Legal
Privacy
Policy.
What we collect, why we have it, who touches it, and how to get it back or get rid of it.
Who We Are
The Short Version

This policy covers the100movement.com, The 100 Movement program and platform, and our social media giveaways. All of it is operated by Earf 3.0 LLC, 4801 McKnight Rd. Ste. 1088, Pittsburgh, PA 15237.

We collect what we need to run the program and nothing we do not.

  • We do not sell your personal information. Not to anyone, for anything.
  • We do not sell your information to data brokers. We do use advertising measurement tags, which tell platforms like Meta and Google that a visit or a purchase happened. Under California law that counts as "sharing", and you can opt out.
  • We never see or store your card number. Stripe handles that.
  • You can get a copy of your data or have it deleted by asking.
Questions about anything here go to lockin@the100movement.com or our contact page. You will get a person, not a bot.
The Data
What We Collect

Grouped by how it reaches us.

You give us Name, email address, and the country and time zone you register from. A password you choose, which we store hashed and cannot read.
Your profile Profile photo, city, and what you are locking in for. All optional except the city, which places you in a group.
Your submissions Photos, videos, written posts, reflections and comments you upload. Timestamps for each.
We assign Your player number, your group of 100 and your group of 10, your score, and your submission record.
Payment Stripe collects and holds your card details. We receive your name, email, billing country, the amount, and a token identifying the transaction. We never receive your full card number.
Technical IP address, browser and device type, pages visited, and timestamps. Standard server logs.
If you opt in A push notification subscription token tied to your browser. Only if you allow notifications.
If you enter a contest The link to your public post, your social handle, and, for a winner, whatever identification and payment details we need to pay out.
About your sign-in email. You sign in with your player number, not your email. Behind the scenes our system creates a placeholder address from your number so the login works. Your real email is stored separately and is used for account recovery and for the emails we send you.
The Reasons
Why We Have It
  • 01To run the program. Place you in a group, deliver challenges, accept submissions, keep score, show standings.
  • 02To take payment and issue refunds.
  • 03To talk to you about the program. Your player number, account setup, announcements, deadlines, results. These are part of what you bought and you cannot opt out of them while you are enrolled.
  • 04To send you marketing, but only if you ticked the box. You can unsubscribe from any marketing email using the link at the bottom of it.
  • 05To verify results. We review submissions, tokens and timestamps before confirming standings.
  • 06To enforce the rules. Investigate falsified submissions, harassment, and other violations.
  • 07To keep the platform working. Diagnose faults, prevent abuse, secure accounts.
  • 08To promote the program, using content you submitted under the license described in the Terms of Use.
  • 09To meet legal obligations, including tax reporting where a contest or giveaway prize requires it.

If you are in the United Kingdom or the European Union, the law requires us to name a legal basis for each of those. Ours are below.

Contract Running the program, placing you in a group, taking payment, issuing refunds, keeping score, verifying results, and emailing you about your own participation. We cannot deliver what you paid for without this, so it is not optional while you are enrolled.
Consent Marketing email, push notifications, and any non-essential cookie or tracking pixel. You give it freely, we record when you gave it, and you can withdraw it at any time without affecting your place in the program.
Legitimate interests Keeping the platform secure, preventing abuse and cheating, enforcing the rules, and promoting the program using content you submitted. We have weighed these against your rights and you can object at any time, in which case we stop unless we have compelling grounds to continue.
Legal obligation Tax, accounting and records we are required by law to keep.
Third Parties
Who Else Touches It

We use outside services to run this. Each one gets only what it needs.

Stripe Payments and refunds. Holds your card details, which we never see. Sets its own cookies for fraud prevention.
Supabase Database, authentication and file storage for the platform. Holds your account, submissions and score.
Resend Sends transactional email: your player number, account setup, deadline reminders.
MailerLite Sends list email and holds the addresses of people who joined a list or opted into marketing.
Zapier Passes data between the services above. Sees what passes through it.
Hosting Our web host serves the site and keeps standard server logs.
Social platforms When you post publicly or enter a contest, that platform's own policy governs what you posted there.

We also disclose information when the law requires it, to protect our rights or someone's safety, or to a successor if the business is sold. If the business is sold, we will tell you before your information moves.

That is the whole list. Nobody else gets it.

Visibility
What Other People Can See

This is a group program. Some of what you do is visible to other participants by design.

Your group of 100 Your player number, first name, city, profile photo and score.
Your group of 10 Everything above, plus your daily submissions and anything you post in the group.
The whole program Anything you post in the community feed. Your standing on the board.
Everybody Your Initiation and The Proof, because you post those publicly on social media yourself.
Never shown Your email address, your password, your payment details, and your home address.
What you post publicly stays public. Once your Initiation is on social media we cannot take it back, and neither can you once other people have saved or shared it. Post what you are comfortable having seen.
Tracking
Cookies And Storage

We run advertising measurement tags. We buy ads to reach people, and these tell us which ads actually brought someone here rather than which ones were merely clicked. Depending on where we are advertising at the time, these may include Meta, Google, TikTok, Pinterest, Snapchat and Reddit. Each sets its own cookie and reports back to that platform that a visit, or a purchase, happened.

Nothing is stored on your device in the United Kingdom or the European Union until you have said yes. You are asked plainly, refusing is exactly as easy as agreeing, and the site works the same either way. You can change your answer whenever you like through the Cookie settings link in the footer.

