Experiment with lighting setups to capture different moods in portrait photography.
This application collects some Personal Data from its Users.
Personal Data: email address; first name; last name; Google account ID; OAuth access token; OAuth refresh token
Personal Data: billing name; billing address; card type; last 4 digits; subscription data
Personal Data: billing name; billing address; PayPal account identity; transaction ID
Personal Data: page views; approximate location; browser and device type; referral source
Personal Data: uploaded media file contents
Personal Data: email address; message content
Personal Data: file IDs; file names; OAuth access token
Personal Data: IP address; browser user-agent
Personal Data: wizard inputs; site content
Personal Data: wizard inputs; site content
Personal Data: email address; username; subscription plan; billing amount; transaction ID
Personal Data: display name; email address; Google account ID; XP and badge data; task completions; activity events; Google Drive file references; consent session hash
Owner contact email: privacy@gameful.me
Effective date: June 11, 2026 | Version 1.0
Gameful ("Gameful," "we," "us," or "our") operates an educational technology platform that lets teachers turn their classrooms into game-like learning experiences. Our platform is available at gameful.me and on teacher-managed subdomains.
This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and your rights regarding it. We wrote this policy in plain language so that students, parents, teachers, and school administrators can all understand it.
If you have questions or concerns, contact us at:
This policy applies to:
If you are a school or district entering into a data-processing agreement with us, that agreement governs where it conflicts with this policy.
When a student signs in and uses a Gameful classroom, we collect:
We do not collect students' physical addresses, phone numbers, photographs, or social-security numbers.
When a teacher creates an account and manages a classroom, we collect:
When you browse the public Gameful website (gameful.me), we may collect:
Google Analytics runs only on the main gameful.me site. It does not run on any student or teacher subdomain. It does not fire for logged-in users. It does not fire on the Google OAuth callback page. Analytics tracking begins only after a visitor accepts analytics cookies through our consent banner.
We use cookies and browser local storage to make the platform work. Here is a summary:
| Name | Purpose | Duration | Type |
|---|---|---|---|
| wordpress_logged_in_* | Keeps you signed in to your Gameful account | 14 days (remember-me) / session | Necessary |
| wordpress_sec_* | WordPress secure authentication | Session | Necessary |
| go_consent_v[N] | Records your cookie consent choice | 1 year | Necessary |
| go_consent_session | Anonymous session hash tied to your consent record | 1 year | Necessary |
| go_kiosk_token / go_kiosk_id | Identifies a shared kiosk device session | Session | Necessary |
| reload_clipboard_page | Triggers avatar refresh after a change | 1 hour | Functional |
| go_badges / go_badges_name / date_filter_leaderboard / chosenLabel_leaderboard | Remembers leaderboard display preferences | Session | Functional |
| my_active_user_variable | Tracks which user profile is active in session | Session | Necessary |
| redirect_blog_id | Routes login to the correct classroom subdomain | Session | Necessary |
| go_pending_user | Holds a temporary user record during Google OAuth sign-in flow | Session | Necessary |
| mime_type_allowed | Remembers permitted file types for media uploads | Session | Functional |
| betterdocs_insights_allowed | Tracks whether a visitor has opted in to on-site help-article view counting (local only, never transmitted) | 30 days | Functional |
| pms_* | Subscription state for the membership system | Varies | Necessary |
We also use browser local storage for purely functional purposes: saving UI state such as map preferences, announcement read status, and login modal state. This data stays in your browser and is not transmitted to our servers.
We do not use advertising cookies or cross-site tracking cookies on any part of the platform.
