Privacy policy
This page explains what personal data Educational Games collects and why we need it. It also says how long we keep it and what you can do about it. It covers this website, the account site and the game app on oisie.com.
Who is responsible
Educational Games is run by its operator. In this policy, “we” means the operator.
We are the controller of all personal data on the platform, including children's data. A school is not the controller.
Write to [email protected] with any question or request about your data.
What we keep about children
A child does not sign in alone and has no email address. A parent creates the child's profile and opens it on a family device.
- A nickname that the parent chooses.
- An optional profile PIN, stored in a form nobody can read back.
- Game results, stats and achievements.
- Active play time in seconds, so the time limits a parent sets can work.
- Answers to game tasks, so a game can repeat what the child still finds hard.
- The play rules a parent sets, such as time limits and blocked games.
- Classes the child is in. A parent asks to join a class and the teacher approves.
- Star ratings the child gives to games.
What we do not do
We show no ads. We use no analytics or tracking tools from other companies, on any page.
We do not sell personal data, and we do not share it with anyone for marketing.
We do not collect a child's email address, phone number, location or photos.
What we keep about adults
Adults sign in with an email address and a one-time code.
- Your email address, to send you sign-in codes. There are no passwords.
- The name you show in the app, and a username if you choose one.
- Your children, and the classes you run as a teacher.
- Games, tasks and images you create, and the files you upload.
- Your choice about publishing your comments, when you made it, and the text version you agreed to.
- Sign-in sessions, and the devices you set up as family devices.
Why we use the data
We use data only to run the platform. The legal basis is our agreement with you to provide the service. Keeping the platform safe is our legitimate interest. Publishing your comments needs your consent.
- To run your account and let you sign in.
- To let children play, keep their results and apply the time limits a parent sets.
- To let teachers run classes and championships and give games to their class.
- To keep the platform safe, for example to stop anyone guessing PINs or codes.
Parents' consent and published comments
A parent creates every child profile and acts for the child at every age. The age of digital consent in Lithuania is 14, and that changes nothing here.
Star ratings are public. Text feedback about a game is private. Only the game's creator and our staff read it. When the creator is a child, the parent reads it instead.
We would sometimes like to quote comments, for example on this website. We only do that if you tick a separate box that allows it.
- The box is optional. You can use everything without it.
- It is never ticked for you.
- One box on your account covers you and your children.
- You can withdraw your consent in your account settings at any time, and we stop publishing your comments.
Who else handles the data
We use a few service providers to run the platform. Each one gets only the data its job needs.
- Cloudflare carries traffic to the site and stores uploaded files.
- Amazon Web Services stores database backups.
- An email service sends sign-in codes. We will name it here before we start using it.
How long we keep data
We keep data only as long as the platform needs it.
| Data | How long we keep it |
|---|---|
| Results, stats and achievements | While the account exists |
| Raw game events and play sessions | 12 months |
| Play time records used for time limits | 12 months |
| Questions given during a game | One week after they expire |
| Game join codes that no longer work | 30 days |
| Sign-in sessions | Until you sign out, or 90 days without use |
| Everything else in an account | Until the account is deleted |
Deleting data
A parent can delete a child's profile on the account site. This deletes everything we keep about the child: the profile, results, stats, achievements, play time, play rules, games and their files, library and ratings. It also deletes what the games remember about the child's answers, and takes the child out of every class.
An adult can delete their own account on the account site. This deletes everything in that account, including their own results and play time. Games they made are taken down and deleted, together with their ratings. A teacher's classes are closed.
You can also write to [email protected], and we delete the data for you.
Data in database backups disappears when those backups expire.
Your rights
Under the GDPR you have these rights over your data, and parents also have them over their child's data:
- To know what data we hold about you.
- To correct data that is wrong.
- To have data deleted.
- To limit how we use it.
- To get a copy of it in a common file format.
- To object to how we use it.
Questions and complaints
Write to [email protected]. We reply as soon as we can, and within one month at the latest.
You can also complain to the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija, VDAI) at vdai.lrv.lt.
When this policy changes, we update this page.