Skip to content ← ADVISOR HOMEPAGE
Sent to the Rockbeach builder. Thank you.
Rockbeach

Privacy Policy

Version 1.7.2 · Effective October 20, 2026 · Rockbeach, LLC

Introduction

Rockbeach, LLC (“Rockbeach”, "we", "our", "us" or "we") respects your privacy and is committed to protecting it through our compliance with this policy (“Privacy Policy”).

This policy describes the types of information we may collect from you or that you may provide when you use our Sites (defined below) and our practices for collecting, using, maintaining, protecting, and disclosing that information.

BY USING OR ACCESSING THE SITES, YOU ACKNOWLEDGE THE PRACTICES DESCRIBED IN THIS POLICY.

Defined Terms

“Rockbeach Training” is the name of our training platform at rockbeachtraining.com; it is a product of Rockbeach and not a separate company.

“Sites” means rockbeachtraining.com and gowhitecaps.com, including other media forms, media channels, mobile websites or mobile applications related or connected thereto, both of which are operated by Rockbeach.

Depending on the context, “you” might be a Student, an Employer Partner, an Educational Partner, or a Visitor, each as defined below.

“Student” means an individual aged 16 or over who holds an account on Rockbeach Training to take the course, whether they signed up independently or through a class.

“Educational Partner” means a school, college, university or other educational institution, and any professor or other faculty member who holds a faculty account or creates a class on Rockbeach Training.

“Employer Partner” means a hiring organization signed in to Rockbeach Training that may view the profiles of Students who have elected to share their profile with employers, and any organization that accepts our Terms of Service to use Rockbeach Training to train its own staff.

“Visitor” means anyone who uses the Sites without an account, including anyone who takes a Practice call without an account, plays Avoid the Rocks, or joins the shop list.

“Trainer” means a Rockbeach employee or contractor who supports Students and can see their work, scores and board handles.

“Personal information” means information that identifies, relates to, or could reasonably be linked to you.

“Practice call” means a spoken exercise in which you speak with a simulated customer generated by software, not a person.

“Service Providers” means the companies listed under “Who else sees it” that run parts of the service for us on our instructions.

“Marketing Partner” means a third party to which we may pass your name and email address, only if you separately opt in as described under “Who else sees it”.

What this covers

This U.S. Privacy Policy explains how Rockbeach, LLC collects, uses, discloses, retains and protects Personal information on the Sites, including Rockbeach Training for individual students, schools and educational users, employers and other organizations, and their authorized users. Rockbeach Training is offered only in the United States. For information a person gives directly to Rockbeach, Rockbeach decides why and how it is handled. When a school or organization directs access for its users, that organization also has its own responsibilities and Rockbeach handles that information for the service purposes described here and in any written agreement with it.

What we hold about you

Because you gave it to us: your name and email address, and - only if you choose to - where you are studying or working, a photo, a résumé file and, if you are 18 or older, your mobile number. Your name, your email address and a password are the only account details required to have an account. For users aged 16 or 17, we may request a parent or legal guardian’s contact details only in the limited circumstances described under “If you are 16 or 17”.

Your date of birth, which we ask for and do not keep. We ask for your date of birth during signup to determine whether you are at least 16 and whether you are under 18. We do not retain the date of birth. We retain only the results of those checks and the date on which the check occurred. If you are 16 or 17, we record that you confirmed you have permission from a parent or legal guardian, together with the wording shown to you, its version, and the date and time of your confirmation. We may request a parent or legal guardian’s name, email address, and confirmation or authorization where needed for payment, a school requirement, an account or privacy request, or applicable law. We use that information only for the reason it was requested, to communicate about that request, and to document the authorization. We do not use it for marketing. Accounts belonging to users under 18 are placed in a protected mode. Employers and recruiters cannot see the user’s recruiting profile. We do not collect a phone number for optional text messages, show sponsor or partner marketing, disclose information to partners for marketing, or use the user’s information for targeted or cross-context behavioral advertising. Because we do not retain your date of birth, we may ask you to complete another age check before enabling recruiting, text messaging, partner marketing, or another adult-only feature.

