Privacy Policy

Belonging Games is operated by MH Activity Inc., 357 Bay St., Toronto, ON M5H 2T7, Canada. Belonging Games is an Enrilo product. For any privacy question, contact us at Hello@BelongingGames.com.

Belonging Games is used by adult staff. Students do not create accounts, sign in, or use the service directly, and we do not ask for any information about them.

We do not collect student names, email addresses, usernames, attendance, grades, behavior records, health or special education information, photos, videos or any other information about individual students. Our Terms and Conditions ask programs not to send us this kind of information. If we receive it by mistake, we will delete it.

Children may enjoy printed activities and projector slides that their educators run, but those materials do not collect any information.

Educators who open activity files

• Work email address, provided by your site coordinator or program so that we can authorize access.
• An optional display name, if your program gives us one.
• Verification records: when you verify your email, we store a one-time code or link in a protected (hashed) form, its expiry time and the number of attempts.
• Sign-in sessions: a session record linked to your email and site, with its expiry time.
• A download log: which activity file was opened, for which event and site, by which authorized email, when, and whether access was allowed. We use this to deliver files, troubleshoot problems, prevent misuse and confirm that access matches the license.

Site coordinators and program administrators

• Name, work email, organization, role and the sites you manage.
• License, pilot and billing details for your organization, such as dates, invoices and purchase orders.
• Messages you send us, such as staff changes or support questions.

People who book a demo or contact us

• The details you give when booking through Cal.com, such as your name, work email, organization, role, number of sites and anything you write in the booking form.
• The emails you send us and our replies.

Website visitors

• Anyone can browse the website, the calendar and event pages without giving us any information.
• We use Cloudflare Web Analytics to count page views. It does not use cookies or collect information that identifies you.
• Like most websites, our server keeps short-term technical logs (such as IP address, browser type and the page requested) to keep the site secure and working.

We use the information above only to:

• give authorized educators access to the activity files their program has licensed;
• send verification codes, access notices and other service emails;
• set up and support licensed sites, including calendar delivery and staff changes;
• respond to demo requests, questions and support requests;
• manage pilots, licenses, invoices and our business records;
• keep the service secure, prevent misuse and fix problems; and
• understand, in aggregate, how the service is used so we can improve it.

We do not sell personal information, rent it, or use it for advertising.

• Visitors: we don't set tracking or advertising cookies. Our analytics (Cloudflare Web Analytics) are cookie-free.
• Educators: after you verify your email, we set one secure sign-in cookie. If you choose "Remember this browser," it lasts up to 30 days; otherwise it ends when you close your browser. Signing out removes it.
• Admins: Belonging Games staff use a separate sign-in cookie for our internal admin area.

These sign-in cookies are needed for the service to work and are not used to track you across other websites.

We use a small number of trusted companies to run the service. They process information only on our behalf and for these purposes:

• Hosting: our website, database and activity files run on a server we manage, hosted by Microsoft Azure in the United States.
• Postmark: sends our verification and service emails.
• Cal.com: handles demo bookings.
• Cloudflare Web Analytics: counts website visits without cookies.
• Backblaze B2: stores our encrypted nightly backups.

Your information may be stored or processed in Canada, the United States or other countries where these providers operate.

We share information only:

• with the service providers listed above, to run the service;
• with your own organization, about access to its license (for example, which authorized staff emails have verified access), when it asks;
• when required by law, or to protect the rights, safety and security of our users, the public or Belonging Games; and
• as part of a merger, acquisition or sale of our business, in which case this Privacy Policy will continue to protect your information.

• Verification codes and links: they expire within 15 minutes and are deleted within 30 days.
• Sign-in sessions: they end after 30 days at most, and expired sessions are deleted within 30 days.
• Download logs: 24 months, then deleted or anonymized.
• Authorized educator emails: while your organization has an active license or pilot, and 12 months after it ends, unless your organization asks us to delete them sooner.
• Demo and contact details: 24 months after our last contact, unless you become a customer.
• Billing and business records: as long as the law requires.
• Backups: copies age out of our backups within 90 days.

• All connections to belonginggames.com are encrypted (HTTPS).
• Verification codes are stored in a protected (hashed) form, can be used only once, and expire quickly.
• Sign-in cookies are secure and cannot be read by page scripts, and we can end any session at any time.
• Activity files are kept in private storage and are delivered through short-lived links only after we check the educator's access and the site's license.
• Backups are encrypted, and only Belonging Games staff who need access can reach our systems.

No system is perfectly secure. If we learn of a security incident that affects your information, we will notify your organization and act as required by law.

You can ask us to:

• tell you what personal information we hold about you;
• correct information that is wrong;
• delete your information, or stop using it, where the law allows; and
• stop sending you non-essential emails (every marketing email has an unsubscribe link).

If your access was set up by your program, we may also involve your site coordinator or organization in the request. Email Hello@BelongingGames.com and we will respond within 30 days. Depending on where you live, you may also have the right to complain to your local privacy regulator.

The service is not designed for children and we do not knowingly collect personal information from anyone under 18. If you believe a child's information has been sent to us, contact us and we will delete it.

We may update this Privacy Policy as the service changes. We will post the new version on this page with a new date and, for important changes, let licensed organizations know by email.

Questions about this policy or your information? Contact us:

Belonging Games / MH Activity Inc.Hello@BelongingGames.com357 Bay St., Toronto, ON M5H 2T7, Canada