We use personal information only for the purposes described below. We do not sell personal information. We do not use student data for advertising or behavioral profiling.
| Purpose | Information Used | Who It Applies To |
|---|---|---|
| Providing and operating the platform | Account identifiers, gamification data, classroom configuration | Students, teachers |
| Authentication (sign-in) | Email, name, Google account ID, OAuth tokens | Students, teachers |
| Processing payments and managing subscriptions | Billing name, address, card type/last-4, transaction ID, IP address (hashed) | Teachers |
| Sending transactional email (receipts, alerts, password resets) | Email address, message content | Students, teachers |
| AI-assisted setup wizard and policy generation | Wizard inputs and site configuration (admin-only). No student PII is sent to AI services. | Admins/teachers only |
| Storing teacher-uploaded media files | Uploaded file contents | Teachers/admins |
| Website analytics (home page only, after consent) | Page views, device/browser, approximate location, referral source | Visitors to gameful.me only |
| Platform security and fraud prevention | Hashed IP, session tokens, payment IP (hashed) | All users |
| Improving the platform and responding to support requests | Account data, error logs (admin-side only) | Teachers, admins |
We work with the following third-party services. Each one has agreed to handle personal data in accordance with applicable law. Where a Data Processing Agreement (DPA) exists, we have linked to it in the sub-processor table in Section 9.
email, profile, openid. Teachers who use Drive integration also grant files.create and files.get.The following tools support platform operations. They receive only administrative or technical data — no student personal information is shared with them.
wpmailsmtpusage.com as optional usage telemetry. No user personal data is included. ⚠ No DPA availablewpdeveloper.com. Plugin usage telemetry has been permanently blocked by a server-side filter; it never reaches WPDeveloper servers. No user personal data is transmitted. ⚠ No DPA availablecozmoslabs.com if an administrator opts in during plugin setup. No student personal data is included. ⚠ No DPA availableGameful is an educational platform and may be used by students under the age of 13. We take this seriously and have built our data practices around the requirements of the Children's Online Privacy Protection Act (COPPA).
Gameful operates under the school official exception to COPPA. This means:
We collect only the minimum information needed to operate the educational features of the platform: display name, email address, Google account ID, and classroom activity data. We do not collect more information from children than is reasonably necessary for educational use.
If your child is under 13 and uses Gameful through school, you have the right to:
To exercise these rights, contact the teacher or school administrator who manages your child's classroom, or contact us directly at privacy@gameful.me. We will respond within 30 days.
Please note: if we delete a student's account data, the student will no longer be able to access the classroom or their progress history.
Student records created on the Gameful platform — including assignment completions, grades, and activity data generated within a school's classroom — may be education records protected by the Family Educational Rights and Privacy Act (FERPA).
The school or teacher who creates and manages a Gameful classroom is the data controller for student education records in that classroom. Gameful acts as a school official under FERPA, meaning we access and process student education records only to provide the educational services the school has contracted for — not for any independent commercial purpose.
Eligible students (18 or older, or at the postsecondary level) and parents of students under 18 have the right under FERPA to:
To exercise FERPA rights, contact the school or teacher who manages your classroom. You may also contact us at privacy@gameful.me and we will direct your request to the appropriate party.
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) or equivalent laws apply to our processing of your personal data.
| Processing Activity | Lawful Basis |
|---|---|
| Creating and maintaining your Gameful account | Performance of a contract (Article 6(1)(b)) |
| Google OAuth sign-in | Performance of a contract (Article 6(1)(b)) |
| Processing subscription payments | Performance of a contract (Article 6(1)(b)) |
| Sending transactional emails (receipts, alerts, resets) | Performance of a contract (Article 6(1)(b)) |
| Storing gamification and classroom activity data | Performance of a contract / Legitimate interests (Article 6(1)(f)) — providing the educational service |
| Security, fraud prevention, and hashed IP logging | Legitimate interests (Article 6(1)(f)) — protecting the platform and users |
| Google Analytics on the home page | Consent (Article 6(1)(a)) — collected via consent banner before any tracking occurs |
| Processing student data on behalf of schools | Compliance with a legal obligation / Legitimate interests of the school as controller; Gameful acts as data processor under Article 28 |
| AI setup wizard (admin inputs only) | Legitimate interests (Article 6(1)(f)) — improving platform onboarding for administrators |
Under the GDPR you have the right to:
To exercise these rights, email privacy@gameful.me. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
Our servers and most sub-processors are located in the United States. Transfers of personal data from the EEA to the United States are covered by Standard Contractual Clauses (SCCs) incorporated in our sub-processor agreements, or by the EU–U.S. Data Privacy Framework where applicable. See Section 9 for DPA links.
