Monster Speech Privacy Policy
Last Updated: October 2, 2026
This policy explains what Monster Speech stores, what it does not store, and who else can see it. It covers the Monster Speech website, platform, and games (the "Service"). It sits alongside our Terms of Service.
1. The short version
- Information about the people you work with — names, word lists, goals, stars, and scores — is held in your browser tab and is not transmitted to us.
- The account we store is yours, the therapist: an email address and whether your subscription is active.
- We never see or store card numbers. Payments are handled by Stripe.
- We do not sell personal information, and we do not run advertising on the Service.
2. Student information stays in your browser
When you add a student to a session, their name, goal, custom word list, avatar, stars, and prompt counts are kept in your browser's per-tab storage. That data is not written to our database, is not written to long-term browser storage, and is not sent to any server or third party.
Because it lives in a single tab, it is not available in another tab, another browser, or on another device. An unfinished session can be reopened from that same tab for up to twelve hours after the last activity; after that, or once you end the session, it is discarded. Closing the tab also discards it. There is no student record for us to hand over, export, or delete, because we never received one.
3. What we store about you, the therapist
- Email address and password. Accounts are managed by Supabase, our authentication and database provider. Your password is stored by Supabase as a hash, not as readable text.
- Subscription status. Whether your membership is active, plus an identifier that links your account to your Stripe customer record.
We use these to sign you in, to unlock the games your membership covers, and to contact you about your account.
4. Payments
Checkout is hosted by Stripe. Card numbers, expiry dates, and security codes are entered on Stripe's pages and are never sent to or stored on our systems. We receive a customer identifier and your subscription state so we know whether to unlock the arcade. Stripe handles that payment information under its own privacy policy.
5. Analytics
When analytics is enabled, we use Google Analytics to count which screens and games get opened. The Service reports only from a fixed list of generic paths, such as /session/arcade or a known game identifier. Query strings and URL fragments are stripped before anything is sent, and any screen we cannot match to that list reports nothing at all.
The practical effect is that student names and target words are not included in what we send to analytics, even if they appear in a link you opened. Google Analytics does receive standard technical details such as a device type, an approximate location derived from your IP address, and a cookie-based visitor identifier.
6. Service providers
- Supabase — accounts, sign-in, and the subscription record.
- Stripe — payments, subscriptions, and receipts.
- Vercel — hosting. Like any web host, it processes request logs, which include IP addresses.
- Google Analytics — usage counts, when enabled, as described above.
7. Children's privacy (COPPA and FERPA)
Monster Speech is built to be operated by a professional adult while a minor takes part. We do not market to children, and children do not create accounts. We do not knowingly collect personal information from a child, and the design above is the reason: what a child does in a session is never sent to us.
As set out in our Terms, you remain responsible for obtaining any consent your setting requires before a minor uses the Service, and for your own compliance with the laws that apply to your practice.
8. Your choices
You can ask us to correct or delete your account information by emailing the address below, and deleting your account removes the email address and subscription record we hold. You can clear session data yourself at any time by ending the session or closing the tab. To opt out of analytics, use your browser's tracking protection or a Google Analytics opt-out extension.
9. Changes to this policy
If we change what we collect, we will update this page and move the date at the top. If a change is significant, we will tell account holders by email.
10. Contact
Questions about this policy, or a request about your data? Email us at: founder@vybetechnologiesllc.com