Last updated: August 2026

Game Is Serious ("we", "us") operates gameisserious.com and its related learning experiences. This policy describes how we process personal data when you use our platform, join a room, or contact us.

1. Data we process

Account and contact data (name, email, manager profile)
Gameplay and assessment data (scores, choices, progress, room codes)
Free-text you enter in AI-assisted exercises (Deal IQ, Mirror, coaching workspaces)
Technical data (browser, session identifiers, approximate region)

2. Purposes & legal bases (GDPR)

Contract: delivering games and reports you or your employer requested
Legitimate interest: security, fraud prevention, product improvement (aggregated)
Consent: optional email collection and marketing where applicable

3. AI processing

Some features use OpenAI APIs to interpret your inputs and generate coaching feedback. See our AI disclosure page. Do not enter confidential third-party personal data unless your organisation has approved this use.

Homepage Klara desk (anonymous)

The public Klara diagnostic on our homepage processes your free-text anonymously for a short enablement brief. We do not persist chat logs from this desk. Legal basis: legitimate interest in providing product education. If you optionally request an email summary, we process your email address only with your explicit consent (see checkbox on the form); we do not add you to marketing lists without separate opt-in.

4. Sub-processors

We use: Supabase (database/hosting), Cloudflare (CDN & edge), OpenAI (AI inference), Stripe (payments), EmailJS (transactional email). DPAs are maintained where available.

5. Retention

Raw AI conversation text is retained for a limited period (default 365 days) then anonymised or deleted. Aggregated analytics may be kept longer without personal identifiers.

6. Your rights

You may request access, correction, deletion, or portability of your data, and object to certain processing. Contact: [email protected]. EU and EEA users may also lodge a complaint with their supervisory authority.

7. International transfers

Where data is processed outside the EEA, we rely on appropriate safeguards (Standard Contractual Clauses, DPA terms).

8. Revenue Command Center (manager enablement)

When your employer uses our Revenue Command Center, your manager may assign training missions (Mirror, Deal IQ, Transfer, and related simulations). Results from assigned missions are shared with your manager under the training relationship with your employer (GDPR Art. 6(1)(b) and, where applicable, Art. 6(1)(f)).

If you choose to share past sessions you completed before the invite, we process that only with your explicit consent (Art. 6(1)(a)) via the invite or data-approval link. We store consent version and timestamp for audit. You may withdraw consent by contacting [email protected]; withdrawal stops future sharing but does not erase lawfully processed historical records unless deletion is requested under Art. 17.

Data may include: scores, skill axes, Mirror behavioural patterns, Deal IQ qualification and attitude summaries, Transfer debriefs, activity timestamps, and manager notes. Do not enter special-category data unless your organisation has a lawful basis and instruction to do so.

9. Site measurement and cookies

We do not run Google Analytics, advertising cookies, or third-party marketing analytics on gameisserious.com today. There is no cookie wall for optional trackers, because there is nothing optional to load.

Necessary cookies and local storage may support login, security, and product function (session, theme, tours, room player IDs). Cloudflare Turnstile protects public forms. First-party product usage signals in the logged-in app (for example manager activity and error beacons) may be stored server-side for the service. They are not sold and not used for ad retargeting.

YouTube embeds load only after you press play (privacy-enhanced embed). See also Trust and AI disclosure. If we add optional site measurement later, we will ask before loading it.

Privacy Policy