What we collect, why we collect it, and how long we keep it.

BOYCE PROPERTY SERVICES LTD is the data controller for Sustain-air-bility. It is registered in England and Wales under company number 06258012, with registered office at 6 Bexley Square, Salford, Greater Manchester, England, M3 6BZ.

Privacy questions and rights requests can be sent to info@sustainairbility.com, made by telephone on +44 161 832 7777, or posted to the registered office.

If you accept analytics, the marketing site and browser game can collect pageviews, clicks, scroll depth, session and performance timing, game progress, cards and decisions, outcomes, device/browser information, referral or campaign data, and coarse location. Gameplay traces use generated player IDs and airline labels rather than the names players enter.

After consent, a random client identifier is stored in localStorage and a random session identifier is stored in sessionStorage. Direct visits to /play and embedded app webviews do not create those identifiers or send optional analytics unless a valid opt-in choice already exists.

To derive coarse location, the server may send the visitor IP address to the configured geolocation provider. Stored analytics events do not include the raw IP address. A salted one-way IP hash is stored only when the production hash salt is configured; coarse city, region, country, timezone, and rounded coordinates may also be stored.

When a completed game is submitted to the leaderboard, the service stores the player name entered in the game, a generated game and player ID, net-zero year, emissions, cash, end year, bankruptcy status, and submission time. Leaderboard submission is separate from optional analytics.

Do not enter a real name in the game if you do not want that name stored for the leaderboard. A nickname can be used instead.

If you submit the contact form, we collect the name, optional organisation, email address, category, message and page path you provide, plus request metadata needed to validate the submission and limit abuse. The production service reports success only after its configured email provider accepts the message.

If you join the newsletter, we collect the email address, optional name, consent record, page path and request metadata required by the configured newsletter provider. The production service reports success only after that provider accepts the request.

For a paid pilot workshop, Stripe hosts the checkout and collects the customer and billing details needed to process the payment. Sustain-air-bility does not receive or store full card details.

After Stripe verifies an eligible paid booking, it provides the customer name and email so we can link the booking to an existing named facilitator account or create and deliver a single-use account invitation. We use those contact details for Workshop access, booking delivery and related support, not for optional analytics or marketing unless you separately consent.

Minimal Stripe receipt files retain the checkout-session and payment-intent identifiers, amount, currency, payment status, offering, event identifiers, and timestamps needed to verify payment, prevent duplicate fulfilment, support the booking, and maintain accounting records. Those receipt files do not contain the customer name, email or card details. The protected Workshop account store holds the name and email needed for account access; its separate booking association holds internal IDs and delivery state but never the raw invitation token. Stripe also provides its own privacy information at checkout.

• Consent: optional website and gameplay analytics, and email marketing subscriptions
• Legitimate interests: operating and securing the service, preventing abuse, diagnosing failures, maintaining the leaderboard, and responding to ordinary enquiries
• Steps at your request and contract: responding to demo, educator, partner, support, or service enquiries and arranging or fulfilling a paid workshop
• Legal obligation: handling valid privacy rights requests and retaining payment, tax, or accounting records where the law requires it

We use service providers for hosting and storage, contact-email delivery, newsletters, payments, and coarse IP geolocation. The currently supported integrations are Hostinger SMTP or Resend for contact email, Buttondown for newsletters, Stripe for workshop checkout and payment, and ipapi or IPinfo for coarse geolocation. Providers only receive the data needed to perform their service.

Where a provider processes personal data outside the UK, the operator will use an applicable UK adequacy regulation or approved contractual safeguards and will keep the provider and transfer assessment under review.

Optional analytics events are automatically limited to 90 days. Contact submissions are retained for no more than 365 days. Newsletter records are retained until you unsubscribe in Buttondown. Workshop account names, email addresses and access records are retained while access is active and for up to 24 months after it closes, unless they must be kept longer for a legal obligation, a live dispute, fraud prevention or security. Payment and accounting records are retained for the period required by applicable tax, accounting, dispute, and fraud-prevention obligations.

Leaderboard entries are retained until they are removed following a valid request or the leaderboard is reset. Operational backups may persist until their normal rotation completes.

• Analytics are off by default until you give consent, and you can reject them without losing access to the public site or game
• You can withdraw analytics consent at any time from the marketing-site footer and unsubscribe from marketing email using the link in each newsletter
• Depending on the lawful basis and circumstances, you can request access, rectification, erasure, restriction, portability, or object to processing
• The right to object applies in particular where processing relies on legitimate interests; contact info@sustainairbility.com to exercise it
• You can complain to the UK Information Commissioner's Office at ico.org.uk if you believe your data rights have not been respected

The service is not directed at children under 13. A child under 13 should only use the game as part of a session supervised by a parent, guardian, teacher or facilitator, should use a nickname, and must not submit the contact or newsletter forms.

Schools and facilitators remain responsible for deciding whether the game is appropriate for their learners and for providing any notices or permissions required for a supervised session.