The following companies process personal data on our behalf. We have a Data Processing Agreement (DPA) or equivalent with each — linked below.
| Sub-Processor | Purpose | Data Location | DPA / Agreement |
|---|---|---|---|
| Google (OAuth, Drive, Analytics, YouTube, Custom Search) | Authentication, file picker, web analytics, video search, embedded search results | USA | Google Cloud DPA |
| Anthropic (Claude) | AI text generation for setup wizard and policy drafting (admin inputs only) | USA | Anthropic DPA |
| OpenAI (GPT-4o) | AI text generation fallback for setup wizard (admin inputs only) | USA | OpenAI DPA |
| Amazon Web Services (S3 + SES) | Media file storage (S3) and transactional email delivery (SES) | USA | AWS Customer Agreement / DPA |
| Stripe | Payment processing and card tokenization | USA | Stripe DPA |
| PayPal | Alternative payment processing | USA | PayPal DPA |
| Cloudways | Web server hosting | USA / varies by plan | Cloudways Privacy Policy |
The following administrative-tool vendors receive only site-level technical data (site URL, plugin version, license key). They do not receive student or teacher personal data and are not formal sub-processors under our privacy obligations; however, we list them for transparency:
We share personal information only in the following circumstances:
We do not sell personal information. We do not share data for advertising purposes.
Effective date: June 11, 2026
These Terms of Service ("Terms") are a legal agreement between you and Gameful ("Gameful," "we," "us," or "our"). By creating an account or using the Gameful platform at gameful.me or any subdomain (together, the "Platform"), you agree to these Terms. If you do not agree, do not use the Platform.
If you are a teacher, school administrator, or other institutional user, you are also agreeing on behalf of your school or institution. If you are a student user, your teacher or school has agreed to these Terms on your behalf.
To create a Teacher account, you must be at least 18 years old and either an authorized educator or a school administrator. By registering, you represent that you have the authority to bind your school or institution to these Terms where applicable.
Student accounts are created by Teachers. Students do not independently agree to these Terms — the Teacher or School agrees on the Student's behalf. Teachers are responsible for ensuring that Student enrollment and use of the Platform is permitted under applicable laws and school policies.
The Platform may be used by children under 13 only through the school official exception under the Children's Online Privacy Protection Act (COPPA). This means:
The primary way to sign into the Platform is Google OAuth 2.0 ("Sign in with Google"). You may also use password-based login as a fallback. By signing in with Google, you authorize Gameful to receive your email address, display name, and Google account ID from Google. Teachers who use the Google Drive integration also grant Gameful limited Drive access (file creation and retrieval) for classroom file tasks.
Under FERPA and applicable privacy laws, the School is the data controller for Student Data within its classrooms. Gameful acts as a data processor — and as a "school official" under FERPA — processing Student Data only as directed by and on behalf of the School. Teachers and Schools retain control over what Student Data is collected and how classrooms are configured.
Before enrolling any student, especially a student under 13, the Teacher or School is solely responsible for:
Gameful relies on Teachers and Schools to fulfill these obligations. Gameful will not independently contact parents to obtain consent on the Teacher's behalf unless specifically requested and agreed upon in writing.
Teachers may configure a school email domain to allow automatic student enrollment. By adding a domain to the allowlist, the Teacher represents that:
Teachers are responsible for supervising student use of the Platform in their classrooms. You agree to:
When Teachers assign Google Drive file tasks, students may submit work using the Google Drive file picker. Gameful stores only the file ID and file name as a reference — the file itself remains in the student's own Google Drive. Teachers are responsible for ensuring they have the appropriate permissions to view submitted student files within Google Drive.
You agree to provide accurate, current, and complete information when creating an account and to keep that information up to date. Gameful is not liable for problems caused by inaccurate account information.
