otherwise share any user information with advertisers or data brokers. The site displays no advertising.
Parental review and access
The site holds no student records of its own, so there is nothing for parents to inspect, amend, or have removed on the site's side unless a teacher's account holds a student profile or a class list. In that case the teacher can show, correct or delete it in that tool (the change reaches the account within seconds while online; the teacher's other devices keep a copy they can download until it is dismissed there, and a device that changed it since re-adds it, so delete it on every device) or download and delete everything from the account page, and parents may also ask us through the contact page. Locally stored tool settings can be reviewed directly in the browser used by the student via the home-page Import / Export All Settings control.
FERPA-related questions
For FERPA-specific inquiries, please contact Harrison Bleiberg through the contact page.
8. Security
The site is delivered over HTTPS. Without signing in, no user data is transmitted to a server operated by the site, so the primary security boundary is your own browser and device. Data in an account is stored by Supabase, encrypted in transit and at rest, and each account can read only its own rows and files (enforced in the database, not just in the page). The site keeps no passwords — sign-in uses one-time emailed codes or Google. The site does not promise backups of account data: keep your own .ivrit files and use Download everything on the account page. We recommend keeping your browser up to date and using device-level protections appropriate to your setting.
9. Changes to This Policy
If this policy is updated, the "Effective date" at the top of the page will change. Material changes will be reflected on this page; account holders may also be told by email about changes that affect what an account stores.
10. Contact
Questions or concerns about this policy can be directed to Harrison Bleiberg via the contact page, or by email at .