Privacy Policy

About SparkMosaic Play

SparkMosaic Studio creates browser-based educational games and classroom resources. This policy applies to the website and activities available at play.sparkmosaic.net.

SparkMosaic Studio is based in Haarlem, Noord-Holland, Netherlands. Questions about this policy or our handling of information may be sent to [email protected].

Information we do not request

Visitors can browse the website and use our games without creating an account. Our games do not ask students to provide their name, nickname, email address, date of birth, school, class, password, or other account information.

Students should not submit personal information through a SparkMosaic Play activity.

Browser-only games

Most SparkMosaic Play activities are ordinary HTML5 games that run directly in the visitor’s browser. Their gameplay does not require a multiplayer server, user account, database, or submission of student information.

Game progress in these activities is processed locally in the browser unless a specific activity clearly states otherwise. Our hosting and security provider may still process ordinary technical request information when delivering the game files, as described below.

Multiplayer classroom games

Some games offer an optional multiplayer classroom mode. Students join a temporary room using a four-digit room code and are assigned a generic label such as “Student 1.” They are not asked to provide their identity.

To operate and restore a multiplayer session after a brief interruption, the application processes:

• a randomly generated teacher or player token;
• the temporary room code and connection identifier;
• the assigned game card and card identifier;
• marked card positions, current game state, and Bingo status; and
• game settings and question history needed for the active round.

These values are used to run the classroom activity and reconnect the same browser to its temporary session. They are not used to build advertising profiles.

Temporary storage and deletion

Active multiplayer rooms and player state are held temporarily in server memory. The application does not store multiplayer game state in a database or Redis.

• A room is deleted after approximately two hours without game or teacher activity.
• If a teacher disconnects and does not return, the room is deleted after approximately 15 minutes.
• Ending or restarting a round clears its cards, marks, questions, and Bingo results as applicable.
• Restarting or redeploying the multiplayer server clears all active rooms.

After a round ends, the temporary room and generic player records may remain available for another round until the room itself is deleted.

Browser storage

Multiplayer games use the browser’s local storage for functional purposes. This storage may contain a random teacher or player token and the current room code. It allows a browser to reconnect after a temporary network interruption.

The room code is removed when the session is known to be unavailable. A random student player token automatically expires after 24 hours and is replaced when a saved room is no longer available. If the game is closed when the token expires, it is replaced the next time the game is opened. Other functional browser identifiers, including the teacher token, may remain until the visitor clears the site’s browser data. These tokens do not contain a student’s name or email address.

Some browser-only teacher activities may also save game settings, question history, or timer state locally so an interrupted activity can be restored. This information remains on that device and does not identify students.

Cookies and analytics

SparkMosaic Play does not display advertising and will remain ad-free. We do not use Google Analytics, advertising trackers, third-party behavioral analytics, or third-party error-tracking software. Our application code does not set advertising or analytics cookies.

We use Cloudflare Web Analytics, a service provided by Cloudflare, Inc., to understand aggregate website traffic and performance. Cloudflare automatically loads its analytics beacon from static.cloudflareinsights.com on pages served through its network.

The service may collect the visited URL path, referrer, country-level location, device category, browser and operating-system category, page-load information, and Core Web Vitals such as LCP, CLS, and INP. We use these measurements to understand page views and improve the reliability, usability, and loading performance of the website.

Cloudflare Web Analytics does not use cookies or localStorage and does not track visitors across websites or build profiles of individual visitors. Country, device, and browser categories are derived from standard request information and reported in aggregate; they are not used to identify individuals. Our legal basis for this limited measurement under the GDPR is our legitimate interest in understanding and improving the performance and use of our website.

Cloudflare security features may separately use strictly necessary cookies in limited circumstances to protect the website.

Service providers and technical data

Cloudflare

Cloudflare delivers, protects, and provides aggregate analytics for our website and game files. In providing these services, Cloudflare may process technical request information such as IP address, browser information, requested URL, HTTP method and status code, timestamps, routing information, and security signals. A room code included in a requested URL may be processed as part of that URL.

Railway

Railway hosts the server used by multiplayer games. Railway may process technical connection information such as IP address, user-agent, host, request path, request identifiers, timestamps, region, and request timing for routing, security, and operational logging.

Under our current Railway plan, applicable platform logs are retained for up to seven days. The application does not intentionally write player tokens, room codes, card selections, Bingo results, or game questions to its own application logs.

Children’s privacy

Our activities are designed for classroom use under the direction of a teacher, parent, or responsible adult. We intentionally avoid asking students for names, contact information, accounts, or other identifying information.

For teachers and families: Students should access activities using the provided room code or activity link and should not enter personal information.

External links

The website contains links to Teachers Pay Teachers and may link to other external websites. Once a visitor follows an external link, that website’s own terms and privacy practices apply.

Sharing and sale of information

We do not sell student information, use it for targeted advertising, or provide it to advertisers. SparkMosaic Play will remain free of advertising. Information is processed by Cloudflare and Railway only as needed to deliver, secure, measure, and operate the website and multiplayer service, subject to their respective terms and privacy practices.

Your choices

Visitors can remove locally stored SparkMosaic Play identifiers and settings by clearing this site’s data in their browser. This may prevent reconnection to an active multiplayer room.

Changes to this policy

We may update this policy when our games, service providers, or data practices change. The date at the top of this page identifies the latest version.