Privacy Policy

1. In short

The website has two parts, and they handle data very differently.

• The public pages, such as the animal and space fact cards, the games and these service pages, do not ask you to sign up, use no tracking cookies and collect no personal data from their readers.
• The reserved area, which you enter with an account and a book’s code, collects only the data needed to run the account and keep it safe.

2. Data controller

The data controller is Valentina Lupi, author of the Gioca STEM books. For any request about your data you can write to info@giocastem.it.

3. The public pages

In the public pages we ask for no data and use no tracking cookies or advertising trackers.

Some games remember your best scores and your preferences (for example the unit system) in your browser’s storage. This data stays on your device, is never sent to us, and you can remove it at any time by clearing the site’s data in your browser. The numbers you type in "How many of you?", such as weight and height, are used only for the math on the page: they are not saved or sent anywhere.

As with any website, the provider that hosts the pages automatically logs some technical data about requests (such as the IP address and browser type), to run the site and protect it from abuse.

4. The reserved area: what data

When you create and use an account we collect:

• account data: name, email address and password (stored encrypted);
• activated books: which books you activated, with which code and when;
• declarations: the date you declared you are of legal age and the version of the terms you accepted;
• logins: date and time of each login, the browser type and a device fingerprint, derived from features such as the browser, screen, language and operating system;
• email preferences: whether you received the review request email and whether you unsubscribed.

5. Why we process it, and on what basis

• Running your account and giving you access to your books’ materials: necessary to provide the service you asked for (art. 6.1.b GDPR).
• Protecting the account and the book codes: the login record and the device fingerprint help us recognize unusual use, for example a code shared among many people. This is our legitimate interest (art. 6.1.f GDPR).
• Asking you for a review of the book, only once, about ten days after you sign up: a message about a product you have already bought (art. 130(4) of the Italian Privacy Code). You can opt out at any time, with the link at the bottom of the email or in the "Email communications" section of your profile.
• Complying with legal obligations, when there are any.

We do not sell your data and we do not use it for advertising.

6. Cookies and the Meta Pixel in the logged-in area

The logged-in pages use your browser’s storage to keep you signed in and to remember your cookie choice: these are technical tools, needed for the site to work.

Only if you accept it in the cookie banner, these pages also use the Meta Pixel, a Meta Platforms tool that measures visits for marketing purposes. Without your consent it is not loaded. You can change your choice at any time with the "Cookie preferences" link at the bottom of the logged-in pages. The public pages never use the Meta Pixel.

7. Who we share data with

To run the website we use a few providers, who process data on our behalf:

• Supabase, for the database and accounts: data is stored on servers in Ireland, in the European Union;
• Vercel, to host the website;
• Resend, to send emails;
• Meta Platforms, only for the Meta Pixel and only with your consent.

8. Transfers outside the European Union

Some providers are based in the United States. In these cases the transfer takes place with the safeguards provided by the GDPR, such as the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission.

9. How long we keep it

• Account, activated book and login data are kept as long as the account is active.
• If you ask to delete your account, the data is removed within 30 days, except what the law requires us to keep.

10. Children

You must be of legal age to sign up for the reserved area: a child uses it together with the adult who owns the account. The public pages are also designed for children, and that is exactly why they collect no personal data and use no trackers.

11. Your rights

You can ask at any time to access your data, correct it, delete it, restrict its processing, receive it in a readable format (portability) and object to its processing; you can withdraw a consent you gave, without affecting what was done before. To do so, write to info@giocastem.it.

You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the authority of your country.

12. Changes to this policy

If this policy changes, the new version is published here with its date. If the change is significant and you have an account, we will let you know by email.