Because you used the course: your exam attempts and scores, the answers you chose, the written answers you submitted and their grades, which sections you have read, how you used the simulated ticketing system, the badges you have earned, anything you posted on the board, and any question you typed into the Help panel with the answer it gave.

Because you took a Practice call: a written transcript of it. Each spoken answer is recorded by the page and sent through our server to ElevenLabs, which turns it into text; we keep the text, not the audio. If that service is unavailable, speech recognition in your browser is used instead, and depending on your browser, the speech recognition may be processed by your browser’s provider (for example, Google if you use Chrome). The text is what we keep, alongside the grade, the reasons for it, and how the call ended.

The simulated customer's side is generated rather than recorded, so there is no second person on the call and nobody else's voice in the file.

Because a browser asks for a page: sign-in cookies, and a count of active seconds and how far down a page you scrolled. That counting is our own and stays with us. We also count page visits ourselves - which page, the site that sent you there, and whether it was a phone, tablet or computer - with no network address and no cookie. We use Vercel Web Analytics, a cookieless count of visits, pages and referrers that identifies no one, and we run no advertising pixels. When you sign up or take a free call after clicking one of our links or ads, we note which link or ad brought you, from the link’s own campaign tags; we use no cookie for this.

Because you opened a link in an email from us: when you open a link in an email from us, we note the visit and any practice call you take, so we can follow up. We use a first-party cookie for this (rbrv and rbref, listed below), and every such email has an unsubscribe link.

Where we do keep a network address. Ordinary page views are not logged against you. Two things are: when an organization accepts these terms we keep the network address it was accepted from, as the record that it happened; and when you take a Practice call we keep the network address and a short description of the browser you took it on, because a spoken exercise that is graded has to be attributable to the person graded. Neither is used to profile you, neither is sold, and both are deleted with your account.

If you pay us, what the payment needs. Card details are typed into Stripe's form and go to Stripe, not to us - we never receive, see or store a card number. What we keep is a Stripe customer reference, the date your access is paid through, whether a payment is overdue, and for an Employer Partner or Educational Partner being invoiced, the billing contact, the billing address and any purchase order number its finance office needs printed on the invoice.

If you teach. A faculty account holds your name, your institutional email address, where you said you teach, and the classes you create - a name, a length in weeks, and roughly how many students you expect. Nothing is charged to a faculty account. We hold no more about a professor than we hold about a Student, and a good deal less.

An invite link or access code, if you have one. An invite link carries a code that signs you in once so you can set a password. Some older accounts, and a school’s rep with no email address on file, sign in with an access code. We keep the code on your record. It stops working as a way in once you set a password.

If you are 18 or older and text us, the message and the number it came from. Replies to our texts reach a Rockbeach number and are kept so we can act on STOP and HELP and answer you. We do not offer text messaging to users under 18 or collect their phone numbers. If you never text us, there is nothing here.

Your password, in a form nobody can read. We never store the password itself. We store a scrambled version of it - scrypt, with a random salt for each account - which cannot be turned back into the password. Nobody at Rockbeach can read it, tell it to you, or hand it to anyone else; if you forget it we can only replace it. Signing in creates a session that lasts thirty days, and changing your password ends every other session immediately. Our wider security practices are described under “Security”.

What we do not do

We do not sell your Personal information, as “sale” is defined under applicable state privacy laws. Not to anybody, not in any form, and not under another name for it. We have no advertising business and nothing here is a product we could sell to you.

Recruiter visibility is a disclosure you direct, not a sale or sharing for cross-context behavioral advertising. It is off unless an eligible adult switches it on. Users under 18 cannot turn it on, and employers and recruiters cannot see their recruiting profiles. This does not affect public certificate verification, which is described separately below. When recruiter visibility is on, an Employer Partner can view the profile fields made visible inside Rockbeach; Rockbeach does not export or send them a list or file. Only after you both say yes do they see your email address and can they download your résumé. Switch it off and they stop seeing the profile in Rockbeach. No money changes hands over an individual profile. An organization that independently records information it sees is responsible for its own handling and decisions, even though these terms prohibit unauthorized copying.

