Privacy Notice

Scope

This notice covers cherryhillacademy.ai and the games served from it. The Cherry Hill Academy learning site at learn.cherryhillacademy.ai is a separate service with its own notice, and where the two differ, each notice governs its own site.

What you give us on purpose

To play, you sign in once with your name, work email, company and role. That record is written to our database and used by our team to follow up with you. It is a business contact record, and we treat it as one.

Signing in also adds your address to our mailing list, which is held by Brevo. This is not an optional extra you can decline and still play: the sign-in says in print, above the button, that signing in opts you in. Every message carries an unsubscribe link that works immediately, and unsubscribing takes nothing away from your access to the games.

In Risk Hunt, your score can appear on a public leaderboard as your first name, your last initial and your employer.

What the site collects on its own

The ordinary request information any web server receives: IP address, user agent, the page requested, and the time. It is used to keep the site up, to apply rate limits, and to see which games are played.

A session cookie identifies your browser across a visit so the sign-in and the leaderboard can recognize you. It is not an advertising identifier. After you sign in, a token is kept in your browser’s local storage so the games do not ask again; clearing your browser data removes it.

The games keep a rough record of play: which game, roughly how far a player got, how long a visit lasted, and the country and region our network reports for the request. The wall also records which pages and tiles a session visited. That trail shares a session identifier with your sign-in, so for a visitor who has signed in it can be connected to the contact record above. Nothing you type inside a game goes into it.

We do not run an analytics tag, advertising or remarketing, and we do not sell or rent anything to anyone. Several pages load their fonts from Google, and the sign-in form runs Google reCAPTCHA to tell a person from a script, so Google sees the request even before you interact with anything.

Who else sees it

Cloudflare, Inc.: hosts this site and stores the data described below. Cloudflare also sees the ordinary request information every web host sees.

Google LLC: receives your IP address and browser details when a page loads its web fonts, and runs the reCAPTCHA check that protects the sign-in form. See Google’s privacy policy at policies.google.com/privacy.

Brevo: sends the occasional email you opt into by signing in to play, and holds that mailing list.

We may also disclose information if the law requires it, or to establish or defend a legal claim.

How long we keep it

Contact records are kept while there is a business reason to and then deleted, and you can ask us to delete yours at any time using the address below.

Operational records, meaning the activity and fault logs, the navigation trail, play telemetry, and Risk Hunt run and leaderboard entries, are deleted automatically 90 days after they are written. A scheduled job does the deleting; it is not a manual promise.

If you choose to share a Risk Hunt Auditor Card, the card image carries your first name, last initial and employer, and it is published at an unlisted link that anyone holding it can open. That is what sharing means. It is created only when you tap Share, it is never indexed by search engines, and it deletes itself 60 days later.

Your choices

Write to hello@cherryhillacademy.ai to ask what we hold about you, to correct it, to have it deleted, or to have us stop emailing you. Depending on where you live you may have these as legal rights, and we will honor the request either way. Unsubscribe links work immediately and do not need an email to us.

This site is not intended for children and we do not knowingly collect their information.

Where the data sits

Cherry Hill Academy operates in the United States and the services above process data there. If you are elsewhere, submitting information means it is transferred to the United States.

Security

Traffic is encrypted in transit, access to stored records is limited to people who need it, and secrets are held outside the source code. No internet service is perfectly secure and we do not claim otherwise.

Changes and contact

If this notice changes materially the effective date changes with it. Questions go to hello@cherryhillacademy.ai.