Privacy notice

Version 1.0 · effective 2026-11-03 · RUDO™ Weather Challenge

Short version: we do not know who you are. A family is a key, a child is a codename. We keep an age band, a country or US state, consent switches and forecasts. We never ask for names, emails, birthdays, schools, photos or locations.

1. Who we are

The RUDO Weather Challenge is a program of RUDO™ Learning Hub, operated by LIGHT HOPE ("RUDO", "we", "us").

2. What we collect

DataWhyHow long
Family account: the Family Key (shown to you once), the adult and guardian confirmations, the Terms version accepted and when, language preferenceTo let you sign in and to record that an adult set up the familyWhile the family exists
Participant: system codename, age band (chosen by the guardian), region (country or US state), participation and publication consent switches with the time of each changeTo run the challenge, keep age bands separate, and produce aggregate countsUntil the guardian deletes the participant
Student Pass for a participantTo let a child forecast for that one participantUntil replaced or the participant is deleted
Forecasts: value in tenths of °C, AI-use disclosure (yes or no), server receive time, version, receipt hashes, results and appeals (round and category only)To score, to show you your history, and to let anyone verify receiptsLinked to the participant until deletion or until 90 days after the season ends, then de-identified (see section 6)
Session cookie rudo_s (HttpOnly, Secure)To keep you signed in; strictly necessaryUntil sign-out or expiry
Language choice in your browser's local storageTo show the site in your languageUntil you clear it
Partner and school inquiries from adults: organisation, work email, message, languageTo reply to the inquiryAs long as needed to respond and keep ordinary business records; deleted on request
IP address and basic request data, processed by our hosting providerTo deliver pages, apply rate limits and protect the service from abuseSecurity logs no longer than 90 days

3. What we never collect

Names, email addresses or phone numbers of families or children, birthdates, schools, street addresses, photos, precise location, or device identifiers for tracking. Children cannot type free text anywhere on the platform. We use no advertising or analytics cookies and no third-party trackers.

4. How we use data

  • To run rounds, score forecasts exactly, and show each family its own results.
  • To publish aggregate statistics only: counts by age band and region, the median error per round, reference line errors and hashes.
  • To keep the service secure and fix problems.

We do not sell data, show ads, build profiles, or use children's work to train models. Season 1 publishes no individual results, no codenames and no rankings, whatever the publication switch says.

5. Who else processes data

Our hosting and database provider, Cloudflare, processes data on our behalf to run the site. We do not disclose data to anyone else, except where the law requires it. Partners and sponsors never receive children's or guardians' data.

6. Deletion, export and de-identification

  • A guardian can export a participant's data as JSON and delete a participant at any time in the family hub. Deletion removes identifying links within 72 hours.
  • After deletion, or 90 days after the season ends, we keep only de-identified records: round, submission hash, forecast value, receive date, and result. These contain nothing that links back to a family, and are kept for up to 10 years so results stay recomputable.
  • Withdrawing publication consent takes effect immediately.

7. If you lose your Family Key

Because we hold no email or name, we cannot identify you or recover the key. The data stays private and is de-identified on the schedule above. You can create a new family at any time.

8. Children

The challenge is designed for ages 10–17, with an Open Division for adults. Only an adult who is the parent or legal guardian can add a child, and the guardian chooses the age band and region. The platform does not ask children for personal information. The session cookie is used only to keep the account signed in and to protect the service.

9. Security

All traffic uses HTTPS. Session cookies are HttpOnly and Secure. Keys are shown once and never displayed again. Every write is checked on the server. Ledger hashes are published so tampering would be visible.

10. International use

Families take part from many countries. Data is processed on our provider's global network. Because we hold no names or contact details, the data we process is limited to what is listed above.

11. Changes

Any change gets a new version number and effective date on this page. We will not use existing data in a new way without asking the guardian first.

12. Contact

Use the contact form and choose "Other". Please do not include any child's personal information in your message.