Children do not have accounts
A student joins with a class code, a codename they choose and a four-digit PIN. No email address, no name, no date of birth: nothing that identifies a child leaves the classroom. The codename carries their progress from one mission to the next, so the work still builds across the year.
A child can also play a live game as a guest, with a display name and no account at all.
Teachers hold the account
Teachers sign up with an email address and a password. Agents are scoped to a school, so a child taught by two teachers in the same school is one agent with one record rather than two.
The work happens on paper
Every activity is designed to be worked out away from the screen and then entered to be checked. Nothing is ever worth more for being answered quickly. Worksheets and dossiers print, and the screen is where an answer is verified rather than where the thinking is done.
A licence stays with the teacher
One purchase gives a teacher permanent access to an activity, which they can then run with as many classes as they like, for as long as they like. Schools hold the subscription that the teachers sit under.