Privacy Policy — bio-logicalgames.com

1. Information We Collect

Information You Provide Directly

Data Type	When Collected	Purpose
Name	Submitting a review or leaderboard score	Display on public leaderboard / reviews
Email address	Contact form submission	Respond to your inquiry
Review text & star rating	Submitting a review	Display publicly to help other users
Game scores & statistics	Playing CellMatch or Cell Oracle	Leaderboard ranking, personal progress
Payment information	Purchasing premium content via PayPal	Process your payment (handled entirely by PayPal)

Information Collected Automatically

Data Type	How Collected	Purpose
IP address	Server logs (Cloudflare)	Security, abuse prevention, approximate location
Browser type & version	HTTP headers	Ensure compatibility, debug issues
Device type	HTTP headers	Responsive design optimization
Pages visited & time spent	Server logs	Understand usage patterns, improve the platform
Referrer URL	HTTP headers	Understand how users find our site

What we do NOT collect: We do not collect passwords, financial information (PayPal handles all payment data), location data, biometric data, or any sensitive personal information.

2. How We Use Your Information

We use the information we collect for the following purposes:

Provide and maintain the platform — run games, display leaderboards, process reviews
Process payments — fulfill premium content purchases via PayPal
Respond to inquiries — reply to your contact form messages
Improve our services — analyze usage patterns to enhance game features and user experience
Ensure security — detect and prevent abuse, spam, and unauthorized access
Legal compliance — meet our obligations under applicable laws

We will never sell, rent, or trade your personal information to third parties for marketing purposes.

3. Legal Basis for Processing

Under Philippine Data Privacy Act (RA 10173)

We process personal data based on:

Consent — when you voluntarily submit reviews, contact forms, or leaderboard entries
Contractual necessity — to fulfill purchases you make through our platform
Legitimate interest — to improve our platform, ensure security, and prevent abuse

Under EU GDPR (for EU/EEA visitors)

For users in the European Union and European Economic Area, we rely on the following legal bases under Article 6 of the GDPR:

Article 6(1)(a) — Consent: for cookies, reviews, and optional data submissions
Article 6(1)(b) — Performance of a contract: to process your purchases
Article 6(1)(f) — Legitimate interests: to improve our services, ensure platform security, and analyze aggregated usage data

4. Data Storage & Security

Your data is stored using the following infrastructure:

Cloudflare Pages — hosts our website (global CDN with built-in DDoS protection)
Cloudflare D1 — stores leaderboard scores, reviews, and contact form submissions (SQLite-based, edge-distributed)
PayPal — processes and stores all payment data (we never see your card or bank details)

We implement appropriate technical and organizational measures to protect your data, including:

HTTPS encryption on all connections (TLS 1.3)
Input validation and sanitization on all forms
Rate limiting on API endpoints to prevent abuse
No plaintext storage of sensitive information

Note: While we take reasonable precautions, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

5. Cookies & Tracking Technologies

Our site uses a minimal number of cookies:

Cookie	Provider	Purpose	Duration
PayPal session cookies	PayPal	Payment processing, fraud prevention	Session / up to 1 year
Cloudflare `__cf_bm`	Cloudflare	Bot management, security	30 minutes
Cookie consent preference	bio-logicalgames.com	Remember your cookie consent choice	1 year

We use localStorage (not cookies) to store:

Game preferences (difficulty, mode selection)
Premium unlock status
Cookie consent preference

We do not use Google Analytics, Facebook Pixel, or any third-party advertising trackers. We do not serve ads.

6. Third-Party Services

We use the following third-party services that may process your data:

Service	Purpose	Privacy Policy
Cloudflare	Hosting, CDN, security, database	cloudflare.com/privacypolicy
PayPal	Payment processing	paypal.com/privacy
Google Fonts	Typography (Outfit, Inter fonts)	policies.google.com/privacy
Ko-fi	Donation processing (external link)	ko-fi.com/privacy

Each third-party service operates under its own privacy policy. We encourage you to review them.

