Privacy policy

Privacy Policy - TL;DR for Teachers & IT Admins

Game Lab collects minimal personal data: just name, email, and password for account access. We do not collect addresses, phone numbers, or payment information. Usage data is anonymised and used only to improve the site.

Students can self-register, so parental consent is recommended for those under 13. School admins can request account removal at any time. We use secure password storage, minimal cookies, and no third-party tracking. Some external tools are provided “as-is” and follow their own privacy policies.

You can access, correct, or request deletion of user data at any time by contacting [Insert Admin Contact Email]. Game Lab is committed to safe, educational use of all resources.

Privacy Policy - Full

Effective Date: [Insert Date]

Game Lab (“we”, “our”, “us”) is committed to protecting the privacy of all users, including students, teachers, and educational staff. This Privacy Policy explains what information we collect, how it is used, and the choices available to you regarding your information.

1. Information We Collect

We aim to collect only the information necessary to provide our services:

  • Account Information: Name, email address, and password for site access.

  • Usage Data: Non-identifiable data about how the site is used, such as pages visited, tools accessed, and content downloaded.

  • Optional Information: Any content you choose to upload or share on the site (e.g., projects, media assets).

2. How We Use Your Information

Your information is used to:

  • Provide access to Game Lab tools, resources, and courses.

  • Maintain and improve site functionality.

  • Communicate important updates about the site.

  • Monitor usage trends to improve resources for students and teachers.

We will never sell, rent, or share your personal information with third parties for marketing purposes.

3. User Accounts & Sign-Ups

Game Lab allows self-registration. We recommend that students under 13 years of age obtain parental consent before signing up. School administrators can request removal of any student accounts at any time by contacting [Insert Admin Contact Email].

4. Data Retention

  • Account information is retained as long as the account is active.

  • Inactive accounts may be deleted after [insert period, e.g., 2 years] of inactivity.

  • Usage data may be anonymised and retained indefinitely for site analytics and improvement purposes.

5. Cookies & Tracking

Game Lab uses minimal cookies necessary for authentication and session management. No third-party tracking cookies are used.

6. Third-Party Tools

Some tools and resources are hosted externally (“as-is”) and are subject to their own privacy policies. We do not control or guarantee the privacy practices of these external sites.

7. Your Rights (GDPR / UK Data Protection Law)

You have the right to:

  • Request access to your personal data.

  • Request correction of inaccurate data.

  • Request deletion of your personal data.

  • Withdraw consent to data processing where applicable.

Requests can be made by contacting [Insert Admin Contact Email].

8. Security

We implement reasonable technical and organisational measures to protect your data, including encryption of passwords and secure server access.

However, no system is completely secure. Users are responsible for keeping their account credentials confidential.

9. Children’s Privacy

Game Lab is intended for educational use. Students under 13 should have parental or guardian consent before creating an account. Teachers and school IT administrators are encouraged to supervise student access.

10. Changes to This Policy

We may update this Privacy Policy periodically. The latest version will always be posted on the site. Significant changes will be communicated via site notifications.

11. Contact

For questions, account removal requests, or data concerns, contact:
[Insert Admin Contact Email]

 

Technical Details

The following are the technical details about what data we collect about you, why we collect it, and how we use it.

Cookies

We may store the following cookies on your computer…

Name Reason
__Host-cms_session__fd866e3cefb3d174940962f12a11b197 Identifies your session so that we temporarily can uniquely link your requests together (deleted when your web browser is closed)
cms_autosave_* References to auto-saved incomplete content
cms_member_id & cms_member_hash The "remember me" feature for passwords
cms_member_id_invisible Whether you logged in into invisible mode
font_size To remember your font size choice
has_cookies To detect whether cookies are enabled, so we know whether to enable/disable features that need it
last_visit When you visited the website last, used for tracking what content is new
tray_*, hide*, og_* Values (yes/no) for remembering what things have been turned off/closed
use_wysiwyg Whether the WYSIWYG text editor is enabled

General

  • We include a mechanism allowing users to unsubscribe from all e-mails sent by our website software. A 'List-Unsubscribe' header is sent in every e-mail delivered from our website, as-is an unsubscribe link in the body of every e-mail. Note that these tools only unsubscribe users from e-mails sent through our website. They do not include other facilities (e.g. direct e-mails from staff or e-mails sent from other software or services).
Action Reason
We may occasionally send bulk e-mails about Game Lab, or matters relating to Educational to our members. We will not send bulk e-mails or allow others to send bulk e-mails, which we believe would be considered spam. To keep you informed, and for sales/marketing activity.
We do not have any special handling of the "Do Not Track" header. We do not track individual users for advertising purposes, although third-party services we rely on for unrelated functionality may do so.

Information disclosure

  • We will not share private details other than what can be seen in your forum profile and content submission, unless for a reason covered in this policy, or legally required to do so.
Action Reason
Your online status may be shown publicly. Additionally, your last activity time will be shown publicly. Online status helps foster community communication.
Some of the information you submitted with your account profile will be displayed publicly. This will not include information that many would consider confidential, but rather basic details such as your Username. This is fundamental to the social networking capabilities of this website.
The staff reserve the right to read any Private Topics and posts placed on this website. Any form of conversation made through this website should be considered viewable by staff. All private-posts and posts, unless deleted by specific request, are stored on the server. Information may be reviewed if we feel we have cause for an investigation. Situations involving investigations can be anything at our discretion, for example, to investigate specific incidents of our services being used in violation of our rules.

