Account sign-in privacy
Parent and guardian email sign-in · Last updated November 9, 2026
This notice explains the information used when you request a BE U sign-in code and create or use a parent or guardian account. It is separate from the fictional Academy demo. Signing in does not create a child profile or move your browser-saved demo activity into your account.
Your email and account
We use the email address you enter to send a one-time sign-in code and, after successful verification, associate the address with your account. We store your email address, an internal account identifier, account role and status, and verification time. Email sign-in does not ask for a password or subscribe you to marketing.
Email verification confirms access to an inbox; it does not verify age or a relationship to a child. Only request a code for an email address you are entitled to use. This sign-in is intended for parents and guardians. Do not enter a child's email address or other child information.
Sign-in and security information
Cloudflare delivers the sign-in page and email, operates the account database, and processes connection information such as your IP address. The sign-in service uses one-way or keyed hashes of security tokens, code challenges, email identifiers, and rate-limit identifiers, plus request times, expiry times, attempt counts and delivery status. It does not store the readable sign-in code in its account database.
Your email provider receives the sign-in email. A sign-in code is valid for 10 minutes and can be used once. A new code cannot be requested for the same email address more than once every 60 seconds. Additional limits help protect the service and other visitors.
The account pages load the same Google Fonts used by the public website. Your browser connects to Google to retrieve those font files, sending connection and request information. Read Google's privacy policy.
Cookies and remembering your place
The sign-in uses necessary, first-party security cookies. A temporary browser-binding cookie lasts up to 20 minutes. After sign-in, session and request-protection cookies last up to seven days unless removed or invalidated earlier. These cookies are not advertising cookies. Signing out invalidates the current session and clears its session and request-protection cookies; it does not delete the account.
During sign-in, session storage in the browser tab temporarily remembers your entered email address, a nonsecret challenge identifier and deadlines so reloading can restore the code-entry screen and resend countdown. The code itself and account session credentials are not placed in that storage. Closing the tab normally clears session storage, although browser restoration may preserve it. Someone with access to the same browser profile may be able to see the remembered email address.
The separate Academy demo, practice, coloring and THINCNG activities have their own browser-local saves. Signing in or out does not transfer, protect or delete those local saves. Read the website privacy notice for those activities.
How long information stays
Expired code challenges become eligible for cleanup one day after their expiry. Old request throttles, expired rate-limit buckets and expired technical replay records are also eligible for cleanup. The retention routine uses bounded cleanup batches, so eligibility is not a guaranteed deletion deadline. No automatic cleanup schedule is active during this limited sign-in test. Account and email-verification records, session records and minimal session-revocation records do not currently have an automatic deletion schedule.
Cloudflare and your email provider may retain their own records under their applicable arrangements. Deleting a sign-in email, clearing browser data or signing out does not itself delete server-side account information.
Your choices and questions
You can explore the public stories, practice and activities without an account. You can sign out and clear this site's browser data on a shared device. To ask about account information or request access, correction or deletion, contact the BE U team using your own email address. Do not send a sign-in code, password, identity document or unnecessary child information in a request.
For Cloudflare's own privacy information, see Cloudflare's privacy policy. This notice does not describe a live child-record service, tutoring service or connected AI service.