Community guidelines | Privacy FAQ | Privacy Policy | Cookie Policy | Children's Privacy Policy | General Terms of Use | Teen Terms of Use | UK Digital Citizenship Terms of Service | Survey Privacy Policy | Subprocessor List
Last updated: March 11, 2025
COMMON SENSE SUBPROCESSOR LIST
Welcome! We are committed to transparency and dedicated to protecting your privacy and handling the Personal Information we obtain with care and respect. Below you will find the names of the service providers Common Sense Media, Inc. ("Common Sense", "we", or "us") uses in connection with providing services to schools and for the provision of services through our main website (www.commonsense.org).
To fulfill our mission, we provide certain products and services to schools, and to end-users, directly, through our websites and apps using vendors that process personal data on our behalf to help us provide those products and services. These vendors are called third-party service providers, critical vendors, or subprocessors. We act as controllers of the personal information collected in this context and our data practices are fully described in our Privacy Policy.
We act as service providers to schools and students in connection with our Digital Citizenship Curriculum and other similar offerings. As service providers, we are aware that schools and students may want to know which vendors with whom we contract to process their personal data for the products and services they use. For this reason, we have compiled a list of the subprocessors that regularly process personal data for our products and services, including additional information.
PLEASE NOTE:
We will provide updates as needed.
Subprocessors for Products and Services Offered to Schools
Main Service Provider for Google Classroom / Google Quizzes
- Learning Pool
- Purpose: Learning Locker is a record store designed to track and manage learning activity data, such as quiz results.
- Contact: https://learningpool.com/contact-us/
- Privacy Policy: https://learningpool.com/privacy-policy/
- Pantheon
- Purpose: Pantheon hosts the Drupal-based Common Sense Educator website and stores a limited amount of student Personal Information (such as student Google ID and quiz results).
- Contact: [email protected] or [email protected]
- Client Legal Agreements area (includes Privacy Policies): https://pantheon.pactsafe.io/ClientAgreements.html#contract-r1eemlhxo
- Google
- Purpose: Google Classroom is used to provide educators with access to create quiz assignments and generate student quiz scores.
- Contact: http://www.google.com/intl/af/contact
- Privacy Policy: https://edu.google.com/intl/ALL_us/why-google/privacy-security/
Service Providers for other Products and Services Offered to Schools
Note: This list was formulated to ensure comprehensive coverage and inclusivity, accounting for the possibility that data may be stored or processed by these systems under certain circumstances.
- Airtable
- Purpose: Cloud based data management system
- Contact: [email protected]
- Privacy Policy: https://www.airtable.com/company/privacy
- Amazon Web Services/Cloud Products
- Purpose: cloud computing services
- Contact: https://aws.amazon.com/contact-us/?nc1=f_m
- Privacy Policy: https://aws.amazon.com/legal/?nc1=f_cc
- Asana
- Purpose: Internal Communications
- Contact: https://asana.com/terms/privacy-statement#contact-us-and-privacy-questions
- Privacy Policy: https://asana.com/terms/privacy-statement
- Atlassian
- Purpose: Internal Communications
- Contact: https://www.atlassian.com/legal/privacy-policy#contact-us
- Privacy Policy: https://www.atlassian.com/legal/privacy-policy#what-this-policy-covers
- BugHerd
- Contact: support [at] bugherd [dot] com
- Privacy Policy: https://bugherd.com/privacy
- Classy
- Purpose: Payment processor
- Contact: [email protected]
- Privacy Policy: https://www.classy.org/terms/privacy/
- Cloudflare
- Purpose: Web application security and performance
- Contact: [email protected]
- Privacy Policy: https://www.cloudflare.com/privacypolicy/
- Convert.com
- Purpose: A/B testing
- Contact: https://www.convert.com/contact-us/
- Privacy Notice: https://www.convert.com/privacy-notice/
- Form Assembly
- Purpose: Build and automation data flow to Salesforce
- Contact: [email protected]
- Privacy Policy: https://www.formassembly.com/privacy-policy/
- GitHub
- Purpose: developer platform that allows developers to create, store, manage and share their code
