Who we are
The Humanitarian Games Catalogue is a human-reviewed directory of games and learning tools for the humanitarian sector, including a small set of games we build and host ourselves. References to “we”, “us”, or “our” in this policy refer to the catalogue and its operators.
What data we collect
Information you provide
- Email address — if you voluntarily subscribe to updates, from the sign-up in the site footer or at the end of one of Our Games, we store your email address to send you notifications. Submission is always optional. We use confirmed opt-in: after you submit an address we email it a confirmation link, and you are only added to the list when you open that link. Alongside your address we record when you subscribed, the wording you agreed to, and the IP address and browser the request came from, as our record that consent was given. Every email we send carries an unsubscribe link.
- Feedback — optional feedback you submit while playing Our Games (e.g. reactions, comments on a scenario) is stored to help us improve the games.
- Contact messages — what you write on our contact form: your name, your email address and your message. They are not stored on this site; the form emails them to the inbox for the option you chose — general enquiries, or data protection — and we use them only to answer you.
Information collected automatically
- Usage analytics — we record anonymised events such as game completions and quiz scores to understand how our learning tools are being used. These events are associated with a randomly generated session identifier, not with your identity.
- Browser preferences — we store your theme preference (dark/light mode) in your browser's
localStorage. This data never leaves your device.
No advertising or tracking cookies
We do not use advertising cookies, cross-site tracking, or any analytics service that builds a profile of you. Where we use a third-party analytics processor, it is configured not to create a person profile and receives only the random session identifier described above. See our Cookie Policy for full details.
How we use your data
- Email addresses are used solely to send updates you requested. We do not sell or share email addresses with third parties.
- Anonymised session events help us understand which learning tools are most used and where improvements are needed.
- What you send through the contact form is used to answer you and, where it is a data protection request, to act on it and to record that we did.
Data retention
Contact messages are kept in the inbox that received them for as long as we need to deal with what you asked and to show that we did, and are deleted when neither is true any more. Email subscriber records are retained until you request deletion. Anonymised event records are retained indefinitely for aggregate analysis purposes. Page-view statistics held by Cloudflare Web Analytics are retained for that provider’s own limited window and are aggregate figures rather than records of individual visits. localStorage data remains on your device until cleared by you or your browser.
Third-party services
- Hosting — this site and its API routes are hosted on Vercel, which processes request metadata in accordance with their Privacy Policy.
- Database — catalogue, subscriber, and event data is stored in a managed PostgreSQL database.
- Product analytics — where configured, gameplay events are processed by PostHog on its European infrastructure. It receives the random session identifier and the game event, and is explicitly configured not to build a person profile. It sets no cookie on this site.
- Web analytics — where configured, page views are counted by Cloudflare Web Analytics. It records the page visited, the referring site, and the browser and device type, and derives an approximate country from the connecting IP address without storing that address. It sets no cookie, stores nothing on your device, and does not fingerprint your browser or follow you between visits or across other sites.
- Email delivery — where configured, confirmation emails, update emails and the messages sent through our contact form are delivered by Brevo, which necessarily receives the address being mailed and the content of the message.
- Cloudflare Turnstile — the contact, subscribe and feedback forms may use Turnstile to check that a submission comes from a person rather than an automated script. It is a privacy-preserving alternative to a CAPTCHA and does not track you across sites.
- Editorial research tools — the admin team uses third-party research tooling when compiling the catalogue. We do not send your personal data to these providers, and we do not use your personal data to train machine-learning models.
- Google Fonts — font files are loaded from Google's servers. See Google's Privacy Policy.
- Cloudflare (Font Awesome) — icon fonts are loaded from Cloudflare's CDN. See Cloudflare's Privacy Policy.
Your rights
Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data, to object to or restrict its processing, and to receive a copy of it in a portable form.
To exercise any of these, use our contact form and choose data protection request. It reaches the people accountable for it rather than a general inbox. Tell us the email address you gave us so we can find the record. We will respond within one month. Deleting an email subscription removes the address and the consent record — the wording you agreed to, the time, the IP and the browser — and cannot be undone.
You can also unsubscribe at any time from the link in any email we send, which stops the mail without deleting the record. For anything else, use the same contact form and choose general enquiry.
Children
This site is not directed at children under the age of 13. We do not knowingly collect personal data from children.
Changes to this policy
We may update this policy from time to time. Material changes will be noted by updating the “last updated” date at the top of this page.