You are responsible for keeping your login credentials confidential. You agree to notify us immediately at privacy@gameful.me if you suspect unauthorized access to your account. Gameful is not liable for losses caused by unauthorized account access that results from your failure to protect your credentials.
Each Teacher account is for a single individual. Sharing a Teacher account among multiple instructors is not permitted. If your school needs multiple Teacher accounts, each instructor must register separately or contact us about a school subscription.
Gameful platform administrators may access Teacher and Student accounts for support, security, and platform maintenance purposes. This access is logged. Impersonation sessions are recorded as required for security and compliance.
Access to full Platform features requires a paid subscription. Subscription plans, pricing, and feature inclusions are described on the Gameful pricing page at gameful.me. We reserve the right to change pricing at any time, with reasonable notice provided to existing Subscribers before any price change takes effect.
Subscriptions are billed on a recurring basis (monthly or annually, depending on your selected plan). Your subscription will automatically renew at the end of each billing period unless you cancel before the renewal date. By subscribing, you authorize Gameful and its payment processors to charge your payment method on each renewal date.
Payments are processed by Stripe or PayPal, depending on your selected checkout method. Gameful does not store your full card number. When you pay by card, Stripe.js tokenizes your card data directly in your browser before it reaches our servers — raw card numbers never touch the Gameful platform. Payment records stored on our servers include: billing name, billing address, card type, last four digits of your card, transaction ID, amount, currency, subscription status, and the IP address at the time of payment (used for fraud prevention purposes).
Gameful may offer free trials or promotional pricing from time to time. Unless stated otherwise, a free trial automatically converts to a paid subscription at the end of the trial period. You may cancel before the trial ends to avoid being charged.
You may cancel your subscription at any time through your account settings or by contacting support@gameful.me. Cancellation takes effect at the end of the current billing period. You will retain access to paid features through that date. We do not offer prorated refunds for partial billing periods unless required by applicable law.
If a payment fails, we will notify you by email and attempt to collect payment again. If payment cannot be collected after reasonable attempts, your subscription may be downgraded or suspended until payment is resolved.
Subscription prices do not include taxes unless stated otherwise. You are responsible for any applicable sales tax, VAT, or other taxes that may apply to your purchase based on your location.
Except as required by law, all subscription fees are non-refundable. If you believe you were charged in error, please contact us at support@gameful.me within 30 days of the charge and we will review your request.
The Platform is designed for educational use. You may use it to create and manage gamified classrooms, assign educational tasks, track student progress, and engage students through game mechanics such as XP, badges, and leaderboards.
You agree NOT to:
All content you upload to the Platform — including game assets, assignment descriptions, badges, and announcements — must be appropriate for the age group of your students. Gameful reserves the right to remove content that violates these Terms or that we determine, in our sole discretion, is harmful or inappropriate.
The Platform includes AI-powered features (such as the game setup wizard) powered by Anthropic (Claude) and OpenAI. These features are available to Teachers and administrators only — not to students. You agree not to submit any student personal information, confidential school records, or sensitive personal data through AI-powered input fields. Inputs you provide to AI features may be sent to Anthropic or OpenAI as described in our Privacy Policy.
Teachers who enable the Google Drive integration grant Gameful limited access to their Google Drive for classroom file management. You are responsible for ensuring that your use of the Drive integration complies with your school's Google Workspace policies and with Google's terms of service.
We reserve the right to investigate suspected violations of these Terms. We may suspend or terminate accounts, remove content, or take other action we deem necessary to protect the Platform, our users, and third parties. We are not obligated to monitor the Platform for violations but may do so.
You retain ownership of all content you create and upload to the Platform, including classroom configurations, assignments, and game assets. By uploading content, you grant Gameful a limited, non-exclusive, royalty-free license to store, display, and process that content solely for the purpose of operating and improving the Platform for you and your students.
