Privacy Policy
Effective October 21, 2026
Wingit collects as little as it can: a teacher's email and the materials they save, and nothing at all from students. This policy explains what we keep, why, who else touches it, and how to have it deleted.
Who we are and what this covers
Wingit is operated by Joseph Gill, 13475 Atlantic Blvd, Unit 8 Suite M671, Jacksonville, FL 32225 ("Wingit", "we"). This policy covers the website at www.wingit.tools, the Wingit app, Lil' Wingit's printables for young children, the student practice links it makes, and the Wingit connector that AI assistants (such as Claude, ChatGPT, Grok and Muse) use to make materials. Questions go to support@wingit.tools.
What we collect from teachers
We never ask for a name, school, phone number or student roster. Here is everything we keep:
| What | Exactly | Why |
|---|---|---|
| Account | Your email, whether you have confirmed it, and how you sign in: a Google account id, or a password stored only as a scrambled hash | To sign you in and keep your materials yours |
| Saved materials | The settings of each resource and folder you save: skills, level, version name, title, header lines, a Mosaic picture you drew or uploaded (kept as a grid of squares, not the image file) | So you can reopen, reprint and reshuffle them on any device |
| Billing | A Stripe customer id, your plan's status and renewal date. Card details go to Stripe and never reach us | To give paying teachers the full plan |
| Free-tier record | Which of the one-free resource types you have made | To keep the free tier at one of each |
| Usage counts | One row each time a resource is made, printed, downloaded as a PDF, saved, shared as a practice link, or shown in an AI assistant's chat: the resource type, the time, your account if you are signed in, and which assistant if one was used | To learn which resources teachers use. Our own database stores no page views, IP addresses or device details (what PostHog gets is the next row) |
| Product analytics (PostHog) | On teacher pages only: the pages you visit and the buttons you click, how you arrived (the site, search or campaign link that sent you), your browser, device and screen size, your IP address (for country and city), a random id for your browser, and recordings of how pages were used, with everything typed and every email address hidden. After you sign in, your Wingit account id, plan, and whether you joined on the site or through an AI assistant. Never your email address, a name, or what is on a sheet | To see how teachers use Wingit and where they come from, so we know what to fix and build next |
| Cookies | One cookie that keeps you signed in for 90 days, and on teacher pages PostHog's analytics cookie (named ph_…), which holds the random id for your browser | Signing in, and counting visits. We use no advertising cookies |
If you use Wingit signed out, what you save stays in your own browser and is never sent to us. To slow down password guessing and other abuse, we briefly hold IP addresses in server memory; they are never written to our database. Our hosting provider keeps standard server logs for a short time.
Turning analytics off
Wingit honors Global Privacy Control, a setting in some browsers and browser extensions. If your browser sends it, PostHog never loads there. Once a browser signed in to your account sends it, we send PostHog nothing more about your account, from any browser. Our own usage counts (above) continue, since they hold no page views or device details.
Students
We collect nothing from students. Wingit is made for teachers, and students only meet it on paper or through a practice link a teacher shares.
- Students never make an account or sign in.
- The practice page stores nothing on our side: no answers, no scores, no names, no usage counts. The only thing it remembers is the student's best streak, a single number kept in that device's browser.
- The page runs no third-party scripts and no analytics: PostHog never loads there. Like every page on the site, it loads its typefaces from Google Fonts, which sees the browser's IP address when it serves them.
Because we hold no student information, Wingit creates no student education records.
Lil' Wingit and young children
Lil' Wingit (www.wingit.tools/lil) makes printables for children in PreK to 2nd grade. Grown-ups make them; children only meet them on paper.
- A child's name typed for a Name Puzzle, Trace My Name or any other page stays in your browser. It is never sent to us, saved, logged, or put in a link.
- We collect nothing from or about children.
- On these pages PostHog notes the visit but not the page itself: page recordings show a blank box and clicks aren't captured.
- Our usage counts note which printable was made, printed or downloaded, never what is on it.
AI assistants
When you ask an AI assistant to use Wingit, we see only the request it sends us (the skills, level and settings), never your conversation.
- Drafts. Each resource an assistant makes is kept with its settings, the assistant's name, and your account if one is connected, so its link keeps working.
- Connecting your account. If you connect your Wingit account, we keep the assistant's registration (its name and return address) and the access codes it uses. Those codes are stored only in scrambled form; access codes expire after an hour and renewal codes after 90 days.
- Disconnecting. Remove Wingit in your assistant's settings to stop it using your account. Ask us and we cancel its codes at once.
What the assistant itself keeps is covered by that company's own privacy policy.
How we use it, and what we never do
We use what we keep to run Wingit: sign you in, store and rebuild your materials, run your plan, answer you when you write, and count which resources get used so we know what to build next.
We never:
- sell or rent your information, or share it for advertising;
- run ad trackers, or analytics of any kind on the student practice page;
- use your materials or account to train AI models, or show the AI assistants you connect anything beyond what they asked us to make plus your account's email and plan.
Email we send
Your account gets the email it needs: a link to confirm your address when you sign up with a password, and a link to reset your password when you ask for one. We send news about Wingit, such as new printables and offers, only to teachers who choose to get it, and every one of those emails lets you stop them with one click.
Who else handles your information
Only the services Wingit runs on, each for one job:
| Service | What it gets | Why |
|---|---|---|
| Your sign-in, if you choose Google (we ask only for your email) | Sign in with Google | |
| Stripe | Your email and payment details when you subscribe | Billing |
| Railway | Everything we store, on its servers in the United States (US West) | Hosting and our database |
| PostHog | The product analytics listed above, from teacher pages only, sent through our own domain to PostHog's servers in the United States | Understanding how Wingit is used |
| Cloudflare | Our domain's address records, and visits to wingit.tools without the www (their IP address), which it forwards to www.wingit.tools | Running the domain |
| Postmark | Your email address, and the confirmation or password-reset email we send to it. We turn off its open and click tracking | Sending account email |
| ImprovMX | Email you send to support@wingit.tools, which it forwards to our inbox | Answering you |
| Google Fonts | The IP address of any browser that loads a page | Typefaces |
We would also share information if the law required it, or to protect someone's safety. If Wingit were ever sold or merged, this policy would travel with your information, and we would tell you first.
How long we keep it, and deleting it
We keep your account and saved materials until you ask us to delete them. Drafts made through an AI assistant are kept so their links keep working. PostHog keeps analytics for 1 year and page recordings for 30 days.
To delete your account, or to get a copy of what we hold, write to support@wingit.tools from the address on the account. We answer within 30 days. Deleting removes your account, saved materials, folders, free-tier record and AI connections; usage counts and assistant-made drafts stay, no longer tied to you, and your PostHog record is deleted. Stripe keeps its own billing records as the law requires.
You can delete any saved resource yourself in the app at any time.
Security
Everything travels over HTTPS. Passwords, AI access codes and the links we email you are stored only as one-way hashes, our database is not reachable from the internet, and every request for your data is checked against your account. No system is perfectly secure; if a breach ever touched your information, we would tell you.
Children
Wingit accounts are for teachers and other adults. We don't knowingly collect information from children under 13, and students never need an account. If you believe a child made an account, tell us and we will delete it.
Changes and contact
If we change this policy, the new version appears here with a new effective date, and we will point out any change that matters on the site before it takes effect. Questions or requests: support@wingit.tools, or by mail to Joseph Gill, 13475 Atlantic Blvd, Unit 8 Suite M671, Jacksonville, FL 32225.
See also the Terms of Service.