Information storage

  • Members may choose which profile fields display publicly.
  • If you believe data we hold is incorrect and you cannot amend this yourself, you can contact us to request that we make corrections.
  • Contact us if you want a copy of all the personal data we have stored on you. We can locate your data by username, e-mail address, IP address, or member ID – specify all that you have so we can maximise deletion. Raw server logs will generally not be included, unless you specifically request it.
  • Contact us if you wish to have personal data deleted/anonymised from our database. We can delete/anonymise data by username, e-mail address, IP address, or member ID – specify all that you have so we can maximise deletion. Exceptions:
    • Some raw log data, or data in backups, will remain with us until it is automatically deleted.
    • Editorial data, such as content you've submitted, will not be deleted as standard – but you may request that we delete/alter particular content if you specifically identify it.
    • Logged security incidents, or bans, from/on your personal data, will generally not be cleared unless there is what we consider a good reason.
Action Reason
User metadata is logged when website activity happens. Metadata may include dates/time, IP address, web browser name, operating system, and account IDs. Log data is automatically deleted on a schedule. Your most recent IP address and visit time will remain a part of your member account. So we can track success and failure, and audit user behaviour for security and stability, and to generally help us maintain a good user experience.
Information entered manually into the system, or explicitly authorised, will typically be retained – although you may request removal. This information is key to either material published on the website, or the integrity of user accounts.
IP addresses that have been banned will be permanently stored, as will data about suspicious activity. We need to be able to permanently ban IP addresses which appear to be abusing our systems.

Information transfer

Action Reason
We may use external services to probe IP addresses for geographical location, and for Internet Service Provider names, and other assorted metadata, which may allow the third-party IP-data companies to see what websites you have been active on. Tracking by the companies is not known or intended, but we cannot guarantee it is not happening. For us to learn more about users for marketing, security, and relationship purposes.
We embed web code from third-party companies. Tracking by the companies is not known or intended, but we cannot guarantee it is not happening. Web code may be used for many purposes such as displaying non-default fonts or providing interactive page functionality
Social networks such as Facebook and Twitter may track your page views. Code from these networks embedded so you can easily share content onto social networks, and in some cases see how many shares have already been made.

Parental controls

Action Reason
Upon registration, members are required to fill in their Date of Birth, and we will maintain this for our records. To facilitate enforcement of child privacy laws through our parental controls.
Upon registration, members are required to fill in, and keep up-to-date, their time zone, and we will maintain this for our records. To facilitate enforcement of child privacy laws through our parental controls.
Upon registration, members are required to fill in, and keep up-to-date, their region, and we will maintain this for our records. To facilitate enforcement of child privacy laws through our parental controls.

Parental Controls - Age Lockout

  • Members under a certain age will not be allowed to use our site until they are of age to do so. When a member under the age registers an account, they will not be able to log in / use the account until they are old enough to do so.
  • Members under the age of 15 cannot use our site if they are in the following regions: France. This is governed by French law, including Loi n° 2023-566, regarding digital majority and online safety.
  • Members under the age of 16 cannot use our site if they are in the following regions: Ireland. This is governed by the Data Protection Act 2018 (as modified by GDPR).
  • Members under the age of 16 cannot use our site if they are in the following regions: Australia. This is guided by the Online Safety Act 2021.
  • Members under the age of 14 cannot use our site if they are in the following regions: United States >> Florida. This is governed by Florida House Bill 3 (2024) concerning online protections for minors.

Parental Controls - Consent

  • Members under a certain age will be required to get parental consent before they can register for and use an account on our site. Members who require parental consent will be e-mailed a form which must be filled out by a parent or legal guardian. The form will include our contact information at which to submit the completed form. Until our staff confirm parental consent has been received, or until the member reaches the minimum age, they will not be able to log in to their account. When we receive the form, it will be maintained for our records in the event of legal necessity until deemed no-longer necessary (e.g. the member is no-longer using our services or the parent/guardian requested a purge of all data).
  • Members under the age of 16 must get parental consent if they are located in any of these countries / regions: United States >> Florida. This is governed by Florida House Bill 3 (2024) concerning online protections for minors.
  • Members under the age of 18 must get parental consent if they are located in any of these countries / regions: United States >> Utah. This is governed by the Utah Social Media Regulation Act.
  • Members under the age of 16 must get parental consent if they are located in any of these countries / regions: New Zealand. This is governed by the Privacy Act 2020.
  • Members under the age of 13 must get parental consent if they are located in any of these countries / regions: United States. This is governed by the Children's Online Privacy Protection Act (COPPA).
  • Members under the age of 13 must get parental consent if they are located in any of these countries / regions: Canada. This is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA).
  • Members under the age of 16 must get parental consent if they are located in any of these countries / regions: Austria, Belgium, Bulgaria, Croatia, Cyprus, Czechia, Denmark, Estonia, Finland, Germany, Greece, Hungary, Italy, Latvia, Liechtenstein, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Iceland. This is governed by the General Data Protection Regulation (GDPR).
  • Members under the age of 16 must get parental consent if they are located in any of these countries / regions: United Kingdom. This is governed by UK data protection laws, including the UK GDPR, and principles from the Online Safety Act 2023.
  • Members under the age of 16 must get parental consent if they are located in any of these countries / regions: Brazil. This is governed by the Brazilian General Data Protection Law (LGPD).
  • Members under the age of 18 must get parental consent if they are located in any of these countries / regions: Japan. This is governed by the Act on the Protection of Personal Information (APPI).
  • Members under the age of 18 must get parental consent if they are located in any of these countries / regions: India. This is governed by the Digital Personal Data Protection Act, 2023.
  • Members under the age of 14 must get parental consent if they are located in any of these countries / regions: Korea, Republic of. This is governed by the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc. (ICT Network Act).
  • As a default, members under the age of 13 must get parental consent.

Contact Us

For any privacy questions, concerns, or requests (such as to download, anonymise, or delete your data), you may:


This policy was last revised on 4th Mar 2026, 12:39 AM. Material changes to this policy will be posted as a news update to Game Lab.