The short version
- In the game, we only know your Roblox account number and username, plus your game progress. We never ask for your real name, age, school, address or photo.
- Your progress is used to run the game, for example to choose which questions to bring back so you can practise your weak spots.
- We don't sell data, show adverts or track you around the internet.
- You can ask us to delete your game progress at any time.
- On this website, the only personal data we collect is a teacher's email address, if they choose to join our waitlist.
Who we are
Gradehatch Learning makes the Roblox game Steal a Good Grade and runs this website. We are the "controller" of the personal data described here, which means we decide how it's used and we're responsible for looking after it.
- Contact: [email protected]
In the game
You play Steal a Good Grade through your Roblox account. Roblox looks after your account itself (your login, age, email address and any payments) under Roblox's own privacy policy. Roblox doesn't share those details with us.
What we hold
| Data | Why we use it |
|---|---|
| Your Roblox account number (user ID) and username | To know which progress is yours and save it between visits. Usernames show above players in the game, as in any Roblox game. |
| Game progress: pets, eggs, levels, lessons completed and settings | To run the game and keep your progress. |
| Your answers: which questions you got right or wrong, and when | To power the study plan, which brings back the questions you find hard so you can practise them. |
We use this data because it's needed to provide the game you've chosen to play: it's in our legitimate interests to run the game, and in yours to have your progress saved and your revision tailored to you.
About the study plan: it uses your answers to decide which revision questions you see next. That's automated, but it only affects which questions come up in the game. It has no effect on you outside the game.
Where it's stored
Game data is stored on Roblox's servers, using the storage Roblox provides to all games. The game doesn't send your data to any other company or website.
Analytics
We use Roblox's built-in analytics only. They give us totals, such as how many players finished their first lesson or how many eggs were hatched, so we can improve the game. We don't use any outside analytics or trackers, and we don't build advertising profiles.
Chat and purchases
- Chat: the game has no chat of its own. Any chat is Roblox's, which Roblox runs and moderates. We can't see it.
- Purchases: optional extras are bought with Robux, and Roblox handles all payments. We only learn which item was bought, so we can give it to the player. We never see payment details.
On this website
Hosting
This website is hosted by Cloudflare. Like any website host, Cloudflare processes technical data, such as your IP address and browser type, to deliver pages to you and protect the site from attacks. Cloudflare does this on our behalf and keeps this data only briefly.
Cookies
We don't use tracking, analytics or advertising cookies. Our fonts and images come from our own website, not from outside services. Cloudflare may occasionally set a strictly necessary security cookie to tell real visitors apart from automated attacks.
Teacher waitlist
If you join the waitlist for our teacher and school tools, we store your email address, that you signed up as a teacher, and the date you signed up. We use it only to email you when those tools launch. That's based on your consent, which you can withdraw at any time by emailing us, and we'll delete your address.
Waitlist emails are stored securely by Supabase, a database service that keeps them for us in its London data centre. Only we can see them. We never share them or use them for anything else.
Data outside the UK
Roblox, Cloudflare and Supabase are international companies, so data may be processed outside the UK, including in the USA. When it is, it's protected by the safeguards UK law requires, such as the UK–US Data Bridge or the UK's standard contract terms.
How long we keep it
- Game progress and answers: while you keep playing, and for retention period, e.g. 2 years after you last played. After that we delete it.
- Teacher waitlist emails: until our teacher tools launch and we've emailed you, then for no more than 3 months, unless you sign up to the tools themselves. Or until you ask us to delete them, if that's sooner.
- Emails you send us: as long as needed to deal with your message, and no longer than 12 months, except safeguarding reports, which we may need to keep longer.
Your rights
You have the right to:
- ask for a copy of the data we hold about you;
- ask us to correct it;
- ask us to delete it;
- ask us to restrict how we use it, or object to how we use it;
- ask for your data in a format you can take elsewhere;
- withdraw your consent (for the waitlist) at any time.
How to ask: email [email protected]. For game data, tell us the Roblox username, not a real name. Parents and carers can ask on behalf of their child. We may ask a simple question to check the request is genuine, and we'll reply within one month. It's free.
We also act on deletion requests that Roblox passes to us when a player asks Roblox to delete their account.
Children
Our game is made for secondary-school students, and we've designed it to protect young people's privacy, following the ICO's Children's code:
- we collect as little as possible and never ask for personal details;
- privacy is high by default, and nothing in the game shares a player's information with other players beyond their Roblox username;
- we don't use children's data for advertising, and we don't sell it;
- we don't use design tricks to keep players hooked or to get them to share data.
If we ever add a way for parents to see their child's progress, we'll explain exactly how it works here before it starts, and nothing will be shared without the young person's knowledge.
Complaints
If you're unhappy with how we've handled your data, please email us first at [email protected] and we'll try to put it right. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, or call 0303 123 1113.
Changes to this policy
If we change how we use data, we'll update this page and the date at the top. If a change matters a lot, such as a new feature that uses data in a new way, we'll explain it clearly before it starts.