Privacy Policy

1. Data We Collect

You can play the open beta without creating an account. If you sign up for case alerts, we collect your email address. If you create an optional game account, the game may collect your email address and authentication profile details.

The game stores investigation progress, settings, evidence collected, claims reviewed, and theory text in your browser. If you enable account-based cloud saves, that gameplay progress may also be synced to cloud storage.

2. Purpose of Processing

Gameplay data is used to provide the investigation experience, save your progress, restore sessions, and improve the beta. Case-alert emails are used to notify you when new cases are released.

3. Legal Basis (GDPR)

Case-alert email processing is based on your consent under GDPR Article 6(1)(a). Gameplay processing needed to provide the beta is based on contract performance under Article 6(1)(b). Privacy-focused analytics and product improvement are based on legitimate interest under Article 6(1)(f).

4. Data Controller

Data controller: The Palladian Society.

Contact: privacy@palladiansociety.org

5. Storage Location

Case-alert data is stored in Google Cloud Firestore configured for GDPR-aligned data residency. Gameplay progress is stored locally in your browser unless you create an optional account, in which case cloud saves may be stored using Google Firebase services.

6. Retention

We retain case-alert emails until you withdraw consent. Local gameplay data remains in your browser until you clear browser storage. Optional cloud-save data is retained while your account exists or until deletion is requested.

7. Your Rights

You may request access, rectification, erasure, portability, or objection regarding your personal data. Send requests to privacy@palladiansociety.org.

8. Withdrawing Consent

To withdraw consent and delete your case-alert record, email privacy@palladiansociety.org with the subject line "Delete my data".

9. Data Sharing

We do not share your email with third parties for marketing. We use service providers such as Google Firebase for authentication, cloud saves, and storage, and privacy-focused analytics to understand aggregate site and game usage.

10. Social Publishing Integration Access

For internal publishing operations, authorized team members may use connected social platform APIs to publish content to The Palladian Society's own accounts. This internal integration does not use website visitor personal data.

11. Policy Updates

We may update this policy as the beta evolves. Any changes will be posted on this page with a revised date.