Privacy Policy

1. Information We Collect

Information You Provide Directly

Information Collected Automatically

2. How We Use Your Information

We never collect, view, or store your card number, CVC, or bank details. All payment fields are rendered by PayPal directly (via PayPal Checkout/embedded PayPal buttons); bio-logicalgames.com receives only a confirmation of payment status and a transaction ID.

We use the information we collect for the following purposes:

• Provide and maintain the platform — run games, display leaderboards, process reviews
• Provide community profiles & notifications — render custom creator bio information, direct tipping buttons, manage follower-creator links, and notify resource owners of file downloads
• Process payments — fulfill premium content purchases via PayPal
• Respond to inquiries — reply to your contact form messages
• Improve our services — analyze usage patterns to enhance game features and user experience
• Ensure security & safety — detect and prevent abuse, spam, perform automated keyword analysis, visually highlight profane or inappropriate terms in red, provide client-side flag and report utilities, and perform administrative message audits to ensure an environment free from cyberbullying or harassment
• Legal compliance — meet our obligations under applicable laws

If you submit content to the Community Portal (e.g., a lesson plan or quiz) and it is selected as a Featured Contribution, we will use your Profile email to notify you and to apply a complimentary VIP upgrade to your account. We do not sell or share your submission with third parties outside the Platform.

For copyright infringement concerns regarding user-submitted Community Portal content, see our DMCA Takedown Policy in the Terms of Service, Section 10.

3. Legal Basis for Processing

Under Philippine Data Privacy Act (RA 10173)

We process personal data based on:

• Consent — when you voluntarily submit reviews, contact forms, or leaderboard entries
• Contractual necessity — to fulfill purchases you make through our platform
• Legitimate interest — to improve our platform, ensure security, and prevent abuse

Under EU GDPR (for EU/EEA visitors)

For users in the European Union and European Economic Area, we rely on the following legal bases under Article 6 of the GDPR:

• Article 6(1)(a) — Consent: for cookies, reviews, and optional data submissions
• Article 6(1)(b) — Performance of a contract: to process your purchases
• Article 6(1)(f) — Legitimate interests: to improve our services, ensure platform security, and analyze aggregated usage data

4. Your Account

You may sign in using Google Sign-In or with a passwordless email sign-in link. When you choose the email option, we email you a single-use link that expires in 15 minutes; these link tokens are stored only temporarily and are marked used or deleted after they expire. Registering with your email also creates a Profile tied to that address, which a later Google or email-link sign-in will access (they are matched by email). We do not use or store passwords. For Google Sign-In, authentication is handled entirely by Google's OAuth service, and we only receive your name and email address to create your Profile.

Profile Privacy & Referral Sharing: To prevent account enumeration attacks and protect database primary keys, all shareable "My Evolution" profile links and timeline dashboards use a custom, randomized, unique string identifier (your `referral_code`, e.g., challenges.html?user=ref_x89a3f). No internal database IDs are exposed publicly.

Deleting your account. You may request deletion of your Profile and associated data (saved progress, leaderboard entries, message history) at any time by contacting admin@bio-logicalgames.com or using the "Delete My Account" option in Profile Settings. We will complete deletion within 30 days, except for information we are required to retain for legal, tax, or fraud-prevention purposes.

5. Data Storage & Security

Your data is stored using the following infrastructure:

• Cloudflare Pages — hosts our website (global CDN with built-in DDoS protection)
• Cloudflare D1 — stores leaderboard scores, reviews, contact form submissions, Google Customer profiles, and support message logs (SQLite-based, edge-distributed)
• Cloudflare KV — stores temporary session states, counters, and admin reply attachments
• PayPal — processes and stores all payment data (we never see your card or bank details)

We implement appropriate technical and organizational measures to protect your data, including:

• HTTPS encryption on all connections (TLS 1.3) protecting all messages and profile syncs in transit
• Input validation and sanitization on all forms
• Rate limiting on API endpoints to prevent abuse
• Encrypted storage at rest managed by Cloudflare infrastructure

6. Cookies & Tracking Technologies

On your first visit, you will be shown a cookie consent banner allowing you to accept or decline non-essential cookies (including Google Analytics). Essential cookies required for core site function (e.g., session state, cart contents) are set regardless, as permitted under applicable law. You can change your preference at any time via the "Cookie Settings" link in the footer.