What these tags are told. That a browser visited a page, and when a purchase completes, the amount and the order reference. They are not given your name, your email address or your card details.

  • Session cookies keep you signed in. Without them the platform does not work.
  • Local storage holds small preferences on your own device, like whether you dismissed a banner.
  • Stripe sets its own cookies during checkout to process payment and prevent fraud.
  • A service worker caches parts of the platform so it loads faster and works offline. It lives on your device.

You can block or clear cookies in your browser. If you block ours you will not be able to sign in.

We do not currently respond to Do Not Track signals, because there is no agreed standard for what a response should be.

Notifications
Push And Email
  • 01Push notifications are opt-in. Your browser asks before we can send any. If you allow them we store a subscription token tied to that browser.
  • 02Turn them off in your browser or device settings at any time. The token stops working immediately.
  • 03Program email is part of the service and continues while you are enrolled. It covers your number, deadlines, announcements and results.
  • 04Marketing email only goes to people who ticked the box. Unsubscribe any time using the link in the email. Unsubscribing from marketing does not stop program email.
Retention
How Long We Keep It
Account and profile While your account is open, and for 12 months after you close it in case you come back.
Submissions 12 months after the level ends, so results can be verified and disputed.
Payment records 7 years, because tax law requires it.
Email list Until you unsubscribe, then we keep your address on a suppression list so we do not email you again by accident.
Server logs 90 days.
Contest entries 12 months after the contest closes.
Player numbers Indefinitely. Numbers are never reissued, so we keep a record that yours was used.

Content we already published in our promotion may stay up after your account closes, under the license in the Terms of Use.

Your Rights
What You Can Ask For

Email lockin@the100movement.com from the address on your account. We respond within 30 days.

  • 01A copy. Everything we hold about you, in a file you can open.
  • 02A correction. Anything wrong, fixed.
  • 03Deletion. Your account and data removed, except what we must keep for tax or legal reasons.
  • 04Unsubscribe. Out of marketing email, immediately.
  • 05An explanation. Of anything in this policy you want in plain words.
  • 06A portable copy. The information you gave us, in a structured machine-readable file, or sent straight to another provider where that is technically possible.
  • 07A pause. Restrict what we do with your information while a correction or an objection is being sorted out.
  • 08An objection. To anything we do on the basis of legitimate interests, including promotional use of your content. We stop unless we have compelling grounds not to, and we explain them.
  • 09Consent withdrawn. Any consent you gave, taken back at any time. It does not undo what was lawful before you withdrew it, and it does not affect your place in the program.
  • 10A complaint. To your data protection regulator. The one for your country is named below. You do not have to come to us first, though we would rather you did.
Deleting mid-program ends your participation and does not trigger a refund outside the refund window. We cannot score someone whose record we deleted.

We will never charge you for exercising any of these rights, and we will never treat you differently for using them.
By Region
Where You Live

The program is open to residents of the United States, Canada, Australia and New Zealand.

We store and process data in the United States.

California You have the right to know what we collect, to delete it, to correct it, and to opt out of sale or sharing. We do not sell personal information. We do use advertising measurement tags, which counts as sharing for cross-context behavioral advertising under the CCPA. To opt out, choose "No thanks" on the cookie banner or use the Cookie settings link in the footer; you can also send a Global Privacy Control signal and we will honour it.
Other US states Where your state grants rights to access, correct, delete or port your information, we honor them the same way.
Canada We handle information in line with PIPEDA principles. You may complain to the Office of the Privacy Commissioner of Canada.
Australia We handle information in line with the Australian Privacy Principles. You may complain to the Office of the Australian Information Commissioner.
New Zealand We handle information in line with the Privacy Act 2020. You may complain to the Office of the Privacy Commissioner.
Outside these The program is not offered where you are. If you reach us anyway and we take payment, we refund it and delete what we collected.
Security
How We Protect It
  • Encrypted in transit. The whole site runs over HTTPS.
  • Passwords are hashed. We cannot read yours and neither can anyone who gets the database.
  • Row-level security. The database enforces who can read what, not just the app.
  • Private storage. Submission files are not publicly addressable.
  • Limited access. Only people who need it to run the program have access, and there are very few of us.
  • Payments are isolated. Card details never touch our systems.
No system is perfectly secure. We do what we reasonably can and cannot guarantee more than that. If a breach affects your information we will tell you and the relevant authority without undue delay, as the law requires.
Age
Adults Only

The Service is for people 18 and over. We do not knowingly collect information from anyone under 18.

If you believe a minor has given us information, email lockin@the100movement.com and we will delete it.

Other Products
Elsewhere Under Earf 3.0

This policy covers The 100 Movement only. Other products operated by Earf 3.0 LLC have their own privacy policies.

If you gave us your email through another Earf 3.0 product, we only email you about The 100 Movement if you agreed to hear from us about other things when you signed up there.

Updates
Changes To This Policy

We may update this policy. The date below always shows the current version.

If we change something material (what we collect, why we have it, or who we share it with), we will post it here and email you where we have your address.

Continuing to use the Service after a change means you accept the updated policy.

Last updated October 23, 2026
Contact
Reach A Person

lockin@the100movement.com

Earf 3.0 LLC
4801 McKnight Rd. Ste. 1088
Pittsburgh, PA 15237

Earf 3.0 LLC is the data controller for everything described in this policy.

Or use the contact form. We answer everything.