Privacy · Data · Transparency
Privacy by design
A project that teaches data governance should be exemplary about its own. This page explains in detail what NO AI ACT collects, what it does not collect, and how to verify it.
01What the game does NOT do
- No accounts: you play without registration, email or identifiers.
- No gameplay telemetry: your decisions, scores, inspection reports and case paths are never sent to any server.
- No backend: the game is a static site; there is no player database.
- No student data: teacher mode and its debrief export are local and anonymous.
- No persistent identifiers created by the game, no cookies added by the game.
02Where your progress lives
Progress (completed cases, unlocked norms, audio/language preferences) is stored exclusively in your browser's localStorage, on your device. Clear the site data and the progress is gone: it exists nowhere else.
03What is measured on public pages
The public pages of the site (not the gameplay) use Cloudflare Web Analytics: aggregate, privacy-friendly statistics with no cookies and no individual profiling. They tell us how many people visit the site, not who they are.
This page is about NO AI ACT's own data. For how the two laws relate — when the GDPR applies, when the AI Act does, when both — see the AI Act and the GDPR.
04No external forms
This version embeds no external forms (feedback, surveys or questionnaires): no third-party form script is loaded and no data is transmitted to form providers. The game is complete and fully playable without any data collection.
05At a glance: measured vs never measured
Aggregate statistics
Visits to the site's public pages via Cloudflare Web Analytics: no cookies, no individual profiling, no identifiers. It answers "how many people visit the site", never "who you are".
Everything you do in the game
Decisions, classifications, scores, inspection reports, cases played, play time, outcomes: none of it leaves your browser. There are no accounts, no game cookies, no pixels, no telemetry.
06How to verify it
The project is open source: the code is public on GitHub, including the rules that keep in-game analytics off by default and the automated tests that lock these behaviours in. You can also open your browser's developer tools and observe the absence of network calls during play.
The educational reasoning behind these choices is on privacy-conscious learning, with the questions to ask of any classroom tool; the broader context is in the education hub and the glossary (privacy by design, data governance).
07Limitations and contact
- This page describes the software's behaviour; it is not legal advice on data protection.
- Questions, reports or collaborations: open an issue on the GitHub repository.
08Privacy FAQ
Do I need to register to play?
No. No registration, no account, no email: open the link and play. Progress stays in the browser's localStorage.
Does the game use cookies?
The game sets no cookies. The public pages use Cloudflare Web Analytics, which by design uses no cookies and no client-side state for visit counting.
Are my answers sent anywhere?
No. Decisions, scores and reports never leave your browser: there is no game server to send them to. You can verify this in the open-source code and by watching the browser's network traffic.
Is there an external feedback form?
No. This version embeds no external forms: there is nothing to fill in and the game sends nothing to third-party form providers.