Participation without a child account.

Star claims and the counter

After completing one challenge, a parent, guardian, or adult organizer can verify their own email and claim one permanent star. Each verified adult email can claim at most one star. The counter counts unique verified adult-email claims, not children, visits, unverified forms, or challenge attempts. The email is used for this transactional verification only and is not marketing consent.

What campaign records contain

A verified completion contains a challenge reference, registration and verification timestamps, an idempotency key, a permanent star number, an optional public pseudonym, a keyed digest of the adult email, and a keyed hash of a network address used to limit repeated submissions. The raw email address is not stored in the campaign database. Resend processes the email address to deliver the verification message. Pending verification records store only a random token hash, keyed email digest, challenge reference, optional pseudonym, and expiry. Tokens expire after 20 minutes and are deleted 24 hours after expiry. No child account, child email, photo, school, birth date, or location is requested.

Public star names

Giving a star a name is optional. The adult must explicitly confirm that the name is fictional, contains no personal information, and may be displayed publicly. Confirmed names appear immediately on the public star map; they are not reviewed before publication. Anyone can view or share a star by its number. Do not use a child's real name or any contact or identifying information.

The name stays associated with the star until an administrator removes it or the campaign data is deleted. Removing a name does not remove the completion or change the global total. Adults may contact info@roama.tech to request removal of a public name. Basic input checks do not guarantee that a submitted name is safe or appropriate.

Retention, recovery and deletion

The permanent star number, challenge reference, optional public pseudonym, and keyed adult-email digest are retained for the life of the permanent star so the campaign can enforce one star per adult email and recover an existing star. This keyed digest is pseudonymous data, not an anonymous record, and is not reversible by the campaign into the original email address. Verification tokens are removed 24 hours after expiry; rate-limit records are removed after 24 hours; abuse-prevention network hashes are removed 30 days after registration. Database backups follow the database provider's backup and retention controls.

An adult can contact info@roama.tech to request removal of a public name or discuss an access/deletion request. Removing a name does not remove or renumber the permanent star. Because the keyed email digest is retained to prevent duplicate claims and support recovery, a deletion request may affect these functions; requests are reviewed individually.

Abuse prevention

A keyed network hash is used for request throttling and review of unusual bursts. Email requests, token redemption, and public star lookup have database-backed rate limits shared across application instances. Cloudflare schedules daily deletion of completion abuse hashes older than 30 days, rate-limit records older than 24 hours, and expired verification tokens after 24 hours. Operators monitor scheduled maintenance and secure database backups.

Campaign analytics

First-party aggregate event records may include page or challenge views, voluntary star-card download/shares, App Store clicks, and optional UTM source labels. The system does not intentionally add adult email addresses or child-identifying information to these records. Sharing is optional and adult-controlled; no social-media post is required to receive a star.

Adult responsibility and safety

An adult must supervise the activity, use the safety guidance, and submit their own email—not a child's. Adult confirmation records a report that the challenge was completed safely; it is not independent verification and does not constitute a universal legal parental-consent mechanism. Public pseudonyms are displayed immediately and are not pre-moderated. Do not include real names or other personal information.

This information describes the campaign's current data practices and is not legal advice. Requirements differ by country; the campaign operator should review applicable rules for each market where participation is promoted.