Unified Privacy Policy

BioMan Biology & BrainyBlast
Effective Date: June 2026

BioMan Biology and BrainyBlast (collectively “we,” “our,” or “us”) value the privacy of all our visitors, including students, parents, and educators. This unified Privacy Policy explains how we collect, use, disclose, and protect information across our shared platform network, including biomanbio.com and brainyblast.com.

Because our sites share a unified login framework and database infrastructure, an account created on either platform grants access to both environments, and your data is protected under the exact same industry-leading security practices globally. To accommodate different learning environments, our educational platforms are offered in the following configurations:

BioMan Biology:

• Standard Ad-Supported Version: Accessible at https://biomanbio.com. This version uses privacy-conscious, age-appropriate advertising technologies managed by our exclusive advertising partner, Monumetric.
• Ad-Free Member Version: Accessible at https://biomanbio.com/membersite. The ad-free version does not display advertisements, contains no advertising code, and does not engage in any ad-related tracking or cookie placement.

BrainyBlast:

• Standard Ad-Supported Version: Accessible at https://brainyblast.com. This version utilizes the same privacy-conscious, age-appropriate advertising framework powered by Monumetric.
• Ad-Free Member Version: (Planned for future updates) Once implemented, premium ad-free access will integrate natively with our central network membership framework and will operate completely free of advertising script behaviors or tracking matrices.

1. Compliance with Privacy Laws

We are dedicated to protecting youth and student privacy online. Our network strictly complies with applicable federal and state privacy laws, including:

• FERPA (Family Educational Rights and Privacy Act)
• COPPA (Children’s Online Privacy Protection Act)
• State student privacy laws, including Ohio SB 29 and equivalent state regulations.
• State teen privacy laws, including the California Age-Appropriate Design Code Act (CAADCA) and equivalent laws in Maryland, Colorado, Connecticut, Vermont, Nebraska, and South Carolina.

2. Audience and Age Assurances

Because our core audience consists of minors, we default to assuming our users are minors unless we have explicit, verified evidence to show otherwise. While we may utilize neutral age-verification checks, browser signals, or parental control designations to help recognize user age groups, our structural default is to maximize privacy protection for youth across both websites.

• Students do not need to create an account to play games, complete labs, or use the standard ad-supported sites.
• The ad-free versions are accessible strictly through optional user accounts created by purchasing a unified network membership.

3. Information We Collect

(a) Log Data (Across Both Platforms)
Like most web platforms, our servers automatically log standard, anonymous technical data via hosting server log files. This includes Internet Protocol (IP) addresses, browser types, Internet Service Providers (ISP), date/time stamps, referring/exit pages, and basic click counts. This data is entirely anonymous and is used solely for traffic trends, site administration, and performance optimization.

(b) Voluntarily Provided Information (Students & Teachers)
Users may voluntarily provide a name and/or email address for explicit educational functionality, including saving academic progress on activities or submitting game/quiz scores directly to a teacher's dashboard across either site. This data is:

• Accessible only to the individual student or their authorized teacher.
• Protected by industry-standard encryption (including encrypted passwords).
• Never shared with advertisers, data brokers, or third parties.

4. How We Use Information

We use collected data strictly to maintain and enhance your educational experience. We use it to:

• Provide core classroom functionality (score reporting, leaderboard tracking, saving progress across both platforms).
• Monitor, debug, and improve site performance and network security.
• We never sell, rent, license, or share personally identifiable information (PII) with advertisers or third parties.

5. Cookies, IP Addresses, and Tracking Technologies

(a) Advertising Cookies and IPs (Standard Ad-Supported Versions Only)
On the ad-supported configurations of our sites, our third-party advertising partner (Monumetric) uses cookies and IP addresses to serve ads. However, for users identified as minors, the placement of advertising cookies is strictly disabled, and IP addresses are processed solely for basic ad delivery, fraud prevention, and frequency capping (not for targeting or profiling).No student PII from game scores, accounts, or submissions is ever exposed or shared with advertising entities. Users can manage or opt out of broader tracking mechanisms via the network opt-out choices provided by the Network Advertising Initiative.

(b) Functional Cookies (Across the Entire Network)
We utilize basic, secure functional cookies to make the sites work. This includes keeping ad-free members securely logged into their unified account and temporarily storing a teacher's email address to ensure student game scores route to the correct virtual classroom. These cookies contain zero profiling data or PII.

(c) Analytics Cookies (Across Both Sites)
Anonymous usage statistics are gathered via Google Analytics to audit overall site traffic and resource performance. These analytics tracking elements collect entirely aggregated metrics and do not collect or correlate personally identifiable data.

6. Strict Child and Teen Advertising Guardrails

When ads are served to visitors under 18 on our ad-supported web properties, IP addresses may be shared with our ad partners only to serve contextual ads, limit repeat exposures, and handle basic site security. This is permitted under the COPPA "support for internal operations" exception. Partners are not permitted to use this data for profiling or interest-based advertising.

To ensure total safety for students and minors, our advertising core enforces the following physical protections:

• Contextual Ads Only: Visitors under 18 will no longer be allowed to be targeted, and advertisements are strictly contextual. This baseline applies universally at the 13-and-under level and extends up to age 18 in jurisdictions with specific teen protection laws.
• No Tracking or Profiling: All persistent tracking, identity graphing, behavioral profiling, and data harvesting are strictly disabled for minors.
• Device Security: Advertising providers are completely barred from probing or accessing the user's local device hardware characteristics.
• Child-Safe Verification: For users under the age of 13, the platforms strictly permit only child-safe designated ad inventory to pass through.

7. Data Retention & Minimization Policies

• Educational Data Minimization: To support student privacy and satisfy data minimization mandates under COPPA, student score records, game logs, and academic progress profiles are maintained only as long as strictly necessary to fulfill educational grading metrics. All records stored in our shared performance tracking tables (including student scores, quiz metrics, and universal game saves for both BioMan Biology and BrainyBlast) are automatically and permanently purged from our database systems via an automated server script exactly six (6) months after creation or their last updated timestamp.
• Advertising Data Retention: IP addresses used to serve ads to visitors under 18 are not kept for profiling. Logs used for billing and fraud review are deleted within 90 days. This data is not sold or licensed.

8. Data Ownership, Security, and Control

• All academic data voluntarily submitted belongs to the student and their associated school ecosystem.
• We enforce rigorous administrative and technical data protection measures to guarantee the confidentiality and security of our shared backend infrastructure. All data pathways are secured in transit, and student names and identifiable credentials are explicitly encrypted at rest using industry-standard **AES-256 encryption** algorithms. Access to decryption layers is strictly confined to verified, authorized educational accounts.
• In the highly unlikely event of a data infrastructure breach, we maintain automated protocols to provide rapid notification to affected users and academic institutions in full accordance with regional state compliance directives.
• Educators, parents, and students can request immediate data verification or total records deletion at any time via our Contact Form. All verified deletion requests are completely executed within 30 days.

9. Consent and Questions

By interacting with the BioMan Biology or BrainyBlast ecosystems, you signify your full acknowledgment and structural consent to the parameters detailed in this Privacy Policy.

For any privacy-specific inquiries, compliance verifications, or student records deletion updates, please contact us immediately via our dedicated Contact Form.