Privacy Policy

Venturovina is a browser-based business simulation game. You describe a business idea, and the game simulates how that business might behave week by week. It is an educational tool, not a real-world financial service.

Venturovina is operated by [LEGAL BUSINESS NAME], based in the United Kingdom. We are the data controller for the personal data described below. Contact: [PRIVACY EMAIL].

If you do not create an account, your progress is kept in your own browser only and is not sent to us. Closing the browser without signing in discards that guest progress.

• Account data — your email address, the username you choose, your account creation date, and a record of when you accepted the Terms. Your password is handled by our authentication provider and is never stored by us in readable form.
• Marketing preference — whether you ticked the optional marketing box (off unless you tick it) and when.
• Game and business content — when you are signed in, we store your saved games: the business ideas, business locations and starting budgets you type in, your decisions and the simulated figures.
• Technical data — our hosting and database providers process your IP address, browser and device information, and server/security logs as a normal part of serving the site. We do not build profiles from this.
• Support correspondence — anything you send us by email.

We do not ask for your real name, address, phone number, date of birth or payment details. Please do not enter confidential or genuinely sensitive information into the game's free-text fields — it is stored as ordinary game content.

• Creating and running your account (email, username, password handling) — performance of a contract with you.
• Saving and restoring your game progress across devices (game and business content) — performance of a contract with you.
• Writing a review of a finished run (a summary of the run is sent to our AI provider) — performance of a contract with you.
• Keeping the service secure and available (technical and log data) — our legitimate interests in preventing abuse and keeping the game working.
• Optional marketing emails — your consent, which you can withdraw at any time.
• Non-essential cookies — your consent (see the Cookie Policy). None are active at present.
• Meeting legal obligations — compliance with law.

• Supabase — our database and authentication provider, provisioned through Lovable Cloud. It stores your account record and your saved games.
• Lovable — our hosting and deployment platform, which serves the site and processes request logs, and operates the AI gateway described below.
• AI model provider (Google Gemini, via the Lovable AI gateway) — when you finish a run while signed in, a summary of it (the business idea and location you typed, your decisions and the simulated figures) is sent to write a review of how you played. Paid plans may use an OpenAI model through the same gateway. Your email, username and account identifier are not sent.
• Google Fonts — the site loads fonts from Google's servers, which means your IP address is visible to Google when a page loads.

We do not sell your personal data and we do not share it with advertisers.

Some of these providers process data outside the UK, including in the United States. Where that happens, transfers are covered by the providers' own safeguards, such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses or an approved adequacy route. You can ask us for more detail about the arrangements that apply.

• Account data and saved games: kept while your account is open, and deleted when you delete your account.
• Guest progress: kept in your browser only, and cleared by you at any time.
• Marketing consent records: kept for as long as your account exists, so we can show when consent was given or withdrawn.
• Provider security and server logs: kept for the short retention period set by that provider, typically a matter of days or weeks.
• Email correspondence: kept while needed to deal with your query and any follow-up.

You can delete your account yourself from your account page. Deleting removes your sign-in record, your profile (username and email) and all saved games linked to it. Backups held by our providers roll off on their own schedule; we do not restore deleted accounts from them. Copies of any emails you sent us may remain in our inbox unless you ask us to remove them.

Under UK GDPR you have the right to:

• Access a copy of your personal data.
• Have inaccurate data corrected.
• Have your data erased.
• Restrict or object to certain processing.
• Data portability for data you gave us.
• Withdraw consent at any time, including marketing consent, without affecting earlier processing.

To exercise any of these, email [PRIVACY EMAIL]. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.

If you are unhappy with how we handle your data, please tell us first at [PRIVACY EMAIL]. You also have the right to complain to the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF — ico.org.uk — telephone 0303 123 1113.

Access to your data is enforced at the database level: every account row and saved game is protected by row-level security rules that only allow the signed-in owner to read or change them. Traffic is served over HTTPS, passwords are hashed by our authentication provider, and privileged service credentials are held only on the server and never sent to your browser.

No online service can promise perfect security. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will report it to the ICO within 72 hours of becoming aware of it and tell affected users directly where the risk is high.

Venturovina is intended for users aged 13 and over. If you believe a younger child has created an account, contact us and we will remove it.

We may update this policy as the product changes. The date at the top always shows the current version, and we will flag significant changes in the app.

Privacy and data requests: [PRIVACY EMAIL]
General enquiries: [CONTACT EMAIL]
[LEGAL BUSINESS NAME], United Kingdom