Apart from the cookieless Vercel Web Analytics count described above, we do not run third-party analytics, advertising pixels or trackers of any kind. There is no Google Analytics, no advertising network and no social media tracking anywhere in this product. Our other measurement is our own, described above.

We do not use advertising cookies, and no cookie on this site belongs to anybody but us. Every one of them is listed below.

We do show advertising to adults. A sponsor's advertisement appears on an adult user’s profile and badges page. It is written into our own pages - nothing is loaded from the sponsor, so they are not told that you saw it, who you are, or that you exist. We do not show sponsor or partner marketing to users under 18. If an adult clicks an advertisement, they leave for the sponsor’s site and that visit is between them and the sponsor.

For adults, which advertisement you see can depend on what you told us. If you listed e-sports among your favorite sports we show a different one. Users under 18 do not receive these advertisements, and we do not use their information for targeted or cross-context behavioral advertising. For adults, no advertising profile is built from your activity on the site, nothing is inferred from your browsing behavior, and nothing about you is sent anywhere to decide what to show. You may change your listed preferences at any time in your profile to change which advertisements you see.

We do not ask any of our Service Providers to train a model on your work. Written answers and call transcripts are sent to the Service Provider that grades them and the result comes back; we do not license, contribute or sell that material as training data. What each Service Provider may do with information it receives is governed by that provider’s own terms with us.

What we use it for

We use personal information to create and secure accounts and show you your own progress; verify age and, for users aged 16 or 17, record their confirmation of parental or guardian permission and any separate adult authorization we request; provide and personalize training; administer classes and organization seats; measure progress; grade written answers and call transcripts and produce the reading of your results on your profile; explain results and support human review; operate simulated calls; let Trainers and authorized coaches help you; issue and verify certificates; provide optional recruiting visibility to eligible adults; process payments; send service messages and, to adults who choose them, optional messages; prevent fraud and misuse; maintain, troubleshoot and improve the course; enforce our terms; comply with applicable law and respond to lawful requests; and establish or defend legal claims. We do these things because they are necessary to perform our agreement with you (running your account, grading, showing your results and issuing certificates); because of our legitimate interests in supporting you, keeping the service secure, preventing fraud and misuse, and improving the course; to meet our legal obligations and respond to lawful requests; and, for optional recruiting visibility and optional messages, because you have chosen them. We use information for a materially different purpose only after giving any notice or choice required by law.

Who else sees it

Rockbeach Trainers. They can see your work, your scores, and which account is behind a board handle.

Service Providers that run parts of the service for us:

Vercel — Hosts the site, stores uploaded files, and counts visits (Vercel Web Analytics, cookieless).

Neon — Stores the database.

Anthropic — Receives written answers, call transcripts and results-reading text to grade work and write the reading of results; an uploaded picture or logo, to check it for inappropriate content before it is saved; and questions typed into the Help panel, to answer them.

Twilio — Carries text messages, only for adults who ask for them.

Resend — Receives an email address and message body to send account email, including any request for separate adult confirmation or authorization described under “If you are 16 or 17”.

ElevenLabs — Receives the simulated customer’s scripted lines and returns audio, and receives your spoken answers on a Practice call to turn them into text. We keep the text, not the audio, and we do not send it your account details, such as your name or email address.

Stripe — Receives card details in its own form and handles payment; card numbers never reach us.

Google — Only if you choose it. If you press “Continue with Google”, Google tells us your name, your email address, whether it has verified that address, and a link to your profile picture. The permissions we ask for are openid, email and profile - we request no access to Gmail, Drive, contacts or calendar, and we send Google nothing about you. We keep the Google account identifier so signing in a second time is one click. An address Google has not verified is refused, because accepting one would let somebody who can claim an address at Google take over the Rockbeach account that uses it. If you never press that button, Google is told nothing - no Google code runs on any page of the Sites.

Wikipedia — We read it for public facts about a school when we build a school’s manual. We send it nothing about you.

Your browser provider — If ElevenLabs is unavailable, speech recognition during a Practice call runs in your browser and may be processed by your browser’s provider under its own terms, as described above; Rockbeach does not engage or control it.

Provider terms. Each Service Provider handles the information it receives under its own terms with us. Those terms reduce risk but do not make any external system perfectly secure or eliminate a provider’s independent legal duties.