7. Data Retention

We retain your data for the following periods:

Leaderboard scores: Retained indefinitely (publicly visible by design)
Reviews: Retained indefinitely unless you request removal
Contact form messages: Retained for up to 12 months, then deleted
Server logs (Cloudflare): Retained for up to 72 hours by Cloudflare
Payment records: Retained by PayPal per their data retention policy

You may request deletion of your data at any time by contacting us (see Section 12).

8. Your Rights

🇵🇭 Under Philippine Data Privacy Act (RA 10173)

As a data subject under Philippine law, you have the right to:

Be informed — know what data we collect and how we use it
Access — obtain a copy of your personal data
Object — refuse or withdraw consent to data processing
Erasure or blocking — request deletion of your personal data
Rectification — correct any inaccurate or incomplete data
Data portability — receive your data in a structured, commonly used format
File a complaint — lodge a complaint with the National Privacy Commission (NPC)
Damages — claim compensation for damages sustained due to inaccurate, incomplete, outdated, or unlawfully obtained personal data

🇪🇺 Under EU General Data Protection Regulation (GDPR)

If you are in the EU/EEA, you additionally have the right to:

Right of access (Article 15) — obtain confirmation and a copy of your data
Right to rectification (Article 16) — correct inaccurate data
Right to erasure / "right to be forgotten" (Article 17) — request deletion of your data
Right to restriction of processing (Article 18) — limit how we use your data
Right to data portability (Article 20) — receive your data in a machine-readable format
Right to object (Article 21) — object to processing based on legitimate interests
Right to withdraw consent — at any time, without affecting the lawfulness of prior processing
Right to lodge a complaint — with your local Data Protection Authority (DPA)

🇺🇸 Under California Consumer Privacy Act (CCPA)

If you are a California resident, you have the right to:

Know — what personal information we collect and how we use it
Delete — request deletion of your personal information
Opt-out — opt out of the sale of personal information (we do not sell your data)
Non-discrimination — not be discriminated against for exercising your privacy rights

Disclosure: We do not sell, share, or trade personal information to third parties for monetary or other valuable consideration.

🌏 For All Users Worldwide

Regardless of your location, you can always:

Request a copy of your data
Request correction of inaccurate data
Request deletion of your data
Withdraw consent for optional data processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. International Data Transfers

Our platform is operated from the Philippines and hosted on Cloudflare's global CDN, which distributes data across multiple countries to provide fast, secure access worldwide.

When you use our platform, your data may be processed in countries outside your own. We ensure that any international transfers comply with applicable data protection laws through:

Cloudflare's GDPR compliance commitments and Standard Contractual Clauses (SCCs)
PayPal's global privacy framework

10. Children's Privacy

bio-logicalgames.com is an educational platform designed for students of all ages, including those under 13. We take children's privacy seriously:

We do not knowingly collect personal information from children under 13 without parental consent
The games can be played without submitting any personal data
Leaderboard submissions and reviews are voluntary and require a name (which can be a nickname or pseudonym)
We do not require account creation or login
We do not serve advertising or use behavioral tracking

For parents and guardians: If you believe your child has submitted personal information without your consent, please contact us at [email protected] and we will promptly delete the data.

This section is designed to comply with the U.S. Children's Online Privacy Protection Act (COPPA), the Philippine Special Protection of Children Against Abuse, Exploitation and Discrimination Act (RA 7610), and the UK Age Appropriate Design Code.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes:

We will update the "Last updated" date at the top of this page
For material changes, we will display a notice on our homepage
Continued use of the platform after changes constitutes acceptance of the updated policy

We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or have concerns about how we handle your data:

Email: [email protected]
Website: bio-logicalgames.com (use the Contact Form)

For complaints regarding data privacy in the Philippines, you may also contact the:

National Privacy Commission (NPC)
Website: privacy.gov.ph
Email: [email protected]