Privacy and data

Written in plain English, not legalese. If something does not add up, write to me and I will change it or explain it.

In short: I collect your email (to let you in) and your progress in the game (so you do not lose it). If you use the AI tutor, I keep the questions you ask it to work out where the course is unclear. No advertising, no profiling, no selling data to third parties. You can delete everything yourself, in one click, from your account panel.

Who processes the data

Data controller: Davide Cavallini, author and operator of Quantum Arcade. For any request about your data you can write to me via LinkedIn or through the contact calendar.

Which data I collect and why

Data	Why	Legal basis	How long
Email	Letting you in without a password (I send you a link) and recovering your account on other devices.	Performance of the requested service (art. 6.1.b GDPR)	As long as you keep the account
Name (optional)	Appearing on the certificate of completion. Without it, the certificate cannot be generated.	Performance of the service	As long as you keep the account
Game progress levels passed, XP, quiz answers	Not losing it, and unlocking the following levels.	Performance of the service	As long as you keep the account
Exam results and certificate	Allowing public verification of the certificate through its code.	Performance of the service	5 years (a certificate has to stay verifiable over time)
Questions to the AI tutor	Answering them and, in aggregate form, working out which topics come across as unclear so I can rewrite them.	Legitimate interest in improving the course (art. 6.1.f)	180 days
Technical logs (IP, timestamp)	Security: preventing abuse and mass email sending.	Legitimate interest	30 days

What I do NOT do: no profiling cookies, no advertising trackers, no selling or handing over data to third parties for marketing, no newsletter unless you asked for it. The only cookies are the technical ones that keep your session open after you click the sign-in link.

Who else sees the data

The hosting service the site runs on (servers in the European Union).
The service that sends the sign-in emails: it sees your address in order to deliver the message.
The AI model provider powering the tutor: it receives the text of the question you write and the relevant pieces of the course. It does not receive your email or your progress. For that reason: do not write personal data into the tutor, it does not need any.

With each of these providers a data processing agreement under art. 28 GDPR is in place (or is to be signed before going live).

Your rights, exercisable right away

See your data: it is all visible in the game (progress) and in the account panel (email, name).
Delete everything: account panel → Delete account and data. It all really goes, including the tutor conversations. If you had a certificate, its code stops coming up as valid.
Correct your name and email, object to processing based on legitimate interest, take away your data: write to me and I will take care of it.
Complaint: you can turn to the Italian data protection authority (garanteprivacy.it) or to the supervisory authority of the EU country where you live.

Minors

The course is also written for middle and high school students. If you are under 14, creating an account requires the consent of a parent or guardian (art. 8 GDPR, as implemented in Italy). You can still do the whole course: ask an adult to go through the registration with you, or use it at school under a teacher's supervision.

If something changes

When I change this page substantially I flag it on the home page and, for changes affecting data already collected, by email.

Last updated: 10 August 2026.