Privacy Policy

Last updated: March 2026

1. Who we are

This application ("Serious Purchasing Game") is operated by:
suPlay BV
Enschede, The Netherlands
Email: info@suplay.nl

2. What data we collect

We collect and process the following personal data:

  • Login credentials — username and password, created by the game administrator for each participant. We do not offer self-registration.
  • Game data — decisions, scores, orders, and other in-game actions stored during the simulation.
  • Server logs — IP addresses and browser information are recorded in standard web server access logs.
  • Error monitoring — we use Sentry to track application errors. Error reports may include IP addresses and request details.

3. Why we collect it

Data is collected for the following purposes:

  • Operating the game — running the purchasing simulation, tracking scores, and managing user sessions.
  • Academic research — anonymized or aggregated game data (decisions, strategies, outcomes) may be used for academic research on purchasing behavior and supply chain management. Research results will never contain information that can be traced back to individual participants.

We do not use your data for marketing or profiling.

4. Cookies

This application uses only essential cookies required for the game to function:

  • Session cookie (PHPSESSID) — keeps you logged in during your session. This cookie is deleted when you close your browser.

We do not use tracking cookies, analytics cookies, or marketing cookies. No third-party cookies are set.

5. Data sharing

We do not sell, trade, or share your personal data with third parties, except:

  • Sentry (functional.software GmbH) — for error monitoring. See Sentry's privacy policy.
  • Hosting provider (TransIP / team.blue) — our server infrastructure provider.

6. Data retention

Game data and user accounts are retained for the duration of the course or training program. After the program ends, the game administrator may reset or delete the data. Server logs are retained for a maximum of 90 days.

7. Your rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to processing of your data

To exercise these rights, contact your game administrator or email info@suplay.nl.

8. Security

We protect your data with HTTPS encryption, secure password hashing, and access controls. Only authorized administrators can access user data.

9. Changes

We may update this privacy policy from time to time. The latest version is always available on this page.

← Back