Student Data is owned by the student and their family (and, for FERPA purposes, controlled by the School). Gameful does not claim ownership of Student Data. We use Student Data only to operate the Platform on behalf of the School and Teacher, and for no other purpose.
The Gameful Platform — including its software, game engine, design, branding, and documentation — is owned by Gameful and protected by copyright and other intellectual property laws. These Terms do not transfer any ownership rights in the Platform to you. You receive only a limited, non-transferable license to use the Platform as permitted by these Terms.
If you submit suggestions, ideas, or other feedback about the Platform, you grant Gameful the right to use that feedback without restriction or compensation to you.
Our Privacy Policy explains in detail what data we collect, how we use it, and your rights. Key points relevant to these Terms:
The Family Educational Rights and Privacy Act (FERPA) gives families rights over their children's education records. When Gameful processes Student Data on behalf of a school, it does so as a "school official" with a "legitimate educational interest," as those terms are used in FERPA.
The Children's Online Privacy Protection Act (COPPA) places additional obligations on online services that collect personal information from children under 13. Under the school official exception to COPPA:
The Platform integrates with third-party services to provide its features. By using the Platform, you acknowledge that your use of these services is also subject to their respective terms and privacy policies. Key third-party services include:
Gameful is not responsible for the practices or content of any third-party service. We encourage you to review the terms and privacy policies of any third-party services you use in connection with the Platform.
THE PLATFORM IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED. TO THE FULLEST EXTENT PERMITTED BY LAW, GAMEFUL DISCLAIMS ALL WARRANTIES, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.
We do not warrant that the Platform will be uninterrupted, error-free, or free of viruses or other harmful components. We do not warrant the accuracy or completeness of any content on the Platform.
AI-generated content produced by the Platform's AI features (powered by Anthropic or OpenAI) is for informational and educational planning purposes only. Gameful makes no representations about the accuracy of AI-generated output and is not liable for decisions made in reliance on such output.
TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, GAMEFUL AND ITS OFFICERS, EMPLOYEES, AGENTS, AND LICENSORS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF DATA, LOSS OF PROFITS, OR LOSS OF GOODWILL, ARISING OUT OF OR IN CONNECTION WITH YOUR USE OF THE PLATFORM.
IN NO EVENT WILL GAMEFUL'S TOTAL LIABILITY TO YOU FOR ALL CLAIMS RELATING TO THE PLATFORM EXCEED THE GREATER OF (A) THE TOTAL AMOUNT YOU PAID TO GAMEFUL IN THE TWELVE MONTHS PRECEDING THE CLAIM, OR (B) ONE HUNDRED DOLLARS (USD $100).
Some jurisdictions do not allow certain limitations of liability. In those jurisdictions, our liability will be limited to the greatest extent permitted by law.
You agree to defend, indemnify, and hold harmless Gameful and its officers, employees, agents, and licensors from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or related to:
You may stop using the Platform at any time. Teachers may cancel their subscription as described in Section 5.5. Cancellation of a subscription does not automatically delete your account or your students' data — contact privacy@gameful.me to request account and data deletion.
We may suspend or terminate your account or access to the Platform at any time, with or without notice, if:
Where practical, we will give you advance notice of termination and an opportunity to export your data.
Upon termination, your right to access the Platform ends immediately. Provisions of these Terms that by their nature should survive termination — including ownership, payment obligations for amounts already due, disclaimers, limitation of liability, and dispute resolution — will survive.
After account termination, we retain data only as required by law or as described in our Privacy Policy. You may request deletion of your data and Student Data at any time by contacting privacy@gameful.me.
We may update these Terms from time to time. When we make material changes, we will notify you by email (at the address associated with your account) and by posting the updated Terms on the Platform at least 14 days before the changes take effect. Your continued use of the Platform after the effective date of updated Terms means you accept the changes.
If you do not agree with updated Terms, you must stop using the Platform and cancel your subscription before the effective date of the changes.