Other permitted disclosures. We may disclose information if reasonably necessary to comply with law or valid legal process; protect a person, Rockbeach, or the service; investigate fraud or security incidents; enforce our agreements; or complete a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets. Where law allows, we will require a recipient in a business transaction to use the information consistently with this Policy and will give any required notice.

Employer Partners - only if you are 18 or older and switch it on. Sharing your profile with Employer Partners is off unless you turn it on, requires a recorded adult age check, and even then nothing is visible before you pass the certification exam. When enabled, Employer Partners may see your name, that you are certified, what you choose to share on your profile, and your résumé if you have uploaded one - never your scores, your written answers or your calls. Your email address, and a download of your résumé, pass to them only after you both say yes. You can turn it off at any time and you disappear from their searches immediately. Rockbeach does not decide whether an organization contacts, interviews or hires you.

Marketing Partners - only for adults who separately opt in. This is a different choice from recruiter visibility, made with its own box in your profile, and it is off unless you tick it. Users under 18 cannot make this choice. If you opt in, we may pass your name and your email address, and nothing else, to a Marketing Partner - never your phone number, never your résumé, never your scores - for offers and material connected to training, such as a Marketing Partner's newsletter. Turning it off stops any further sharing from that point. We have no Marketing Partners today, so nothing has been shared under it. Before we share your information with any Marketing Partner, we will update this Policy to identify the partner and the purpose and notify you so you can withdraw your consent.

Anyone, for two things you can see. The board, which is closed to new posts, is readable by anybody who can reach it, under your handle rather than your name. A certificate verification page is public and shows the holder's name, that they are certified, the issue date and the code - never a score.

Nobody, when you share a badge. The share buttons on a badge are ordinary links to LinkedIn, X and Facebook. Nothing from those companies loads on this site, nothing is sent to them unless you click, and the page you would share carries the badge rather than your name or your scores.

Nobody, when you follow a link out. A few pages link to other sites: the US Department of Justice, for its guidance on accessible seating; the US Access Board, for the Section 508 accessibility standards; Rockbeach University Athletics, our own gowhitecaps.com; Regadget, a sponsor shown on profile pages; and Regadget, the real company behind the Regadget partner card on gowhitecaps.com/partners. Nothing from them loads on this site, and nothing is sent to them unless you click the link.

Text messages and email

The optional consent to texts and email about your account is separate from every other choice, off by default, and not a condition of purchase or use. We store the exact sentence, its version, your affirmative choice and when it was made, so there is a record of what you were actually asked. We do not ask a user under 18 for a phone number.

What the texts are, and what they cost. If you are 18 or older and opt in, they are about your own account: a reminder when you have not been in for a while, what you are close to earning, and the occasional training-related item. Message frequency varies. Message and data rates may apply - that is between you and your phone company and is not something we can waive. Consent to receive text messages is not a condition of purchasing any service from us. Carriers are not liable for delayed or undelivered messages. Reply HELP to any text for help, or STOP to end them.

We never sell your phone number and we never share it with anyone who wants to market to you. It is used to send the messages you asked for and to answer you when you reply.

Who sends them, and for whom. Every text comes from Rockbeach and is about your own account. We do not send messages for anyone else, we do not sell or pass on leads, and we run no affiliate or referral program.

You can turn either off in your profile at any time, or reply STOP to any text. Turning it off is recorded with the time.

How long we keep it

We delete your account and your Personal information after eighteen months without you using it, or whenever you ask - whichever comes first. Using it means any of it: opening a module, sitting an exam, taking a Practice call, working the CRM. Not just signing in.

You can delete it yourself, from your profile, without asking anybody. It takes effect immediately and is not reversible, except where we are required by law to retain certain information or where retention is necessary to complete a pending transaction, resolve a dispute, or exercise or defend legal claims.

Records of your agreement to automatic renewal (the wording you agreed to, the price, the date and time, and the payment reference) are kept for at least three years, or one year after the subscription ends if that is longer, even if you delete your account. We keep them only to show what you agreed to, as the law requires, and we remove your IP address from them when you delete your account.