- Contact: dpo[at]github[dot]com
- Privacy Policy: https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement
- Google (includes Analytics, Sites, Drive, Forms)
- Purpose: Workspace, Captcha (ReCaptcha), Video (YouTube), Analytics
- Contact: http://www.google.com/intl/af/contact
- Data Responsibility and Privacy Policy: https://business.safety.google/?sjid=10198848367695021747-NC
- Informizely
- Purpose: Targeted surveys
- Contact: [email protected]
- Privacy Policy: https://www.informizely.com/privacy-policy
- Instapage
- Purpose: Build custom landing pages
- Contact: [email protected]
- Privacy Policy: https://instapage.com/privacy-policy
- Learning Pool
- Purpose: Learning Locker (data store/repository) designed to store learning activity
- Contact: https://learningpool.com/contact-us/
- Privacy Policy: https://learningpool.com/privacy-policy/
- MTCaptcha
- Purpose: captcha service
- Contact: https://www.mtcaptcha.com/contact or [email protected]
- Privacy Policy: https://www.mtcaptcha.com/legals
- New Relic
- Purpose: Full stack monitoring
- Contact: https://newrelic.com/termsandconditions/privacy#how_to_contact_us
- Privacy Policy: https://newrelic.com/termsandconditions/privacy
- OneTrust
- Purpose: platform for managing Privacy and Data Governance, GRC and Security, Ethics and Compliance
- Contact: [email protected]
- Privacy Policy: https://www.onetrust.com/privacy/
- Pantheon
- Purpose: WebOps platform used by website
- Contact: [email protected] or [email protected]
- Client Legal Agreements area (includes Privacy Policies): https://pantheon.pactsafe.io/ClientAgreements.html#contract-r1eemlhxo
- Salesforce
- Purpose: Manage customer data, email delivery, customer support
- Contact: https://www.salesforce.com/form/other/privacy-request/
- Privacy Policy: https://www.salesforce.com/ap/company/privacy/
- Slack
- Purpose: Internal Communications
- Contact: [email protected]
- Privacy Policy: https://slack.com/trust/privacy/privacy-policy
Main Processors for Products and Services Offered through our Main Website and App (www.commonsense.org)
Note: This list has been compiled to identify the principal processors utilized in connection with the operation of our website. For the purpose of brevity, we have not repeated the core service providers for standard services; these entities are detailed in the list provided above.
- Amplitude
- Purpose: Product analytics and event tracking
- Contact: [email protected]
- Privacy Policy: https://amplitude.com/privacy
- Giving Block
- Purpose: Crypto Donations
- Contact: [email protected]
- Privacy Policy: https://thegivingblock.com/about/privacy-policy/
- Google Ads
- Purpose: Marketing/Advertising of our products
- Contact: http://www.google.com/intl/af/contact
- Data Responsibility and Privacy Policy: https://business.safety.google/?sjid=10198848367695021747-NC
- Link
- Purpose: Stripe product to allow pre-saved payment methods to be used for payment
- Contact: https://stripe.com/legal/privacy-center#contact-us
- Privacy Policy: https://link.com/privacy
- Meta Ads
- Purpose: Marketing/Advertising of our products
- Contact: https://help.meta.com/support/privacy
- Privacy Policy: https://www.facebook.com/privacy/policy
- Movable Ink
- Purpose: Email content personalization
- Contact: [email protected]
- Privacy Policy: https://movableink.com/privacy-policy
- OpenAI
- Purpose: AI-driven enhancements for website and apps
- Contact: [email protected]
- Privacy Policy: https://openai.com/policies/row-privacy-policy/
Subprocessors vs. Third-Party Applications
Third-party applications are different from subprocessors. Third parties may build complementary services for our platform. A typical example of a third-party application is an authentication service. You may register for or access your account with us through an authentication service such as Google as Single Sign On (SSO). We do not control third-party applications as they are not our vendors. All third-party applications (including SSO), are under your direct control and oversight. Because these third-party applications are not considered subprocessors, you will not find them listed on this page.
If you (or your school) choose to use a third-party application, the use of the third-party application will be governed by that third-party’s Terms of Service and Privacy Policy.
More Information
For more information about how we handle personal data, please see our Privacy Policy.