These Terms are governed by the laws of the United States and the state in which Gameful is incorporated, without regard to conflict-of-law principles. Any dispute arising from these Terms or your use of the Platform will first be addressed through good-faith negotiation between the parties. If a dispute cannot be resolved informally, it will be resolved through binding arbitration in accordance with the rules of the American Arbitration Association (AAA), unless both parties agree otherwise in writing.
YOU AND GAMEFUL EACH WAIVE THE RIGHT TO A JURY TRIAL AND THE RIGHT TO PARTICIPATE IN A CLASS-ACTION LAWSUIT OR CLASS-WIDE ARBITRATION, TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW.
Nothing in this section prevents either party from seeking emergency injunctive relief in a court of competent jurisdiction to prevent irreparable harm.
These Terms, together with our Privacy Policy and any other policies incorporated by reference, constitute the entire agreement between you and Gameful regarding the Platform. They supersede all prior discussions, representations, and agreements.
If any provision of these Terms is found to be unenforceable, the remaining provisions will continue in full force and effect. The unenforceable provision will be modified to the minimum extent necessary to make it enforceable.
Gameful's failure to enforce any provision of these Terms is not a waiver of our right to enforce that provision in the future.
You may not assign or transfer your rights or obligations under these Terms without our prior written consent. Gameful may assign these Terms, in whole or in part, in connection with a merger, acquisition, or sale of substantially all of its assets.
These Terms do not create any third-party beneficiary rights. Only you and Gameful have rights under these Terms.
Gameful is not liable for delays or failures in performance caused by events outside our reasonable control, including natural disasters, power outages, internet disruptions, or government actions.
If you have questions about these Terms, please contact us:
Effective Date: June 11, 2026
Parties: This Data Processing Agreement ("DPA") is entered into between Gameful ("Processor," "we," "us," or "our") and the school, district, or teacher ("Controller," "you") who uses the Gameful platform to manage classroom activities, gamification, and student engagement.
This DPA forms part of the Gameful Terms of Service and applies whenever Gameful processes personal data on your behalf. By using the Gameful platform, you agree to the terms of this DPA.
Schools and teachers are the data controllers for student data within their classrooms. You determine which students use Gameful, what assignments are created, and how student progress is tracked. You are responsible for ensuring you have the legal right to enroll students and collect their data.
Gameful acts as a data processor — we process student personal data only on your instructions, as described in this DPA and in the Terms of Service. We do not use student data for our own purposes, for advertising, or for behavioral profiling.
To the extent that student data constitutes "education records" under FERPA, Gameful acts as a "school official" with a "legitimate educational interest" in accessing those records, as that term is used in 34 C.F.R. § 99.31(a)(1). Gameful will not disclose education records to third parties except as permitted by FERPA or as directed by you.
Billing data collected for subscription management includes: billing name, billing address, card type, last four digits of card number, subscription plan and status, transaction ID, amount, and currency. Full card numbers are never stored on Gameful servers — card data is tokenized by Stripe.js or processed directly by PayPal before it reaches our systems. Transaction records also include a hashed IP address at the time of payment, retained for fraud prevention purposes.
Gameful processes personal data solely to:
Gameful will process personal data only in accordance with your documented instructions, which are set out in this DPA and in the Terms of Service. If we are required by law to process data for any other reason, we will notify you before doing so unless the law prohibits such notification.
If we believe an instruction you give us violates applicable data protection law, we will promptly tell you.
Gameful implements the following technical and organizational measures to protect personal data:
We will notify you without undue delay if we become aware of a personal data breach affecting data we process on your behalf, and we will cooperate with your breach response obligations.
Gameful uses the following third-party sub-processors to help deliver the platform. Each sub-processor is bound by data protection obligations at least as protective as those in this DPA. By agreeing to this DPA, you authorize Gameful to use these sub-processors.
We will give you reasonable notice before adding or replacing a sub-processor that handles personal data about your students or teachers.
AI features are available to teachers and administrators for setup assistance and policy generation. No student personal data is sent to AI sub-processors. Inputs consist of wizard configurations, site content, and administrator-entered text only.
