Your privacy matters. Learn how we collect, use, and protect your data.
Last updated: May 2025
Ludify is the data controller responsible for your personal data. For privacy-related questions or to exercise your rights, contact us via the Support page.
We collect the following categories of personal data: (a) Account data: email address, display name/username, encrypted password; (b) Usage data: games created by you, game content (questions, answers, images you upload); (c) Communication data: messages you send via the Support contact form; (d) Technical data: session tokens stored in cookies for authentication purposes.
We use your data to: (a) provide and operate the Ludify platform; (b) authenticate your account and maintain your session; (c) store and display the educational games you create; (d) respond to your support requests; (e) send transactional emails (account confirmation, password reset); (f) improve the Platform based on usage patterns.
We process your data based on: (a) Contract (Art. 6(1)(b) GDPR) — to fulfill the service you signed up for; (b) Consent (Art. 6(1)(a) GDPR) — for optional communications; (c) Legitimate interest (Art. 6(1)(f) GDPR) — for security and fraud prevention.
We use only strictly necessary cookies. Specifically, we use session cookies provided by Supabase to keep you logged in between page visits. These cookies are essential for the Platform to function and do not require your consent under ePrivacy regulations. We do not use advertising, tracking, or analytics cookies.
We do not sell your personal data. We share data only with: (a) Supabase (our database and authentication provider, hosted in the EU) — acting as a data processor on our behalf; (b) Legal authorities, if required by law. All third-party processors are contractually bound to protect your data.
We retain your account data for as long as your account is active. Support messages are retained for up to 2 years to allow us to respond and track conversations. When you delete your account, your personal data is deleted within 30 days, except where retention is required by law.
As an EU resident, you have the right to: (a) Access — request a copy of your personal data; (b) Rectification — correct inaccurate data; (c) Erasure — request deletion of your data ("right to be forgotten"); (d) Portability — receive your data in a machine-readable format; (e) Restriction — limit how we process your data; (f) Object — object to processing based on legitimate interests. To exercise any of these rights, contact us through our Support page. We will respond within 30 days.
We implement appropriate technical and organizational measures to protect your data, including encrypted connections (HTTPS), password hashing, and access controls. However, no system is 100% secure, and we cannot guarantee absolute security.
Ludify is intended for users aged 16 and over, or younger users with parental or teacher consent. We do not knowingly collect personal data from children under 16 without proper consent. If you believe a child has registered without appropriate consent, please contact us via the Support page and we will promptly delete the account.
We may update this Privacy Policy periodically. We will notify you of significant changes via email or a prominent notice on the Platform. Continued use after changes constitutes acceptance.
For privacy questions: use our Support page contact form. You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) at www.dataprotection.ro.