Privacy in the pilot

Your learning.
Your choice to share.

A profile is private by default. You choose whether your name, verified institution, and daily score appear in the community board.

Last updated September 25, 2026

Who is responsible

The controller is luujuu UG (haftungsbeschränkt), Kolonnenstraße 8, 10827 Berlin, Germany, represented by Dr. Sven Jungmann. Contact konsil@luujuu.com for privacy requests. Company register: HRB223990B, Amtsgericht Charlottenburg. The Asystole legal notice provides operator details.

What is saved and why

Asystole Play saves your pseudonymous player identifier, chosen display name, account username if you register, optional role, training stage, specialty, country, biography, profile photo, verified institution membership, profile visibility, question answers, round history, review schedule, badges, challenge records, ratings, question reports, and bug reports. Older answers may include confidence ratings; new rounds no longer ask for them. Personal XP, levels and streaks are calculated from your saved activity. These records deliver the game, preserve progress, schedule recall practice, and handle content reports. Basic gameplay events support operation and evaluation of this pilot.

Session and account processing supports the service you request under Article 6(1)(b) of the General Data Protection Regulation (GDPR). Security and essential operational records serve our legitimate interests in protecting and maintaining the service under Article 6(1)(f). Public profile participation is optional and can be switched off at any time.

Please use a nickname if you prefer. Do not enter patient information, health records, or other sensitive personal information in a profile or question report.

Guest sessions and accounts

An essential session cookie keeps you signed in for up to 30 days. A guest profile is associated with that browser session; clearing the cookie may remove your access to it. Register before leaving if you want to preserve access. Registered accounts use a username and password. Passwords and recovery codes are stored as hashes.

Keep the recovery code shown at registration somewhere safe. There is no email recovery in this pilot. Losing both your password and recovery code may prevent you from regaining access.

Institution verification and photos

Connecting an institution is optional and requires access to an email address on its approved domain. When email delivery is available, Resend processes the recipient address and verification message to send the requested link. The link expires after 30 minutes and can be used once. Verification records, email addresses and hashed mailbox claims are stored privately to protect membership and prevent the same mailbox from joining through multiple accounts. Membership expires after one year and may be removed in your profile. Email access does not certify professional credentials or current employment.

Photos are resized and re-encoded on the server with location and image metadata removed. They are accessible only to your signed-in account, included in your data export and removed with your account. You can remove a photo separately. Verification and mailbox records are also removed when you delete your account. The Resend privacy policy explains its processing and retention.

What other players can see

If you enable your public profile, the community board can show your display name, verified institution, and eligible daily scores. Institutional summaries combine the scores of public participants whose membership has been verified. Your profile photo, biography, role, training stage, specialty, country and institutional email are private. These are voluntary participation statistics and are not an assessment of an institution’s quality.

A challenge link shares the creator’s display name, score, and challenge information with anyone who has the link. Share links only where you are comfortable with that disclosure.

Retention and your controls

During this pilot, saved game and account records are kept until you delete them or the service closes. Visit Account to edit your profile, remove your photo or institution membership, switch off your public profile, download your saved data, or delete your account and its associated learning records. Guest players can also export or delete their current session’s records. Deleting an account removes access to its progress. A downloaded copy or information already seen by someone else cannot be recalled.

You can request access, correction, deletion, restriction, or a portable copy of personal data where applicable. You may object to processing based on legitimate interests and withdraw any consent for future processing. Contact konsil@luujuu.com. You may also complain to a data protection supervisory authority, including the Berlin Commissioner for Data Protection and Freedom of Information.

Bug reports and device preferences

Bug reports save your note, a receipt identifier, a screen label and, when verified, the associated round or question. They are visible only in the owner dashboard. Signed-in reports are associated with your account and are included in its export and deletion. Signed-out reports have no account association; keep the receipt if you need to ask us to locate or delete one. Avoid passwords, recovery codes and patient information in any report.

Your preferred colleague, quiet dialogue setting and sound preferences are saved in this browser. Optional game sound effects are produced locally in your browser. When natural narration is enabled and you request it, the server sends the public question text, displayed options and character introduction to ElevenLabs to generate speech. It sends no player details, submitted answers or private profile text. Generated audio is cached privately and reused across players. The game does not request microphone access or record speech. The ElevenLabs privacy policy describes its processing.

Service infrastructure

Vercel delivers this website and Supabase stores game records in a European database region. Requests may include technical connection information, such as an IP address, that these providers process to deliver and protect the service. Provider operational logs and backups follow their applicable retention policies; deleting in-game records does not immediately erase every provider backup.

Provider processing may involve locations outside the European Economic Area. Applicable contractual safeguards govern such processing. You can read the Vercel privacy policy and Supabase privacy policy. This pilot has no advertising network, advertising cookies, or third-party browser analytics enabled.

Educational content

The questions are generated and checked using AI, without clinician review. They are for education only. Feedback reports help identify issues but are not a channel for clinical advice.