The following tools are used for platform administration. They may send administrative metadata (such as site URL, plugin version, or license key) to their respective vendors, but they do not transmit student or teacher personal data.
Gameful and all sub-processors listed in Section 7 are based in or process data in the United States. Cloudways may process data in other regions depending on the hosting location selected.
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, personal data may be transferred to the United States. Where such transfers occur, Gameful relies on the following lawful transfer mechanisms:
You may request a copy of the transfer safeguards applicable to a specific sub-processor by contacting us at the address in Section 12.
As the data controller, you are the primary contact for students and parents who wish to exercise their privacy rights — including the right to access, correct, or delete personal data, or to obtain a copy of records.
Gameful will assist you in responding to such requests. Specifically, we will:
Under FERPA, parents and eligible students (those 18 or older) have the right to inspect and review education records, request corrections, and consent to disclosure. Because Gameful acts as a school official, requests to inspect or correct education records should be directed to the school or teacher. Gameful will support those requests at the school's direction.
Parents or legal guardians of children under 13 have the right to:
These requests should be directed to the child's teacher or school, who will work with Gameful to fulfill them. Gameful does not engage in behavioral advertising directed at students of any age.
If you or your students are in the EEA, UK, or Switzerland, data subjects have rights under the GDPR, including the right to access, rectify, erase, restrict processing of, and port their personal data, as well as the right to object to processing. To exercise these rights, contact your school or teacher (the Controller). Gameful will assist as Processor.
Lawful bases for processing activities are as follows:
Gameful retains personal data for as long as a user's account is active. When a student account is removed — whether by the teacher, the school, or the student — Gameful will delete that student's personal data from active systems.
Billing and payment records are retained for the period required by applicable tax and financial regulations, even after a subscription ends.
Upon termination of your agreement with Gameful, we will, at your election, delete or return all personal data we hold on your behalf within a reasonable time frame. We will confirm deletion in writing upon request.
Backup copies of data may persist for a limited period in encrypted backup storage before being purged as part of standard backup rotation cycles.
Gameful staff who access personal data processed under this DPA are subject to a duty of confidentiality. We will ensure that anyone authorized to process personal data on your behalf has committed to appropriate confidentiality obligations.
Gameful will not disclose student data to any party other than those listed as sub-processors in Section 7, except:
Gameful will make available to you, upon reasonable written request, information necessary to demonstrate compliance with this DPA. This may include summary security documentation, sub-processor lists, or other relevant records.
Where you have a legal right to audit Gameful's data processing activities, you may exercise that right with reasonable advance notice. We may require that audits be conducted by an independent third party under a mutually agreed confidentiality agreement.
Gameful may update this DPA from time to time to reflect changes in our services, sub-processors, or applicable law. We will notify you of material changes by email or through a prominent notice on the platform at least 30 days before the change takes effect. Continued use of the platform after the effective date constitutes acceptance of the updated DPA.
If you do not accept a material change to this DPA, you may terminate your agreement with Gameful by contacting us before the effective date of the change.
For questions about this DPA, to request deletion of student data, or to exercise any rights described in this agreement, please contact:
Schools and teachers acting as controllers may also exercise their rights directly through the platform's administrative interface for common requests such as student data export and deletion.
Effective date: June 11, 2026
This Cookie Policy explains what cookies and similar technologies Gameful uses, why we use them, and what choices you have. It applies to the Gameful platform, including the main site at gameful.me and all classroom subdomains.
This policy is part of our broader Privacy Policy. If you have questions, contact us at privacy@gameful.me.
Cookies are small text files that a website stores on your device when you visit. They help the site remember things like whether you are logged in or what preferences you have set. Cookies are not programs — they cannot run code or carry viruses.
We also use browser local storage, which works similarly to cookies but stays on your device and is not sent to our servers with every request. We explain how we use local storage in a separate section below.
The table below lists all first-party cookies our platform sets directly on your device.
These cookies are required for the platform to work. You cannot opt out of them while using Gameful. No personal data collected through these cookies is used for advertising.
