This Privacy Policy explains what information we collect when you use International Math Bee®, how we use it, and the choices you have. It applies to our website at https://internationalmathbee.org, the Parent/Teacher Portal at https://portal.internationalmathbee.org and the BatterUp® student game at https://game.internationalmathbee.org (together, the "Service").

1. Who we are

The Service is operated by:

In this policy, "we", "us" and "our" mean CompuSage, LLC. "You" means the parent, guardian, teacher or other adult who uses the Service. "Student" means a child whose account you create. "Personally Identifiable Information" or "PII" means any information that can be used to identify a specific person, such as a name, email address, phone number or date of birth. "Anonymous username" means the name a student plays under in the game. It is chosen so that the public cannot identify the student from it.

2. The short version

3. Information we collect

3.1 From parents, guardians and teachers

When you create a Parent/Teacher account, we collect: your first and last name, email address, date of birth, account type (teacher or parent), your school, and your password (stored in protected form).

When you buy seats, our payment provider Stripe collects your payment details. We do not see or store your full card number. We receive a record of your purchases, such as the plan, number of seats, amount and date.

When you write to us, we keep your message and our reply.

3.2 About students

The parent, guardian or teacher enters the following for each student:

• Required: first and last name, anonymous username, password, class grade, date of birth and school. Date of birth is used to place the student in the correct grade level.
• Optional: a contact phone number, email address and gender.

When a student plays, we record game results: the math mode played, answers and response times, hits, runs, batting averages and rankings.

We do not ask students for photos, audio, video, precise location or contact lists, and students cannot post messages or chat with other users.

3.3 Information collected automatically

Like most online services, our systems record technical information such as IP address, browser and device type, pages visited and the date and time of visits. We use cookies that are needed for the Service to work, for example to keep you signed in.

On our public website (internationalmathbee.org) we use Google Analytics to understand how visitors use the site. We do not use Google Analytics in the Parent/Teacher Portal or in the student game. The Portal uses Google Maps Platform to suggest addresses when an adult types a school address, so the text typed into that search box is sent to Google.

4. How we use information

We use the information to:

• create and manage accounts, seats and subscriptions;
• run the game, calculate batting averages and show rankings;
• show parents and teachers their students' progress;
• answer questions and provide support;
• keep the Service secure and fix problems;
• improve the Service, using information that does not identify individual students where possible;
• send adults service messages about their account, and, if they have subscribed, our newsletter. Every newsletter has an unsubscribe link.

We do not send marketing to students, and we do not use students' PII to build profiles for advertising.

5. What is public

Leaderboards in the game show only a student's anonymous username and batting average, grouped by grade and by level (State, National Math Bee® and International Math Bee®). A student's real name, date of birth, email, phone number and school are not shown to other users. No information that identifies an individual student is shown on the public leaderboards.

The anonymous username is designed so that the public cannot work out who a student is. It cannot include three or more consecutive letters from the student's first or last name.

6. When we share information

We do not sell PII as the term sell is commonly understood. We do allow service providers to use PII for the business purposes described in this policy, for activities such as advertising, marketing and analytics. Section 11.1 explains how the law may treat this.

We share information only in these cases:

• Service providers that help us run the Service and act only on our instructions:
  • Stripe, for payment processing;
  • Amazon Web Services (AWS Amplify), which hosts the Portal and the game, and Neon, which hosts our database;
  • Coffee Software, the developer of the Portal and the game, only when it provides technical support at our request;
  • Mailchimp, for newsletters sent to adults;
  • Hostinger, for website and email hosting;
  • Google Analytics, on the public website only, and Google Maps Platform, for address search in the Portal.
• The student's parent, guardian or teacher. The adult who manages a student's account can see that student's PII and results. If a student is transferred to another Parent/Teacher account, the new account holder can see them too.
• Legal reasons. We may disclose information if the law requires it, or to protect the safety of our users or our rights.
• Business transfer. If the Service is transferred to another company, for example in a merger or sale, the information may be transferred too. We will tell account holders before that happens, and the new operator must honor this policy or obtain new consent.

7. Children's privacy

The Service is designed for students in grades 1 to 6, so many of our players are under 13. We follow the U.S. Children's Online Privacy Protection Act (COPPA).

• Who creates accounts. Children cannot register themselves. A parent or guardian, or a teacher acting for a school, creates each student account and provides the student's PII.
• Consent. Only an adult aged 18 or over can create a Parent/Teacher account, and the account holder must use a credit or debit card to buy a seat before a student can play. The card payment verifies that the account holder is an adult. By creating a student account, the parent or guardian consents to the collection and use of the student's PII as described in this policy.
• What we collect and why. See sections 3.2, 4 and 5. We do not require a student to provide more information than is reasonably needed to play.
• No advertising. We do not show third party advertising to students. We do not sell the PII of anyone we know is under 16 years of age without the authorization described in section 11.1.
• Your rights as a parent or guardian. At any time you can review your child's PII, ask us to correct or delete it, and refuse to allow any further collection or use. You can do most of this in the Parent/Teacher Portal, or by writing to buzz@internationalmathbee.org. We may need to verify your identity first. If a child's information is deleted, the child will no longer be able to play.
• If your child's account was created by a teacher, please contact the teacher or school first, or write to us and we will work with the school.

