Village records

What the village keeps in its ledger

This is the privacy policy for privacyvillage.org — what we notice when you visit, what you tell us yourself, and what we do (and never do) with it. Written the way we'd explain it to a villager at the gate, not buried in a scroll only a scribe could love.

Effective: August 9, 2026 Data controller: Mert Can Boyar Reach us: mert@privacyquest.org

The short version: This site collects almost nothing about you by default. We use privacy-friendly, cookieless analytics to see roughly how many people visit and which pages they read — no profiles, no ad trackers, no selling of anything. If you fill out a form (like a waitlist), we keep only what you typed in, for as long as we need it to do the thing you asked for.

The village itself — the actual game at play.privacyvillage.org — is a separate service with its own accounts and its own privacy notice. This policy covers the marketing site you're reading right now.

01 · Who keeps this ledger

The data controller

The data controller for privacyvillage.org — the person responsible for deciding what data is collected and why — is Mert Can Boyar, founder of Privacy Village. You can reach him directly at mert@privacyquest.org for anything in this policy: questions, corrections, or a request to exercise your rights.

02 · What the village notices when you visit

Site analytics

Like any watchtower, we keep a general count of who passes through — but we don't ask your name to do it. This site uses Vercel Web Analytics, a cookieless analytics service. It tells us things like which pages are popular, roughly which country a visit came from, and what kind of device was used — aggregated across all visitors, never as a profile tied to you personally.

  • No cookies are set for analytics purposes.
  • No individual visitor is identified or tracked across sessions.
  • We don't use advertising pixels, retargeting scripts, or third-party trackers.
03 · What you tell the village yourself

Forms and waitlists

If you ever fill out a form on this site — for example, joining the Privacy Village Teens educator waitlist — we collect exactly what the form asks for and nothing hidden alongside it. For the educator waitlist, that's your name, email address, and school context, as stated on that form. We use it only to run the waitlist, share relevant updates, and follow up about piloting the program — never to build an advertising profile or to sell to anyone.

If you email us directly, we keep that correspondence to respond to you and to keep a record of the conversation, the same way any reasonable correspondence is kept.

04 · The traveling players

Third parties we work with

A few outside services help run this site. Each only sees what it strictly needs to do its job:

  • Vercel — hosts this site and provides the cookieless analytics described above.
  • YouTube — our gameplay video is embedded as a click-to-play poster image. Nothing loads from YouTube, and no YouTube cookies are set, until you actively click play. Once you do, YouTube's own privacy policy governs that playback.

We don't share, rent, or sell your information to anyone for their own marketing purposes.

05 · Younger adventurers

Children's privacy

This marketing site is directed at adults — teachers, privacy and security professionals, and organizations — not at children. The Privacy Village Teens waitlist described above is for educators, not students: teachers hold the accounts, students never register, and no student data is collected on this site. If Privacy Village Teens ever collects information from students directly, that will happen inside the classroom product itself, under its own notice built for that purpose — not here.

06 · How long we keep the ledger

Data retention

Aggregated analytics data is retained only as long as it's useful for understanding site traffic and is never tied back to an individual. Waitlist and correspondence information is kept for as long as it's relevant to the purpose you gave it to us for — for example, until the program you joined the waitlist for launches or closes — and deleted or anonymized after that, unless you ask us to remove it sooner.

07 · Your rights as a villager

What you can ask of us

Depending on where you live, privacy law may give you rights over the personal data we hold about you. We honor these regardless of exactly which law applies, because they're just good practice. You can ask us to:

  • Tell you what personal data we hold about you, and why.
  • Correct anything that's inaccurate or out of date.
  • Delete your personal data, where we're not required to keep it for another lawful reason.
  • Restrict or object to how we use your data.
  • Give you a copy of your data in a portable format.
  • Withdraw any consent you previously gave, at any time.

To exercise any of these, email mert@privacyquest.org. If you're not satisfied with our response, you also have the right to lodge a complaint with your local data protection authority.

08 · Keeping the ledger safe

Security

We keep the information we do hold behind reasonable technical and organizational safeguards, and we limit who can access it to what's needed to run the site and respond to you. No method of transmission or storage is perfectly secure, but we treat what little we collect with real care, not just a promise.

09 · When the ledger changes

Updates to this policy

If this policy changes in a meaningful way, we'll update the effective date above and, where the change is significant, make a reasonable effort to flag it on the site. We'd rather you notice a change here than be surprised by one.

Send a raven

Questions, corrections, or a rights request — Mert reads this inbox himself.

mert@privacyquest.org