Privacy Policy

MindGame Research Lab is an interdisciplinary research lab. This policy covers www.mindgame-lab.org and the forms on it. It does not cover other sites we link to, such as journals, GitHub, or YouTube.

For anything in this policy — including a request to see or delete your data — write to contact@mindgame-lab.org.

• Controller: MindGame Research Lab
• Contact: contact@mindgame-lab.org

We only collect what you type into a form, plus anonymous information about how the site is used. We do not ask you to create an account, and there is nothing to log in to.

When you send us an enquiry

Our contact, collaboration, partnership, and project enquiry forms ask for your name, email address, organisation, and your message (some also take a subject). We use it for one thing: to read your enquiry and reply to it.

These messages are delivered to our own inboxes by email. They are not written to a database, and there is no admin panel where they accumulate — they live in our mailbox like any other email.

When you apply for a position

An application additionally includes the files you attach — your CV, and any supporting documents (PDF or Word, up to 2MB each and 4MB in total). We use these to assess your application.

Applications reach us as email attachments, the same way as enquiries. Please don't attach anything you wouldn't want sent by email, and don't include sensitive personal details we haven't asked for.

When you subscribe to the newsletter

We store only your email address, and only to send you the newsletter. It is held by our email provider until you unsubscribe — every email we send carries an unsubscribe link, and it takes effect immediately.

When you simply browse

We use Microsoft Clarity to understand how the site is used — which pages get read, where people get stuck. Clarity records anonymised usage, including session replays and heatmaps of clicks and scrolling. We use it to improve the site, not to identify individuals.

It only runs if you accept it. We ask the first time you visit, nothing is loaded until you say yes, and declining is a real choice rather than a delay — the site behaves identically either way. You can change your mind at any time through “Cookie preferences” at the bottom of any page; decline and the script is never requested again.

Our forms are protected by Cloudflare Turnstile, which tells humans from bots. To do that it processes your IP address and signals about your browser. We also count recent submissions per IP address, briefly and only in memory, so the forms can't be flooded; that count is never written to disk and disappears on its own.

The Brain Bank — the things you save while reading — is stored in your browser's local storage. It never reaches our servers, we cannot see it, and it isn't tied to any identifier. It stays on the device you saved it on, and clearing your browser's data for this site removes it permanently.

We set no advertising or tracking cookies of our own, and we do not sell or share data with advertisers. Our own storage amounts to two things, both kept in your browser: the Brain Bank described above, and a note of whether you accepted or declined analytics, so we don't have to keep asking.

Cloudflare Turnstile sets its own storage in order to tell humans from bots. That is a security control on our forms rather than a tracking tool, so it runs without asking — as does the Brain Bank, which only stores what you actively press Save on.

Microsoft Clarity sets its own storage too, but only after you accept it. Course videos are embedded from youtube-nocookie.com and are not loaded at all until you press play — until you do, YouTube receives nothing about your visit.

• Enquiries: kept in our mailbox for as long as the conversation is useful, then deleted.
• Newsletter address: until you unsubscribe.
• Analytics: retained by Microsoft Clarity under its own retention schedule.

You can ask us to do any of the following with the personal data you have given us, and we will act on it at no cost to you:

• See a copy of what we hold about you.
• Correct anything that is wrong or out of date.
• Delete it.
• Object to a particular use, or ask us to restrict it.
• Receive it in a portable, machine-readable form.
• Withdraw consent — the newsletter's unsubscribe link and the “Cookie preferences” control in the footer both take effect immediately.

Email contact@mindgame-lab.org and tell us what you'd like. We may ask you to confirm the request came from the address concerned, so we don't disclose someone's data to the wrong person. If you believe we've handled your data badly, you're entitled to complain to your local data protection authority.

This site is aimed at researchers, students, and policy practitioners; it is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has sent us personal information, write to us and we'll remove it.

If our practices change — a new provider, a new kind of form — we'll update this page and change the date at the top. Material changes will be announced on the site rather than made quietly.