8. Schools and teachers

When a teacher, school or district creates student accounts, CompuSage, LLC controls and protects the PII held in the Service. No PII about a student is ever made public. We use student PII only to provide the Service for the school's educational purposes. We do not use it for advertising, do not build profiles of students for any non educational purpose, and do not sell it. The teacher confirms that they are authorized by their school or district to register their students, and that the school has given any notice to parents, or obtained any consent, that the law or school policy requires.

A school or district can ask us at any time to review, correct or delete its students' PII, and we will delete it when the school asks or when it is no longer needed for the school's purpose. On request, we will complete a district's vendor review and sign a student data privacy agreement.

9. How long we keep information

• Student account information and game results: kept for as long as it is needed to provide the Service. When an account has had no active seat for 48 months, our team reviews it and deletes or anonymizes it manually. You can ask for deletion sooner at any time.
• Parent/Teacher account information: kept for as long as it is needed to provide the Service. When you ask us to delete it, our team deletes it manually within 120 days of your request.
• Payment and invoice records: kept as long as tax and accounting law requires.
• Support messages: kept for up to 3 years.

We do not keep children's PII longer than is reasonably needed for the purpose for which it was collected.

10. Security

We use reasonable technical and organizational measures to protect PII, including encrypted connections, protected passwords and limited staff access. No online service can be completely secure. If we learn of a security incident that affects your PII, we will notify you as the law requires.

11. Your choices and rights

• Access, correct, delete. You can view and update your PII and your students' PII in the Parent/Teacher Portal, or write to us and we will help.
• Newsletters. You can unsubscribe at any time using the link in any email.
• Cookies. You can block cookies in your browser. Some parts of the Service may not work without them.

11.1 California residents

In this section, "personal information" has the meaning given to it by the California Consumer Privacy Act (CCPA/CPRA), which is broader than PII. As defined in the CCPA/CPRA, "sell" and "sale" mean selling, renting, releasing, disclosing, making available, transferring or otherwise communicating a consumer's personal information to a third party for valuable consideration. This means that we may have received some kind of benefit in return for sharing personal information, but not necessarily a monetary benefit.

We do not sell personal information as the term sell is commonly understood. We do allow service providers to use your personal information for the business purposes described in this Privacy Policy, for activities such as advertising, marketing and analytics, and these may be deemed a sale under the CCPA/CPRA.

We may sell and may have sold in the last twelve (12) months the following categories of personal information: identifiers; personal information categories listed in the California Customer Records statute; commercial information; and internet or other similar network activity. This does not mean that all examples of each category were in fact sold. It reflects our good faith belief that some of that information may be and may have been shared for value in return.

We do not sell the personal information of consumers we actually know are less than 16 years of age, unless we receive affirmative authorization from either the consumer who is between 13 and 16 years of age, or the parent or guardian of a consumer less than 13 years of age.

California residents have the right to know what personal information we hold about them, to correct or delete it, to opt out of the sale or sharing of their personal information, and not to be treated differently for making a request. To make a request or to opt out, write to buzz@internationalmathbee.org. Our Service does not respond to "Do Not Track" browser signals.

11.2 Users outside the United States, including the European Economic Area, the United Kingdom and Switzerland

The Service is used around the world. Wherever you live, you can ask us to access, correct or delete your PII, and we will honor the rights your local law gives you. CompuSage, LLC is the data controller. We process PII to perform our contract with you (providing the Service), on the basis of consent (for children's PII and newsletters), to meet legal obligations, and for our legitimate interests in keeping the Service secure and improving it.

You have the right to access, correct, delete or restrict your PII, to object to processing, to data portability, and to withdraw consent at any time. You also have the right to complain to your local data protection authority.

Your PII may be processed in the United States and in other countries where our service providers operate. Where required, we use appropriate safeguards for these transfers.

12. Links to other websites

Our website may link to other sites that we do not operate, such as our Facebook Page. Their own privacy policies apply to information they collect.

13. Changes to this policy

We may update this policy. We will post the new version here and update the date at the top. If a change materially affects how we collect, use or disclose children's PII, we will notify account holders by email and, where the law requires it, ask for consent again.

14. Contact us

International Math Bee®, National Math Bee® and BatterUp® are registered trademarks.