Two things survive deletion, and you can choose what happens to one of them. First, board posts are hidden rather than erased. This allows conversations that other people participated in to remain readable, while removing your name from the post. Second, certificates continue to verify. If you have already shared a certificate with an employer, it will not become a broken link after deletion. Certificates are retained to preserve the integrity and verifiability of credentials previously issued to users and shared with third parties. If you would rather it stopped resolving, say so when you delete and it will.

A Practice call taken without an account is not attached to one, so deleting your account cannot reach it - there is nothing linking the two, and we are not going to build that link in order to break it. Those transcripts are deleted on the same eighteen-month clock, counted from the call. If you believe we hold a transcript from a Practice call you took without an account and you would like it deleted sooner, contact us at privacy@rockbeachtraining.com with as much detail as you can provide and we will make reasonable efforts to locate and remove it.

Your choices

You can review and change most of what we hold by signing in and visiting your profile: your picture, where you are now, both message consents, recruiter sharing, and your résumé.

Depending on where you live, you may have the right to ask for a copy of the Personal information we hold about you, its correction, or its deletion. We will respond within 45 days, or notify you if we need up to an additional 45 days. We may need to verify your identity before processing your request, and you may use an authorized agent if you give them written permission and we can verify your identity. You also have the right to opt out of the sale or sharing of your Personal information and of targeted advertising; we do not sell or share it or engage in targeted advertising, and we treat a Global Privacy Control or similar opt-out preference signal as a valid opt-out request. We do not use sensitive personal information to infer characteristics about you. We will never discriminate against you for exercising any of these rights. If we deny a request, you may appeal by emailing privacy@rockbeachtraining.com with “Appeal” in the subject line; we will respond in writing within the time required by your state’s law and, if the appeal is denied, explain how to contact your state attorney general. Email privacy@rockbeachtraining.com.

If you are 16 or 17

Rockbeach Training is for people aged 16 and over. Sign-up refuses a date of birth under 16 and stores nothing from that attempt.

We hold less about you than we hold about an adult, and it is not a setting you have to find. Your account starts with privacy protective defaults, and we limit collection and use to information reasonably needed to provide and secure the services, grade work, support you, issue and verify certificates, and meet legal duties. We do not ask for a phone number and we do not keep one. No employer can see you, and you cannot put a résumé or a photograph in front of one, until you turn 18. These safeguards are rules in the software rather than preferences on a page.

We do not show sponsor or partner marketing to a minor, disclose a minor’s information to partners for marketing, or use a minor’s information for targeted or cross-context behavioral advertising. There is no advertising pixel or third-party cookie on the site, and the only third-party analytics is the cookieless Vercel Web Analytics count described above. Adults may see the first-party sponsor advertising described above, but Rockbeach does not infer interests from behavior or send profile information to the sponsor.

A user aged 16 or 17 may create and use an account after confirming that they have permission from a parent or legal guardian. We do not require a guardian email, separate confirmation link or adult approval before ordinary account access. We may require separate confirmation or authorization from an adult where needed for payment, a school requirement, an account or privacy request, or applicable law. If we do, we collect and keep only the adult contact and confirmation or authorization details reasonably needed for that purpose. The user can review and change available profile and account information, ask us to correct other information, start account deletion from the account page, or email privacy@rockbeachtraining.com about any of those choices. A parent or legal guardian may also contact us about the minor’s account or privacy rights; we may verify the adult’s identity and authority before acting. The limited retention and certificate choices above still apply.

Rockbeach Training is not directed to anyone under 16, and we do not knowingly allow an under-16 account. The Avoid the Rocks leaderboard on gowhitecaps.com is intended for users aged 13 and older. No part of the Sites is directed to children under 13, and we do not knowingly collect Personal information from them. If you believe somebody under 16 holds a Rockbeach Training account, or that we hold information from a child under 13, email privacy@rockbeachtraining.com. We will investigate and delete the account and associated Personal information unless law requires limited retention.

Security

We use reasonable administrative, technical, physical and organizational safeguards designed to protect Personal information from accidental loss and unauthorized access, use, alteration and disclosure, including protected connections and one-way password hashing. No system or internet transmission is perfectly secure, and we cannot guarantee security. Keep your credentials private and tell us promptly at privacy@rockbeachtraining.com if you suspect unauthorized access. If a security incident affects your Personal information, we will notify you as required by applicable law.

