Privacy Policy

Odyssey Skul is a small, independent project for learning languages and culture by playing immersive games. This policy explains what we collect, why, and what you can do about it. We try to collect as little as possible.

You control your personal data

“Personal data” is any information that can identify you, such as your name, email address, or IP address. You have the right to:

• Request a copy of any personal data we hold about you
• Request that we correct anything inaccurate
• Request that we delete your personal data
• Withdraw consent for processing at any time

If you have an account, you can act on most of this yourself from your account area (see “Your data, in your hands” below). For anything else, reach us through the contact form. We verify your identity before processing a data request.

What we collect

Account information

To create an account, we collect a username and your email address. There is no password. When you log in, we email you a short, single-use code that expires after ten minutes. Your account is what lets us save your game and your learning progress across devices.

Learning progress

When you play a module, we store your progress so you can pick up where you left off. For Nsayka Wawa this includes your kəmtəks score (a running measure of how much you know), which missions you have started and finished, and which Chinuk Wawa words you have encountered and mastered. This data is tied to your account and exists to serve your learning. We do not sell it or use it for advertising.

Game saves

We store your in-game save so you can resume a session. The save is an opaque blob produced by the game engine. We keep it and hand it back to your browser when you return; we do not inspect its contents.

Support tickets

When you open a support ticket, we collect the message you write, the module it relates to, and the email tied to your account so we can reply. Tickets are kept while the issue is open and for a reasonable period afterward for our records.

Newsletter

If you subscribe to the Odyssey Skul newsletter, we collect your email address and store it with Mailchimp, our email provider. You can unsubscribe from any newsletter email at any time.

Contact form

When you submit the contact form, we collect your name, email, optional organization, and message. This is emailed to us and used only to answer you.

How we use your information

• To create and run your account
• To save and restore your game and learning progress
• To answer your questions and support requests
• To send newsletter content you asked for
• To keep the site secure and working

We do not sell, rent, or share your personal information with third parties for their marketing.

Third-party services

• Mailchimp: newsletter delivery. Your email is stored under their privacy policy.
• Cloudflare Turnstile: bot protection on our public forms (signup, contact, newsletter). It collects only what it needs to tell humans from bots.
• Email (SMTP): we send transactional and support email through an SMTP provider. Message contents pass through that provider to reach you.
• Cloudflare Web Analytics: cookieless page-view counting. It tracks aggregate traffic without setting cookies, fingerprinting visitors, or receiving any account data.

Account data, game saves, learning progress, and support tickets live in our own self-hosted database and are not shared with any analytics or advertising service.

Cookies

We use a small number of functional cookies, including one that remembers your cookie choice so we do not keep asking, and a session cookie that keeps you logged in. Cloudflare, which protects the site from bots and abuse, may set a security cookie as well. None of these cookies are used for analytics or advertising. You can clear or block cookies in your browser, though logging in will not work without the session cookie.

Your data, in your hands

Your account area gives you direct control:

• Reset a module: erase your progress for a single module (your kəmtəks score, missions, vocabulary mastery, and game save for that module) and start it fresh, while keeping your account and any other modules.
• Delete your account: remove your account and all of its data, including every module's progress and saves. Both actions sit behind a clear confirmation, because both are permanent.

If you cannot reach these controls, the contact form does the same thing by hand.

Data retention

• Account, progress, and saves: kept until you delete them
• Newsletter subscription: kept until you unsubscribe
• Support tickets and contact messages: kept for a reasonable period for our records

Data security

We use HTTPS for all traffic, store login codes only as short-lived secure hashes, and limit who can reach the database. No system is perfect, but we keep the surface small on purpose.

GDPR

If you are in the European Economic Area, you have rights under the General Data Protection Regulation. You can read more at gdpr.eu.

Your GDPR rights

• Access: request a copy of your personal data
• Rectification: request correction of inaccurate data
• Erasure: request deletion of your personal data
• Restriction: request that we limit how we use your data
• Portability: receive your data in a machine-readable format
• Objection: object to processing based on legitimate interests
• Withdraw consent: at any time, without affecting prior processing

Legal basis for processing

• Contract: running your account, saving your progress, and answering support requests, all of which you ask us to do.
• Consent: the newsletter and non-essential cookies. You opt in and can opt out.
• Legitimate interest: keeping the site secure and functioning.

To exercise any right, use the controls in your account or the contact form. We respond within 30 days.

Children and younger learners

Odyssey Skul is built for learners of every age, and we want young people here. To respect children's privacy laws, COPPA in the United States and Article 8 of the GDPR in Europe, you need to be at least 16 to create your own account. We ask for a date of birth when you sign up. If it puts you under 16, we stop right there and create no account, so nothing is collected. If you are 16 or older, we keep that date of birth with your account as the record that you met the age requirement, and we delete it when you delete your account.

Younger learners are still welcome. A parent, legal guardian, or teacher can create an account and use it to explore the games together. That adult is the account holder, consents to the data described in this policy, and can reset a module or delete the account at any time. If you believe a child under 16 has created an account without an adult, contact us and we will remove it.

Changes to this policy

We may update this policy. Meaningful changes get a new “last updated” date. Please check back now and then.

Contact

Questions about this policy, or want to exercise a data right? Reach out through the contact page.