Skip to content
Plain words · no legalese

How we handle your data

Students play under a generated nickname – without a name or an e-mail address. The exception is students who voluntarily join the ambassador programme: they give an e-mail address, which can be linked to their game profile. We hold personal data such as an e-mail address only from people who give it to us themselves — teachers, ambassadors and students who ask for an e-mail reminder about the next campaign.

The platform is operated by Arwell Works s.r.o., which is responsible for campaign data jointly with the campaign organiser. This summary does not replace the legal documents — the binding text is in the Student privacy notice and the Account privacy notice.

A nickname, not a name

Anyone who just plays enters no name and no e-mail address. Only those who want one create an account.

Only what we need

Every piece of data has a reason. Ambassadors, for example, are only asked about their age — we never store a birth year.

Deletion is the rule

We delete or anonymise campaign data within 60 days of the campaign ending. You can delete your account in one click.

Who you are

What we know about you, and what we don't

We store

  • A game profile under a generated nickname
  • The school the student chooses
  • Completed activities and points
  • The year and class the student chooses
  • Quiz answers only as correct/incorrect and the response time
  • Research survey answers separately from the profile: by the end of the competition day at the latest they are moved with no link to it, so it is not possible to find out who answered what

We don't store

  • First name and surname
  • E-mail address or phone number
  • Photos
  • Date of birth or age

Who sees it

Leaderboards are public, but for a student they publicly show only the nickname and points (the final results also the school). Only signed-in participants of the campaign see the class next to a nickname, in the app – so it is harder to tell whose profile it is, although classmates who play too may still be able to. Teachers see only totals for their school and for classes with at least 10 participants, never individual students. A video or recording (YouTube, Vimeo, SoundCloud, Spotify) loads only after tapping “Play” — only then does that service receive the IP address, and it may store its own cookies.

How long

Within 60 days of the campaign ending, we delete the data or irreversibly anonymise it. Anyone who creates an ambassador account before the campaign ends takes their points with them. Earlier, we delete the data when the student asks for it right in the app (Profile → Delete my data).
Data retention and deletion →
For parents

Your child plays under a nickname.

At school they scan a QR code and play without a name or an e-mail address. In public the leaderboard shows only their nickname and points, and the final results also their school. Only signed-in participants of the campaign see the class next to the nickname, in the app, so some classmates who play too may recognise them. Nobody can message them — Eolin has no chat and no messages between students.

An ambassador account or an e-mail reminder about the next campaign is available only from age 15 (Czechia) or 16 (Slovakia). We don't accept e-mail addresses from younger children.

Age and information for parents →

Who helps us with data

We don't sell data or use it for advertising. These processors help us:

Supabase
Database and sign-in
Vercel
Hosting the website and the campaign app
Resend
Sending e-mails, such as sign-in codes
Club Alpbach Czechia & Slovakia, z. s.
Manual verification of teachers
List of processors →
GDPR

Your rights

Access

Find out what data we hold about you.

Rectification

Correct anything that is wrong.

Erasure

Have your data deleted. Students ask for it right in the app: Profile → Delete my data.

Portability

Download your data in a readable form.

Objection and restriction

Object to certain processing.

Complaint

Contact the ÚOOÚ (Czechia), the Úrad na ochranu osobných údajov SR (Slovakia) or the data protection authority in your country.
Make a requestWe reply within one month · privacy@arwell.works
Who to write to, by type of request →All documents →