Privacy Policy

In plain English

This site exists so parents at Walton Priory Middle School can log the miles their child covers during the 100 Miles in May charity challenge. The challenge itself is organised by parent volunteers (with the school's support); this website is an independent tool built and run by a parent volunteer to make mile-tracking easier.

We keep as little information as possible — basically just what's needed to show a leaderboard and stop other people tampering with your child's miles. We don't sell data, we don't use tracking cookies, and you can delete everything yourself from the profile page at any time.

Who runs this site

The site is operated by Martin Boam, a parent volunteer. This is an independent site — it's not run by Walton Priory Middle School, and the school does not control what's stored here.

Contact: marv144@gmail.com

What we store

When a parent or guardian registers their child, we store:

• Child's first name (or a nickname if you prefer)
• Year group (so the year-group leaderboard works)
• Parent/guardian email (to sign you in and send password resets)
• Miles logged — distance, activity type, and the date

If you sign in with Google or Microsoft, we receive your name and email from them. That's all.

We don't ask for your child's age, date of birth, address, phone number, photo, or anything else.

What's shown publicly

• Leaderboards — by default, a randomly-generated fun nickname (e.g. "Speedy Cheetah"). You can switch to the real first name or full anonymous mode on the profile page.
• Year-group and school totals — aggregate miles only.
• Email addresses are never shown publicly.

Who can see the full details

Only Martin Boam (as site admin) can see the child's real first name, year group, parent email, and mile log. This is needed to approve new registrations and sort out any problems. No one else — including teachers, school staff, or other parents — has access to this website's admin area.

Where it's stored

On Microsoft Azure (West Europe datacentres — i.e. the Netherlands and Ireland). Passwords are hashed with bcrypt and never stored as plain text. The site is served over HTTPS.

How long we keep it

All data will be deleted by 31 July 2026, once the challenge and any prize-giving has wrapped up. If the challenge runs again next year, parents will be asked to re-register from scratch — we won't quietly keep old accounts around.

Cookies

Only the bare minimum — a sign-in cookie so you don't have to log in every time. No Google Analytics, no Facebook pixel, no advertising cookies, no third-party tracking.

Your rights — and how to exercise them

You can do the following yourself at any time, no emails needed:

• Download your child's data — sign in, go to Profile, click "Download my data".
• Delete everything — same page, "Delete my account" button. This is immediate and permanent.
• Edit any details — change the name, nickname, year group, or display preference from the profile page.

If any of those don't work for you, email marv144@gmail.com and I'll sort it out.