1) What we collect
Account & Auth: name, email, institution,
and authentication IDs, such as Google sign-in. We do not store passwords
for OAuth sign-ins.
Usage: basic diagnostics, such as pages used,
game sessions joined or created, device/browser information, and rough
location from IP address, to maintain reliability and detect abuse.
Content you submit: CSV/spreadsheet files,
question sets, templates, room names/codes, and optional profile data.
Teachers should avoid including student personally identifiable
information in submitted content.
Payments, if applicable: handled by providers
like PayPal or Stripe. We receive transaction metadata, such as status,
plan, and limited payment details where applicable, but not full card
numbers.
2) How we use data
- Operate and secure the platforms.
- Provide features requested by teachers and users.
- Improve performance, usability, and reliability.
- Debug issues and prevent abuse.
- Communicate important updates, service notices, or changes.
- Honor legal, security, and academic integrity obligations.
3) Legal bases (GDPR)
Where applicable, we rely on:
legitimate interests, such as running and
improving educational tools;
contract, such as providing services you
request; and
consent when required, such as for certain
analytics or marketing.
4) Cookies & similar tech
Essential cookies and similar technologies
are used for login/session management, load balancing, and security.
Functional technologies may be used to
remember preferences or recently used rooms.
Analytics, where used, help us understand
general usage patterns and improve features. You can opt out where prompts
are provided or through your browser settings.
5) Children & classrooms
The platforms are designed for
teacher-led classroom use. Where students
under 18, or under 13 in the U.S., participate, access should be
provisioned and supervised by the school or teacher.
We do not knowingly allow children to create personal accounts without
appropriate adult or institutional oversight.
We support institutional compliance, including FERPA- and COPPA-related
expectations, by minimizing personal data and allowing educators to
request deletion of session data.
6) Student data & classroom use
gamehut.org is designed so that students do not need accounts, email
addresses, student IDs, rosters, or other personally identifiable
information in order to participate in classroom activities.
Teachers create or launch activities, and students typically join using a
game or session code. Student participation can occur without collecting
student account information.
Teachers should not enter student personally identifiable information into
game content, nicknames, prompts, uploaded files, room names, or shared
materials.
If a school or teacher believes student information was entered by
mistake, they may contact us to request deletion.
7) Sharing & processors
We do not sell personal data. We use trusted
processors to run the service, such as
hosting/CDN, database, email, authentication, and payment providers.
Examples may include Google for authentication, PayPal/Stripe for
payments, and infrastructure providers such as AWS.
Processors are expected to process data only for the purposes of operating
the service and with appropriate safeguards.
8) Retention & deletion
We keep data only as long as needed for the purposes described in this
policy. Teachers can delete game sessions and uploaded assets where those
controls are available. Teachers can also delete their accounts directly
on the site if they choose to do so.
To protect privacy and support research or improvement of game-based
learning tools, we may keep anonymized or aggregated activity data, such
as how many games were played or which tools were used. This data is not
intended to identify individual users.
9) Security
We take reasonable organizational and technical measures, including
encrypted transport, restricted access, and monitoring. No method of
transmission or storage is 100% secure. Please protect your account and
report suspected issues through
Contact Us.
10) Your rights
Depending on your region, you may have rights to access, correct, delete,
port, or restrict processing of your data. You may also object to certain
processing or withdraw consent where we rely on it.
For California residents, you may opt out of “sale” or “sharing” as those
terms are defined by CCPA/CPRA. We do not sell personal data. If you have
questions, please contact us.
11) International transfers
Data may be processed in the U.S. and other countries by our team and
processors. Where applicable, we use appropriate safeguards to protect
personal data.
12) Changes to this policy
We will update this page when our practices change, with a new “Last
updated” date. Material changes may be highlighted or communicated when
appropriate.
13) Contact
Email:
Contact Us
• For legal or data requests:
Contact Us
If you are an educator acting on behalf of a school, please include your
institution and course details so we can locate the correct records.