Privacy Policy

Last Updated July 2, 2026

This Privacy Policy explains what Kids Review Kids' Books ("KRKB"), a digital platform developed and operated by Learnastra LLC, collects, why we collect it, how we use and share it, and the choices available to readers, families, schools, and libraries.

Questions about this policy can be sent to contact@krkb.org.

This policy applies to KRKB online services, public pages, managed program activity, and account activity. Separate written agreements may apply for schools, libraries, or other organizations using KRKB as part of a managed program.

Consent

By using KRKB, you agree to this Privacy Policy.

Ways KRKB Can Be Used

Public browsing: Public KRKB pages, public curated shelves, public reading challenge pages, public Reading Program pages, and public rollout materials can be browsed without creating a personal KRKB account. Like most websites, these visits may still generate server logs used for security, troubleshooting, and aggregate site operation.

School/library-managed reader profiles: Schools, school libraries, public libraries, and similar organizations may create or manage rostered reader profiles, group access, QR login cards, program join paths, nicknames, assignments, shelves, challenges, moderation queues, and reports. Rosters can be added manually, imported by CSV, or synced from a school roster provider such as Clever when a teacher authorizes it. These managed profiles are not the same as a child or library patron creating a personal KRKB account with their own email address. The organization controls the program context and should provide only the information reasonably needed to run that program.

Display-name program participation: Some Reading Program join links may record display-name participation without creating a personal KRKB account. That participation is still treated as a privacy-relevant program record because it can show participation in a specific school, library, class, branch, or reading program.

Family or self-created accounts: Families, adult users, educators, or eligible readers may also create personal KRKB accounts where supported. These accounts may be used for saved reading activity, posted work, parent-linked access, educator tools, or other KRKB features.

Information We Collect

KRKB asks for information needed to create personal accounts or managed reader profiles, run reading features, support safety, provide parent or educator access, respond to support requests, and operate school or library programs.

If you contact us directly, we may receive your email address, message contents, attachments, and any other information you choose to provide.

Depending on access path, KRKB may collect or receive details such as username, display name, nickname, email address, birth date or age range, parent or educator connection, organization information, roster or group membership, program participation, reader activity, and content submitted through KRKB. Younger readers use KRKB through parent consent, parent-linked access, or school/library-managed access paths where applicable.

How We Use Your Information

KRKB uses collected information to:

• Provide, operate, secure, and maintain KRKB
• Let readers find books, write reviews, take quizzes, create stories, join clubs, and participate in programs
• Help parents, teachers, and librarians manage linked accounts, school/library-managed reader profiles, rosters, assignments, moderation, and reports
• Respond to support, safety, privacy, and procurement requests
• Improve KRKB features and detect abuse, fraud, or security issues
• Send account, service, safety, and program-related emails

Data Sharing & Corporate Affiliation

KRKB may share limited administrative and operational information with Learnastra LLC and service providers that help run infrastructure, security, support, moderation, analytics, and school or library workflows. KRKB does not sell student or library patron personal information or use it for behavioral advertising.

School Single Sign-On and Rostering (Clever)

KRKB supports Clever Library for teacher-managed single sign-on and classroom rostering. A Clever connection is always initiated and authorized by a teacher or authorized school staff member — students cannot self-register on KRKB through Clever, and a student's Clever sign-in only works after their teacher has synced the class roster.

When a teacher authorizes KRKB through Clever, KRKB receives the teacher's name, school email address, and district and section identifiers, plus a privacy-minimal roster for each authorized class: each student's first name, last initial, grade level, and Clever identifiers. Clever does not share student email addresses or passwords with KRKB through this integration, and KRKB never sees or stores Clever login credentials. Authentication happens on Clever's systems using the school's existing login.

KRKB uses Clever-provided information solely to create and maintain the school-managed reader profiles, classroom membership, and sign-in mapping needed to run the school's reading program. It is not used for advertising, is not sold, and is not shared beyond the service providers described in this policy. If a student is removed from the class roster in Clever, KRKB marks the linked reader profile inactive on the next sync; schools can request deletion of rostered profiles and their records at any time. Clever's own practices are described in the Clever Privacy Policy.

Third-Party Digital Library & External Retail Routing

KRKB can help users find books through external library tools and, in general discovery contexts, optional retailer search pages such as Libby, Sora, Hoopla, Amazon, and Barnes & Noble. These links use public book metadata, such as title and author, to open a search or product page. KRKB does not intentionally send KRKB account identifiers, passwords, or library card numbers through these links. School and library rollouts can keep discovery library-first and do not need to use retailer links.

Security & Bot Protection

We use Cloudflare Turnstile to prevent spam and abuse on our platform. Turnstile operates in "Invisible" mode to silently verify visitors without visual disruption. By using our website, you acknowledge the use of Cloudflare Turnstile, which is subject to the Cloudflare Privacy Policy and their Turnstile Privacy Addendum.

Log Files

Like most websites, KRKB receives server logs that may include IP address, browser type, device information, date and time, pages requested, and error details. KRKB uses this information to operate the service, troubleshoot issues, protect security, and understand aggregate site performance.

Cookies and Analytics

KRKB uses required cookies for secure site operation, including login, managed reader access, account security, preferences, and abuse prevention. Optional analytics are used only when accepted through the cookie banner.

Analytics, where enabled, are intended to measure aggregate site usage. KRKB does not sell personal information.

Managing Cookies

You can choose to disable cookies through your individual browser options. To know more detailed information about cookie management with specific web browsers, it can be found at the browsers' respective websites. You can also manage your consent preferences on this site at any time by clicking "Manage Cookies" in the site footer.

CCPA Privacy Rights (Do Not Sell My Personal Information)

Under the CCPA, among other rights, California consumers have the right to:

• Request that a business that collects a consumer's personal data disclose the categories and specific pieces of personal data that a business has collected about consumers.
• Request that a business delete any personal data about the consumer that a business has collected.
• Request that a business that sells a consumer's personal data, not sell the consumer's personal data.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

GDPR Data Protection Rights

We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

• The right to access – You have the right to request copies of your personal data. We may charge you a small fee for this service.
• The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.
• The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
• The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.
• The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

Account Deletion & Data Retention

Users, linked parents, schools, or libraries may request deletion or access support through available account tools or by contacting KRKB.

Schools and libraries may also contact KRKB about deletion or deactivation of school/library-managed reader profiles, roster data, program data, and related reports tied to their organization or managed program.

When a deletion request is processed, KRKB removes or deactivates public access to the relevant account profile and associated personal information where required and supported.

KRKB may retain limited records when needed for legal, safety, security, billing, dispute-resolution, audit, or backup obligations. Remaining records are deleted or de-identified according to applicable retention practices.

Children's Information

KRKB asks readers not to post full names, addresses, phone numbers, school names, email addresses, or other private contact details in public content.

KRKB collects limited information needed to operate child accounts and school/library-managed reader profiles through the consent, parent-linked, or school/library-managed access paths described in this policy. If you believe a child shared personal information publicly or without the required consent path, contact KRKB so we can review and respond.

Verifiable Parental Consent

For users under the age of 16, or the applicable age in their jurisdiction, KRKB requires a supported consent, parent-linked, school-managed, or library-managed access path before full account access is enabled. Parent or guardian verification may include a Knowledge-Based Authentication (KBA) check.

When parental access is linked, parents and guardians can use the Parent Portal to review supported account activity and controls. KRKB may also send a Weekly Digest email summarizing linked reader activity.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.