During sign-up, a user aged 16 or 17 confirmed they have permission from a parent or legal guardian, and we keep the exact sentence they confirmed, its version, and the date and time of confirmation. The user can delete the account and its Personal information at any time from the account page without asking anybody. A parent or legal guardian can ask us to delete it by emailing privacy@rockbeachtraining.com, and we will do so after verifying the adult’s identity and authority.

Cookies, every one of them

We use 27 cookies and no more. All of them are ours - there is no cookie on this site belonging to an advertiser, an analytics company or a social network, because we use none of their cookies.

NameWhat it is forHow long
rbsKeeps you signed in after you enter your password or use Google.30 days
rbAn older rep sign-in, no longer set. If your browser still has one, it is read once, replaced by rbr, and cleared.120 days
rbpAn older individual sign-in, no longer set. If your browser still has one, it is read once, replaced by rbs, and cleared.120 days
rbcKeeps Rockbeach staff signed in to the organization console.30 days
rbclAn older team console sign-in, no longer set. If your browser still has one, it is read once, replaced by rbcs, and cleared.30 days
rboAn older Employer Partner sign-in, no longer set. If your browser still has one, it is read once, replaced by rbos, and cleared.30 days
rbaKeeps an administrator signed in.14 days
rbadvMarks the browser as a reviewer’s, so the page can offer a way back to the reviewer homepage. Its value is the number 1 and it identifies nobody. Readable by the page itself.120 days
rbviewWhich account an administrator is currently viewing.8 hours
rbfKeeps a professor signed in to the faculty side.30 days
rbfcCarries a signed note that a professor has claimed their free class, for the few minutes between claiming it and the class being made.1 hour
rbfdA random identifier for this browser, used only to stop one device from running up the free practice-call budget. It is not linked to your name.365 days
rbgCarries the signed handshake while you are signing in with Google.15 minutes
rbrvMarks one visit from a link in an email we sent you, so a reload is not counted as a second click. It ends when you close the browser.Until the browser closes
rbrefRemembers which of our emails brought you here, so a practice call you take afterward can be matched to it for our follow-up.90 days
rbrKeeps a school’s rep signed in to their seat. It holds a random key, never your password.120 days
rbosKeeps an Employer Partner signed in. It holds a random key, never your password.30 days
rbcsKeeps a school’s team manager signed in to the console. It holds a random key, never your password.30 days
rbpickFor the ten minutes after you sign in, remembers which of your accounts your password opened, so you can choose one.10 minutes
rbnoteFor ten minutes, tells the sign-in page why an older sign-in stopped working.10 minutes
rbvKeeps a reviewer signed in through the advisor door.120 days
rbimpSet only for the site’s owner while viewing an account as its holder for support, so every page shows whose account it is and the way back.8 hours
pf_clsOn the faculty side only, remembers which of a professor’s classes they last opened. Readable by the page itself.180 days
rb_lookSet only if a link asks for a different look of the pages; remembers that choice.4 hours
rb_welcomeSet only if a link asks for the earlier welcome page; remembers that choice.4 hours
rbbgSet only if a link asks for a different page background; remembers that choice.4 hours
rb_uxdSet only if a link asks for the earlier page design; remembers that choice.4 hours

Every one is sent only over a secure connection and is restricted to this site, so it is never attached to a request to anybody else. All but two can be read by our servers alone and not by any script running in the page; the exceptions are marked above: rbadv, whose value is the number 1, and pf_cls, which holds the code of a professor’s class.

We do not show a cookie banner, and this is why. A banner exists so that you can refuse cookies that follow you, profile you, or report you to somebody else. We set none of those. What is left are cookies that sign you in, remember which account an administrator is looking at, carry a sign-in handshake, remember a display choice or the class a professor last opened, note which of our emails brought you here, and stop one browser from using up the free Practice calls - and refusing those is the same as refusing to use the site, which you can do by closing it. If you access this site from outside the United States, your local law may give you additional choices about cookies; contact us at privacy@rockbeachtraining.com if so.

