Privacy notice

Draft — to be completed by the research team.

Who is responsible for your data

[Name of the university / research group acting as data controller, and contact details of the data protection officer.]

What we collect

• Your account details: name, e-mail address and/or participant code, and a securely hashed password.
• Your gameplay: the settings of each match, the timing and accuracy of each note, and a low-resolution map of where movement happened on screen.
• Technical security records: when you log in and from which IP address. These are deleted after 90 days.

The site uses one cookie, only to keep you logged in, and stores your game settings and scores in your browser. Both are needed for the game to work; there are no advertising or analytics cookies. The site does not send e-mails.

The webcam image is processed only on your own computer. It is never sent to the server or recorded.

Where it is stored

All data is stored on a server located in London, United Kingdom. The game does not use analytics or load content from other websites.

Why we use it and for how long

[Purpose of the study, legal basis, retention period, and who in the research team can access the data.]

Your rights

You can ask for your account and all your gameplay data to be deleted from your account page ("Delete my data") or by contacting the research team. The team carries out the deletion; copies in backups expire within 30 days.

[How to access or correct your data, how to withdraw from the study, and how to complain to the ICO.]