Privacy
live-math · last updated: 18 October 2026
In short: the sheets stay on your computer (in a folder or in the browser's memory) or, if you use the cloud, on the owner's server, tied to your email address. Every live is recorded on the server, with the teacher's sheets, exactly as the students see it; recorded lessons and published sheets open with their link. No analytics, advertising or tracking cookies.
Owner
Simeone Vilardo, simeone.vilardo@gmail.com.
The editor
- The sheets are
.mathfiles in a folder on your computer, chosen by you, or, in browsers that do not give access to folders (Firefox, Safari), in this site's storage in the browser. In both cases the site does not receive them, except for the sheets you keep in the cloud (below). - Preferences and a backup copy of the last text stay in your browser
(
localStorage, IndexedDB) and do not leave the device. - Backups and imports are files that you download or choose: they stay on your computer.
- The site's pages are static files served by Cloudflare.
- The exported HTML file, when it is opened, downloads the style of the formulas (KaTeX) from jsDelivr.
The live
- During a live the editor sends to the relay server the open sheet,
without the
%notes, together with the cursor position, the display settings, the pointer and the drawings. - The relay forwards them to viewers and keeps the last state in memory, for those who connect later; it deletes it as soon as the teacher stops the live. If instead the editor's connection is interrupted (network, window closed), it keeps it for those who connect at most an hour after the last connection, then forgets it.
- The live is also recorded (next section): the text that students see,
the active line, the drawings and the settings; never the pointer, the
%notes or the part of the sheet still covered by the curtain. - The relay's logs record only technical events (connections and disconnections) with the first four letters of the room identifier. Never the content, never email addresses.
- The relay runs on a server of the owner, reached through Cloudflare.
The sheets in the cloud
- Authorised teachers can keep the sheets in the cloud: a server of the owner, reached through Cloudflare. The text and the name of the sheets are stored there, in a folder that carries your email address.
- They stay there until you delete them. They are also deleted when you leave the group of authorised teachers (first, if you ask, you receive a copy) or when you ask the owner.
- The owner does not read them and does not make backups of them: a server failure can lose them. For important sheets keep a copy on your computer.
- The server's logs record only technical errors, without sheet names, text or email addresses.
- The browser keeps a backup copy of the last text and the cursor position of the cloud sheets too. The editor's “Log out” command deletes them, together with the list of recently opened sheets.
Recorded lessons and published sheets
- Every live is recorded on the owner's server, in the teacher's folder, one file for each sheet shown. A lesson in which the sheet did not change is not kept.
- With “Publish the sheet” the teacher saves a copy of the sheet on the
server, without the
%notes. - Lessons and published sheets contain the name and the text of the sheet and the date, never the teacher's email address. Anyone who has their link (a random 128-bit identifier) can open them, without an account and without cookies.
- They stay until the teacher deletes them from the editor; they are also deleted, with the sheets in the cloud, when they leave the group of authorised teachers or ask the owner. The owner does not read them and does not make backups of them.
- Whoever watches a lesson or a published sheet downloads the file from the relay; the logs record only technical errors, never identifiers or content.
Teacher access
- Only teachers authorised by the owner can start a live and use the cloud. The access happens through Cloudflare Access, with a Google account or with a one-time code that Cloudflare sends by email.
- With Google, Cloudflare Access receives from Google the email address and the profile name. With the code by email it receives only the address, to which it sends the code. In both cases live-math uses only the email address, to check that it is among the authorised ones and to link your account to your room and your sheets in the cloud.
- The list of authorised addresses is kept in the Cloudflare Access configuration. Cloudflare keeps a log of accesses according to its own rules.
- After logging in the browser keeps a technical session cookie
(
CF_Authorization), needed for the live and for the cloud. It lasts 30 days; the editor's “Log out” command closes the session earlier.
Viewers
Whoever opens a live link, a recorded lesson or a published sheet does
not need an account and does not receive cookies. The identifier is in the
part of the link after #, which the browser does not send to
the page server.
Providers
Cloudflare (pages, connection to the relay and the cloud, teacher access) and Google (login with the Google account) process IP addresses and technical data necessary for the service, also outside the European Union, with the guarantees provided by the GDPR. See the notices of Cloudflare and Google.
Legal bases and rights
The data is used to provide the service you use (art. 6.1.b GDPR) and to protect it from abuse (art. 6.1.f). You can ask at any time for access, rectification or deletion of your data, including removal from the group of authorised teachers, by writing to the contact above. You can also lodge a complaint with the Garante per la protezione dei dati personali.