Privacy Policy
This Privacy Policy explains how Refill Earth collects, uses, shares, retains, and protects information when you use the website, game, accounts, groups, classroom tools, and support forms.
Last updated:
1. Scope
This policy applies to the Refill Earth website and its educational game, optional accounts, groups, classroom tools, leaderboards, and support forms, together called the Service.
It describes the information handled by Refill Earth. Independent websites and services reached through external links apply their own privacy practices.
2. Information We Collect
Anonymous play creates a random first-party session identifier. The Service records the selected grade band and category, questions and question families served, selected answers and whether they were correct, timestamps, anti-replay state, and game progress such as drops and completed cups. A name or email address is not required for anonymous play.
If you create a verified account, the Service collects an email address, public username, authentication credential, verification and session records, and the profile and saved progress linked to that account. Authentication records are kept separate from the domain profile used for gameplay and authorization.
If you submit a school, sponsor, partner, correction, or product-support form, the Service collects the information you enter. Depending on the form, that may include your name, email address, organization, website, topic, timing, consent, and message.
3. Information Collected Automatically
When the Service receives a request, it may process an Internet Protocol address, request headers, browser or device information, requested page, date and time, session identifiers, error details, and security or rate-limit data. This information is used to deliver the request, keep the Service reliable, and prevent misuse.
The public game does not use third-party advertising pixels or cross-site profiles.
4. How We Use Information
Information is used to operate the Service, issue and validate questions, prevent replay, calculate and preserve progress, authenticate accounts, verify email addresses, recover accounts, attribute accepted answers to the correct group, update group and global totals, display eligible rankings, and maintain content quality.
Information is also used to answer submitted inquiries, send account and security messages, enforce access controls, investigate errors or suspicious activity, protect users and the Service, and comply with valid legal obligations.
7. Children
Refill Earth is designed for a mixed audience and may be used in schools. Anonymous players can answer questions without providing a name or email address. The Service does not ask anonymous players to state their age.
A verified account is required to save progress across devices or join a group. Because account and classroom features can be used by students, schools, parents, and guardians should authorize and supervise those features as required in their setting. Student information is not used for behavioral advertising.
8. Groups, Leaderboards, and Public Information
A verified account has a public username. If leaderboard visibility is enabled, the public player leaderboard can show that username with rank, drops, and completed cups. New profiles are eligible for public ranking by default, and the Profile control can turn that visibility off.
Public group rankings can show group names, rank, drops, and completed cups. Email addresses, invite codes, authentication identifiers, raw answers, individual accuracy, and group member lists are not included in public leaderboard responses. Group membership and administration records remain available only to authorized participants and administrators.
9. Data Retention
The anonymous session cookie expires after 30 days. Cookie expiry ends access through that identifier but does not automatically delete every server record created during the session. Signed-in account sessions normally expire sooner, and verification or recovery records use shorter technical expiry periods.
Gameplay responses, saved player and group totals, global aggregates, security records, inquiry records, delivery records, and backups may be kept longer when needed to operate the Service, preserve accurate totals, investigate misuse, meet legal obligations, or resolve disputes.
A confirmed account deletion removes the account and linked personal progress after required ownership checks. De-identified aggregate totals, security records, and historical group scoring may remain where they no longer identify the deleted account or must be preserved for integrity and legal reasons.
10. Security
Refill Earth uses technical and organizational safeguards intended to limit unauthorized access, alteration, disclosure, and misuse. These include restricted server-side data access, hashed credentials and security tokens, authenticated sessions, request validation, rate limits, abuse-prevention checks, and encrypted transport in normal production use.
No storage or transmission system can be guaranteed completely secure. Users should protect their account credentials and sign out on shared devices.
11. Your Choices and Controls
You can play without creating an account, clear browser cookies to stop using the current anonymous identifier, log out of a verified account, reset a password, manage group participation, change public leaderboard visibility from Profile, and request confirmed account deletion through the account controls.
Some records cannot be changed from the browser because answer validation, aggregate accuracy, abuse prevention, and historical group attribution depend on preserving an authoritative server record.
12. International Processing
The infrastructure and service providers used to operate Refill Earth may process information in countries other than the country where a user lives. This policy does not promise that all information remains in a particular country or region.
13. External Links
The Service links to independent organizations, educational sources, social platforms, donation destinations, and blockchain networks. Following a link or making a transfer can provide information directly to that third party under its own privacy policy and terms. Refill Earth does not control those external services.
14. Changes to This Policy
Refill Earth may revise this policy when the Service or its data practices change. The updated policy will be posted at this location, and the date at the top of the page will be changed. Continued use after an update is subject to the policy then displayed.