You can delete any of them in your browser at any time. Deleting the sign-in ones signs you out; nothing else breaks.

Do Not Track. Some browsers send a “Do Not Track” signal. Because we do not track you across other websites over time and do not allow third parties to do so on the Sites, our practices are the same whether or not the signal is on. We treat a Global Privacy Control signal as described under “Your choices”.

Where it is stored

On servers in the United States. Every Service Provider that handles Rockbeach Training information is based in the United States and stores it there. If you use Rockbeach Training from outside the United States, your information is transferred to and handled in the United States, which may not offer the same level of data protection as your home country. By using the service, you acknowledge this transfer. Where required by applicable law, we rely on appropriate safeguards for such transfers.

The game leaderboard

Avoid the Rocks is a game on gowhitecaps.com, the athletics site for Rockbeach University. If you crash and choose to put your score on the leaderboard, it asks for a first name, a username and an email address. The leaderboard is intended for users aged 13 and older; if you are under 13, please do not submit your information. Nothing before that point is collected - you can play it as many times as you like and give us nothing.

What is public: your username and your distance, and whether you found the bonus round. That is the whole leaderboard.

What is not: your email address and your first name. Neither appears on the leaderboard, neither is shown to other players, and neither is sold or given to anybody outside Rockbeach.

What we do with the email: we keep one person to one place on the board, we may tell you when somebody knocks you off it, and - if you opted in by ticking the box at sign-up - we may send you occasional news from gowhitecaps.com and rockbeachtraining.com, such as product updates and event announcements. Both are Rockbeach, and the email does not travel further than that.

How to leave: every email we send has an unsubscribe link, and you can write to privacy@rockbeachtraining.com to have your score, your username and your address removed entirely. We will do it and we will not ask why.

The exact sentence you agreed to is stored with your score, so if this page ever changes we can still say what you were shown on the day.

The shop list

gowhitecaps.com/shop has one product on it and it is not for sale yet. If you ask to be told when it exists, it asks for an email address and nothing else - no name, no card, no address. There is no checkout on that page and there never will be: when the hoodie is ready the page becomes a link to a third-party print-on-demand company (which we will identify at that time along with a link to their privacy policy), and any order you place is with them under their terms, not ours. We encourage you to review their privacy policy before placing an order.

What we do with the email: one message, when the hoodie exists. This list is narrower than the game leaderboard above - joining it does not sign you up for news from gowhitecaps.com or rockbeachtraining.com, and we do not move you onto that list. If you want the general news as well, the game asks separately.

What is public: nothing. The list is not published, not shown to anybody else, and not sold or given to anybody outside Rockbeach.

How to leave: the email has an unsubscribe link, and privacy@rockbeachtraining.com will remove you on request. We will do it and we will not ask why.

The exact sentence you agreed to is stored with your address, so if this page ever changes we can still say what you were shown on the day.

You can review and change your Personal Information by logging into our Website and visiting your account profile page.

Your State Privacy Rights

State consumer privacy laws may provide their residents with additional rights regarding our use of their Personal Information.

Nevada residents: we do not sell covered information as defined under Nevada law. You may nonetheless submit a request to opt out of any future sale by emailing privacy@rockbeachtraining.com.

California residents: California Civil Code Section 1798.83 (“Shine the Light”) permits California residents to request, once a year and free of charge, information about the Personal information (if any) we disclosed to third parties for their direct marketing purposes in the preceding calendar year, including the categories of information and the names and addresses of those third parties. To make a request, email privacy@rockbeachtraining.com.

Changes

The version and effective date are at the top of this page. We may update this Policy from time to time and will post any changes on this page with a revised version and effective date. If a change is material, we will notify you in the product or by email before it takes effect, rather than changing the page quietly. We will not apply a material change to Personal information collected before the change without any consent required by law. Your continued use of the Sites after the effective date of a non-material change constitutes acceptance of the updated Policy.

Contact

Rockbeach, LLC — privacy@rockbeachtraining.com - P.O. Box 55, Union, KY 41091

Privacy Policy, version 1.7.2, October 20, 2026. See also the Terms of Service.