Privacy Policy

This policy covers the website playwise.education and the PlayWise store on it. It explains what data we collect when you browse the site, buy a game or give us your email address, why we collect it, who processes it and what choices you have.

The PlayWise Games mobile app has its own, separate policy: see the privacy policy of the app.

Who is responsible for your data

PlayWise is run by Daniel Sallai, resident in Barcelona, Spain, who is the data controller for the data described here. For any question or request about privacy, write to [email protected]. We answer within 30 days.

The short version

• We measure how the site is used with an analytics tool (PostHog). It runs on every page without cookies and stores nothing in your browser.
• When you buy a game, LemonSqueezy takes the payment. We receive your email address, your name if you gave one, and the details of the order. We never see your card number.
• When you type your email address into one of our forms, we keep it for the purpose named on that form.
• We do not sell your data and we do not use it for advertising.
• Buying a game does not put you on a newsletter.

What we collect when you browse the site

Every page of the site loads PostHog, our analytics provider. PostHog records which pages you open, what you click, the page you came from, your browser, device type and screen size, the language of your browser, and your approximate location (country and city) worked out from your IP address. It does this from your first visit.

PostHog runs in its cookieless mode: it sets no cookie and stores nothing in your browser, which is why the site has no cookie banner. To count visits from the same browser as one visitor, PostHog computes a short-lived code on its servers from the day, your IP address, your browser type and the name of the site. The code changes every day, so a visit today cannot be linked to a visit tomorrow. PostHog discards the IP address after this step and does not store it with the data. We do not record your screen or your typing, and session recording is switched off.

Our server and Cloudflare, the network that delivers the site, also process your IP address and browser details for a short time. This is needed to send you the pages and to block abuse.

Cookies and similar storage

• Session and security cookies of our own site. They keep forms working and protect them from misuse. They expire shortly after your visit.
• Analytics: none. PostHog runs without cookies and without storing anything in your browser.
• LemonSqueezy checkout: when you point at, tap or click a buy button, the site loads the checkout from app.lemonsqueezy.com. From that moment LemonSqueezy can set its own cookies, which it needs to take the payment and prevent fraud.

You can delete or block cookies in your browser settings.

What we collect when you buy a game

The checkout is run by LemonSqueezy, which is the seller of record. LemonSqueezy collects your name, email address, billing country and payment details, and is responsible for that data under its own privacy policy. Your card or account details never reach us.

When the payment is done, LemonSqueezy sends the order to us and we store it in our own database:

• your email address, and your name if you gave one,
• the order number, the product, the amount, tax and currency, the status of the order (paid or refunded) and the link to your receipt,
• your country, taken from your IP address when you started the checkout, and the language of the site you used,
• the address of the page where you started the checkout,
• a random code that opens your downloads page.

We also record the sale in PostHog with the product, the amount, the currency and the order number. Your name and email address are not sent to PostHog for this.

LemonSqueezy sends the receipt and the download email for your order.

What we collect when you ask for your files again

On the Get your files again page you type the email address you paid with. We use it to find your orders and to send the download links to that address. The email is sent through Resend, our email delivery provider.

We count these requests in PostHog. The count includes how many orders were found and a scrambled form of the email address (a hash) that works as an identifier, not the address itself.

What we collect when you give us your email address

• Launch news forms on the game pages: we store the email address you type and which form it came from, and use it to tell you when the game or a new version is available.
• Newsletter: our newsletter runs on Substack. If you subscribe, Substack collects your email address under its own privacy policy, and every issue has an unsubscribe link.
• Email to us: if you write to us, we keep the conversation so we can answer and help you later.

We send marketing email only to people who asked for it. A purchase alone is not a subscription. To stop any email from us, use the unsubscribe link or write to [email protected].

Why we use your data, and on what legal basis

• To deliver your files and help you with your order. Legal basis: the contract of your purchase (Article 6(1)(b) of the EU General Data Protection Regulation, GDPR).
• To keep order records for accounting, refunds and questions that come up later. Legal basis: our legal obligations and our legitimate interest in keeping proper records (Article 6(1)(c) and (f)).
• To understand how the site and the store are used and to improve them. Legal basis: our legitimate interest (Article 6(1)(f)). You can object at any time by writing to [email protected].
• To send you news you asked for. Legal basis: your consent (Article 6(1)(a)), which you can withdraw at any time.
• To keep the site secure and stop misuse of forms. Legal basis: our legitimate interest (Article 6(1)(f)).

We do not sell your data, we do not use it for advertising, and we do not make automated decisions about you.

Who processes your data

• LemonSqueezy (United States): seller of record. It runs the checkout, takes the payment, handles tax and invoices, and sends the receipt. It decides itself how it uses the payment data.
• DigitalOcean: hosts the website and our database on a server in Frankfurt, Germany.
• PostHog: analytics, on its EU cloud servers in Frankfurt, Germany, under a data processing agreement.
• Resend (United States): delivers the emails sent by the Get your files again page.
• Cloudflare (United States): delivers the site to your browser and protects it from attacks.
• Substack (United States): runs the newsletter, if you subscribe.

Some of these companies are based in the United States, so your data can be processed there. Each of them handles the data under its own data protection terms.

We do not share your data with anyone else, unless the law requires it.

How long we keep your data

• Order records: three years from the day of the purchase, so that we can help you with your files, refunds and questions. After that we delete the record or remove your name and email address from it. LemonSqueezy keeps its own copy of the order under its own rules.
• Analytics data: for as long as it helps us understand how the site is used. It is not tied to your name, your email address or a lasting identifier.
• Email addresses from our forms: until you ask us to remove them.

If you ask us to delete your data sooner, we remove it or make it anonymous, except for what the law requires us to keep.

Your rights and how to use them

Under the GDPR you may ask us for a copy of your personal data, ask us to correct or delete it, ask us to restrict how we use it, object to its use, and ask for it in a form you can take elsewhere. Where we rely on your consent, you can withdraw it at any time.

To use any of these rights, write to [email protected], if possible from the email address the request is about. We answer within 30 days. For payment data held by LemonSqueezy we will point you to the right place.

You also have the right to complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es), or to the authority where you live.

Children

The website and the store are meant for adults: parents, teachers and others who play with children. Only adults can buy, and the store does not ask for any data about children. If you believe a child has given us an email address, write to [email protected] and we will delete it.

How we protect your data

• The site and the checkout are served only over encrypted connections (HTTPS).
• Order records can be seen only by the people who work on PlayWise, through password-protected accounts.
• Payment details are handled only by LemonSqueezy and are never stored on our server.

Changes to this policy

When we change what we collect or which companies process it, we update this page and the date at the top.

For the rules of buying, see the Terms and Conditions and the Refund Policy.