# FERPA Readiness

Status: unsigned technical draft; not a FERPA determination

The included local build does not create an account, send action history to a server, or retain a cloud learner profile. A user may choose to download `level.dat`, which can contain world state and non-psychometric performance evidence.

If a school stores, receives, or links that file to a student, it may become part of an education-record workflow controlled by the school. A deployment agreement must define the school and provider roles, permitted educational purpose, access, security, retention, deletion, subcontractors, incident response, parent/eligible-student rights, and return or destruction of records.

Digital Promise's Research-Based Design application requires a signed FERPA letter. This repository does not include a signature and must not claim that requirement is complete. An authorized adult representative of the actual company or institution should work with qualified education-privacy counsel, review the deployed data flow, complete the current official form, and sign only statements the organization can verify.

No code test can replace that legal and organizational step.