These cookies record your privacy consent choices. They are necessary to honor the choices you make and to comply with data protection law. They do not track you across other websites.
modules/privacy/src/consent-log.php).
These cookies remember choices you make to improve your experience. They are not used for advertising.
The following cookies are set only during administrator sessions. Students and teachers will never receive these cookies.
Some pages load scripts from third-party services. These services may set their own cookies on your device. We do not control those cookies. Links to each service's privacy policy are provided below.
When you use Sign in with Google, scripts from accounts.google.com are loaded. Google may set cookies to manage the OAuth session. Google receives your email address, display name, and Google account ID as part of the sign-in flow.
On pages that display Google Custom Search results (embedded image search used in student content pages), a script from cse.google.com is loaded. When this script runs, your IP address and browser information are sent to Google. Search queries on these pages are set by your teacher or school administrator — students do not type them. Google may set cookies to support the search widget.
On pages where teachers use the Google Drive file picker, a script from apis.google.com is loaded. This is a teacher-facing feature only.
Google Fonts are not loaded from Google servers. We self-host all fonts, so no requests are made to fonts.googleapis.com or fonts.gstatic.com.
Google's cookie and privacy practices are described in their Privacy Policy. Google is covered by our Data Processing Agreement with Google Cloud.
Google Analytics runs only on the main gameful.me home page. It does not run on any classroom subdomain. It does not run for any logged-in user (students or teachers). It does not run if the Google OAuth callback parameter (?code=) is present in the URL.
Google Analytics does not fire until a visitor accepts analytics cookies via the consent banner. If you decline analytics cookies, no Google Analytics cookies are set and no data is sent to Google.
When active, Google Analytics sets cookies (typically _ga, _ga_*) that collect page views, approximate location, browser and device type, and referral source. These cookies last up to 2 years.
You can opt out at any time using the consent preference center or by installing the Google Analytics Opt-Out Browser Add-on.
On pages where teacher or school subscriptions are purchased or managed, a script from js.stripe.com is loaded. Stripe may set cookies to support payment tokenization, fraud detection, and session continuity. Raw card numbers never reach our servers — Stripe handles card data directly in your browser.
Stripe's cookie and privacy practices are described in their Privacy Policy. Stripe is covered by a Data Processing Agreement.
Stripe cookies are only present on payment-related pages. Students do not access payment pages and will not receive Stripe cookies.
We also use browser local storage to save small pieces of information on your device. Unlike cookies, local storage data is not sent to our servers with each page request. It is used only to improve your experience within the platform. None of the local storage items below are used for advertising or tracking across other websites.
You can clear local storage at any time through your browser's developer tools or privacy settings. Clearing it will reset any stored preferences listed above.
Gameful is used in K–12 classrooms and may be used by students under 13. We take extra steps to protect younger users.
When you first visit the gameful.me main site, a consent banner asks whether you accept analytics cookies. You can accept or decline. If you decline, Google Analytics will not load and no analytics cookies will be set. Your choice is saved in the go_consent_v[N] cookie for one year so we do not ask again on every visit.
You can change your choice at any time by clicking the cookie preference link in the site footer.
All modern browsers let you view, block, or delete cookies through their settings menus. Here are links to instructions for the most common browsers:
Note: blocking strictly necessary cookies will prevent the platform from working properly. For example, blocking session cookies means you will not be able to stay logged in.
The table below provides a quick reference for all cookies described in this policy.
We will update this Cookie Policy when we add new cookies or change how existing cookies work. When we make material changes, we will update the effective date at the top of this page. We encourage you to check back periodically.
If you have questions about this Cookie Policy or how we use cookies, please contact us:
We use cookies to keep you logged in. On this site we also use Google Analytics to understand how Gameful is used. Cookie Policy | Privacy Policy
This site uses only essential cookies — to keep you signed in and to run gameplay features (such as saving your progress). No advertising or tracking cookies are used here. Cookie Policy
Please review and accept before continuing to use Gameful.