Our site uses a minimal number of cookies:

We use localStorage (not cookies) to store:

• Game preferences (difficulty, mode selection)
• Premium unlock status
• Cookie consent preference

7. Third-Party Services

We use the following third-party services that may process your data:

Each third-party service operates under its own privacy policy. We encourage you to review them.

8. Data Retention

We retain your data for the following periods:

• Google & Email-based Biologist Profiles: Retained until you delete your account or request data removal. In accordance with our data minimization policy, accounts with no login activity for over six (6) consecutive months may be systematically deleted along with all associated progress metrics.
• Leaderboard scores: Retained indefinitely (publicly visible by design) unless associated with an inactive account that is pruned
• Reviews: Retained indefinitely unless you request removal
• Contact form messages & reply logs: Retained securely to preserve your support history thread, unless deletion is requested
• Direct messages between users: Retained for 12 months from the date sent, or until either party deletes their account, whichever is sooner. Messages may be retained longer if flagged as part of an active moderation review.
• Server logs (Cloudflare): Retained for up to 72 hours by Cloudflare
• Payment records: Retained by PayPal per their data retention policy

You may request deletion of your data at any time by contacting us (see Section 13).

9. Your Rights

🇵🇭 Under Philippine Data Privacy Act (RA 10173)

🇪🇺 Under EU General Data Protection Regulation (GDPR)

🇺🇸 Under California Consumer Privacy Act (CCPA)

🌏 For All Users Worldwide

Regardless of your location, you can always:

• Request a copy of your data
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent for optional data processing

To exercise any of these rights, contact us at admin@bio-logicalgames.com. We will respond within 30 days.

10. International Data Transfers

Our platform is operated from the Philippines and hosted on Cloudflare's global CDN, which distributes data across multiple countries to provide fast, secure access worldwide.

When you use our platform, your data may be processed in countries outside your own. We ensure that any international transfers comply with applicable data protection laws through:

• Cloudflare's GDPR compliance commitments and Standard Contractual Clauses (SCCs)
• PayPal's global privacy framework

11. Children's Privacy

bio-logicalgames.com is designed to be usable by classroom-age students, and we take extra care with data from children under 13 (or the applicable age of digital consent in your region).

Guest play. CellMatch, Cell Oracle, and Single-Cell can be played as a Guest without creating a profile. Guest sessions do not save progress, do not appear on leaderboards, and are not linked to any personal data.

Creating a Biologist Profile. Saving progress, joining the leaderboard, submitting to Challenges, and unlocking Premium/VIP features require a Biologist Profile, which collects a name or nickname and an email address. Creating a Profile is optional and is never required to play the core games.

Users under 13. If you are under 13, please create a Biologist Profile only with a parent or teacher's help and permission. A parent or guardian may contact us at admin@bio-logicalgames.com at any time to review, correct, or delete a child's Profile data. We do not knowingly collect Profile data from a child under 13 without a parent or teacher's involvement, and we will delete such data promptly if we learn it was collected without appropriate consent.

Classroom/institutional use. Where a Profile is created by a teacher on behalf of students (e.g., via a classroom code), the teacher's consent stands in for individual parental consent for that classroom's use, consistent with U.S. Department of Education guidance on school-authorized ed-tech tools. Teachers should notify parents that the Platform is in use.

This section is designed to comply with the U.S. Children's Online Privacy Protection Act (COPPA), the Philippine Special Protection of Children Against Abuse, Exploitation and Discrimination Act (RA 7610), and the UK Age Appropriate Design Code.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes:

• We will update the "Last updated" date at the top of this page
• For material changes, we will display a notice on our homepage
• Continued use of the platform after changes constitutes acceptance of the updated policy

We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or have concerns about how we handle your data:

• Email: admin@bio-logicalgames.com
• Website: bio-logicalgames.com (use the Contact Form)

For complaints regarding data privacy in the Philippines, you may also contact the:

• National Privacy Commission (NPC)
  Website: privacy.gov.ph
  Email: complaints@privacy.gov.ph