← Back to simulation
Legal & compliance

Privacy Policy

Last updated: 12 May 2026

This policy explains what personal data is collected when you use the Model UN Diplomatic Simulation, why it is collected, who processes it, and what rights you have — including rights under the EU General Data Protection Regulation (GDPR).

1. Who is responsible for your data?

The data controller for this service is the person or organisation that deployed and operates this site. If you have any privacy-related questions or wish to exercise your rights, please contact:

Data Controller
[DATA CONTROLLER NAME / ORGANISATION]
Email
Address (optional)
[ADDRESS]

2. What data we collect

We collect only the data you actively provide or that is technically necessary for the service to function.

Data you provide directly:

Data collected automatically:

3. How we use your data

Your data is used exclusively to operate the real-time multiplayer simulation:

We do not use your data for marketing, profiling, advertising, or any purpose unrelated to the game session you participated in.

4. Legal basis for processing (GDPR)

Under the General Data Protection Regulation (GDPR), we rely on the following legal bases:

5. Third-party processors

This service relies on the following third-party processors. All game data (names, speeches, resolutions, votes) passes through these services:

Service Provider Purpose Data transferred Privacy policy
Firebase Realtime Database Google LLC Real-time storage and synchronisation of game data Player names, speeches, resolution text, votes, IP address Google Privacy Policy
Firebase SDK (CDN) Google LLC Delivery of application JavaScript from Google's CDN IP address Google Privacy Policy
Google Fonts (optional) Google LLC Typography — loaded only if you consent IP address, browser headers Google Fonts Privacy FAQ

Google LLC is headquartered in the United States. Data may be transferred to and processed in the United States and other countries where Google operates data centres. Google participates in the EU–US Data Privacy Framework and uses Standard Contractual Clauses, providing an adequate level of protection for data transferred outside the European Economic Area.

6. Data retention

Session data (player names, speeches, resolutions, votes) is stored in Firebase Realtime Database for as long as the session record exists in the database. There is no automatic deletion schedule; data persists until it is manually removed from the Firebase project by the operator.

Your cookie consent preference is stored in your browser's localStorage. It remains until you clear your browser data or reset your preferences via "Cookie preferences" on the main page.

No other personal data is stored on your device by this application.

7. Your rights under GDPR

If you are located in the European Union or European Economic Area, you have the following rights regarding your personal data:

To exercise any of these rights, contact us at [CONTACT EMAIL]. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority (DPA) — for example, the relevant supervisory authority in your EU member state.

8. Cookies and local storage

This application does not set any tracking cookies of its own. It uses browser localStorage (not cookies) solely to remember your cookie consent preference. This storage is:

Third-party services (Firebase, and Google Fonts if consented) may set their own cookies or use browser storage in accordance with their own privacy policies.

9. Children's privacy

This service is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe that a child under 16 has provided personal data through this service, please contact us at [CONTACT EMAIL] so that we can delete it promptly.

10. Changes to this policy

We may update this privacy policy from time to time to reflect changes in the service or applicable law. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions, requests to exercise your rights, or concerns:

Data Controller
[DATA CONTROLLER NAME / ORGANISATION]
Email
Address
[ADDRESS]