Your information
Privacy information
Updated 24 September 2026
Interim information - use fictional examples only
This page explains the current technical handling of information. It is not yet the complete privacy notice for real-client use. Please do not enter identifying client details, health information or offence histories in demonstration sessions.
Who to contact
Diverse Therapy Games operates under Highland Gaming Minis (HGM). Business details are available on request. Contact info@diversetherapygames.co.uk with privacy questions or requests. The full controller information and practitioner responsibilities for the privacy notice are still being reviewed.
Sign-in and access requests
Cloudflare Access checks your email using a sign-in code. The application separately checks whether access is approved. We hold information you submit in an access request, membership decisions and decision history so the owners can administer access. Verifying an email does not automatically approve membership.
Shared activities
A private room is restricted to its creator and named invitee. Shared activity work is temporarily stored using Cloudflare Durable Objects. The room expires 24 hours after creation; its stored room and activity state is then scheduled for deletion. This is not a retention period for all website records.
Video, microphone and text chat
Camera and microphone start off until you choose them. Calls use WebRTC, directly where possible, with a Cloudflare TURN relay when needed. The application does not record calls or store a chat transcript. Messages are relayed to the participants and appear in their open pages. Another participant can still make their own copy. Service providers can process connection and security metadata.
PDF downloads
Activity downloads are created on your device. Leaving a session or the room expiring does not delete your downloaded copies. Keep these files somewhere appropriate and private.
Cookies, preferences and voices
Sign-in services use cookies needed for access and security. Comfort and voice choices are remembered in your browser when local storage is available. Browser speech may use a device or voice-provider service. Do not send confidential information to a voice service without checking its arrangements.
Hosting and other providers
Cloudflare provides website hosting, access checks, temporary room storage and call-relay services. Support enquiries are handled by email. We are reviewing the applicable provider arrangements, processing locations and international transfers; we do not claim that all processing is UK-only.
What is still being completed
The full notice needs confirmed legal controller details, purposes and lawful bases, retention and deletion arrangements for access records, support emails, service logs and backups, and applicable provider and transfer safeguards. Those details have not yet been finalised. Do not use this demonstration service for identifiable client information while this review remains open.
Questions, copies, corrections and complaints
Email us to ask about information we hold about you, or to request a copy, correction or deletion. Depending on the circumstances, you may also have rights to restrict or object to processing and to data portability. We may need to verify your identity. Do not email identity documents unless we have agreed a safe way to provide them. You can also raise a data protection complaint with the UK Information Commissioner’s Office (ICO).