Privacy

Short version: Marrow doesn't know who you are, sets no cookies, and has no adverts or third-party trackers.

What we collect

Analytics are off unless the site owner switches them on. When they're on, Marrow sends counts of events to Umami, a cookie-free, open-source analytics service, with no personal identifiers, no cookies and no stored IP addresses. Page addresses are sent without anything after the ? or #, so your view and any licence key stay on your device. This is the complete list:

Event	What it records
`pageview`	The page path (e.g. `/s/heart`), the page that linked here, the page title, your browser language and screen size
`landing`	How the visit started: home page, a shared link, a part's page, a tour page
`card_open`	Which part, and how you got there (tap, search, link, see-also, surprise, browse)
`engaged_session`	That a visit opened three or more cards or tour stops (nothing else)
`search`	Roughly how many results there were (0, 1, 2–4, 5+) and whether an everyday name matched
`search_no_result`	The words typed, lower-cased and cut to 40 characters, so we can add missing names
`share`	Which part, and whether you used the share sheet or copied the link
`layer_change`	Which body system was switched, and to what
`isolate`	Which isolate option was used
`tour_start`, `tour_stop`, `tour_complete`	Which tour, and which stop
`export`	Image size, background and whether a label was added
`offline_download`	That a full offline download started or finished
`supporter_view`, `unlock`	That the support dialog was opened (and from where), and the tier unlocked. No payment details
`classroom_mode`	That classroom mode was switched on or off
`body_change`	That the female or male body was chosen

These counts are used only to improve Marrow, for example to decide which cards to write next.

What stays on your device

Your browser keeps a few things locally. None of it identifies you and none of it is sent to us:

Preferences: that you've dismissed the first-run hint, and your theme.
For this tab only (cleared when you close it): whether classroom mode is on, and how many cards you've opened this visit.
If you're a supporter or a school: your licence key.
If you use Marrow offline: copies of the 3D models, cards and tours.

Payments

If you become a supporter or buy a school licence, payment is handled by Lemon Squeezy, our payment provider and the merchant of record. Lemon Squeezy, not Marrow, holds your purchase data: your name, email address, billing details and receipts. We never see your card details.

To check a licence, your browser sends the licence key (and a device label such as "Marrow on Safari · iOS") directly to Lemon Squeezy's licence service, about once a week. The answer says only whether the key is valid and which product it is for. See Lemon Squeezy's privacy policy.

For schools: data statement

A summary for procurement and privacy reviews:

Question	Answer
Student accounts or logins?	None. Students never sign in or give a name or email.
Personal information collected?	None.
Cookies or local identifiers?	None. The browser stores a few preferences, and the school's licence key on devices where a teacher entered it.
Analytics	Optional, cookie-free counts of feature use (listed above). No IP addresses stored, no cross-site tracking.
Third parties	Lemon Squeezy, for the school's purchase and licence checks only (no student data). No adverts, no social media widgets.
Data location	A static website on a content delivery network. No database holds anything about users.
Works offline / on a closed network?	Yes: the offline bundle runs from any web server on the school network.

Children

Marrow is suitable for families and schools. Because we collect no personal information, there is nothing about your child for us to store or share.

Contact

Questions about privacy? Open an issue on our GitHub repository.