Last updated 4 October 2026
StartupGame.me (startupgame.me) is a free learning game made by Potential.org (“we”, “us”). We decide how the information described here is used and are responsible for it. You can contact us using the form at the bottom of this page.
Your choices, worksheets and progress are stored in your browser for that tab only (browser “session storage”). They are not sent to our servers unless you later choose to save them to an account. Your display settings (such as text size) are stored in your browser too.
If you save your progress, we keep: your email address; a securely hashed version of your password (we can't read your password); your time zone (to count daily streaks correctly); the game work you create (worksheets, choices, customer notes, real-world step reflections, optional evidence notes and links); stars, streak days and settings; and a record that you confirmed you are 16 or older. We use this only to run your account and your game. We don't send marketing emails.
When you type a question to a character, to Lumi, or ask the coach for help, we send that message, the recent conversation, the mission you're on, your draft for that mission and basic game details (such as your passion and business name) to our AI provider so it can write a reply. We don't store the conversation ourselves. For each request we keep a technical log (time, model, response time, number of words processed, cost and whether it worked) but not what you or the AI wrote. AI replies are limited per person per day.
If you share a question (for example “Which name would you pick?”), we store the two options you wrote and a small preview: your sign name, colour, emoji, passion and who the business is for. We block links, email addresses and phone numbers in shared questions. Only someone holding the secret key in your game can see the results.
People who answer don't sign up. We store their choice and optional reason, and a scrambled (hashed) version of a random cookie so the same browser can't answer twice. We can't tell who answered.
If you send feedback or a request, we keep what you write (and your account, if you're signed in) so we can act on it and reply.
To understand whether the game helps, we count events such as “a customer visit was solved first time”, “a real-world step was recorded” or “a browser came back on a later day”. Each count is only an event name, a date and a device type (phone, tablet or computer). Whether you've visited before is remembered only in your own browser.
Like any website, our hosting provider processes your IP address and basic request details to deliver pages and protect the service. We use IP addresses briefly, in scrambled form and in memory only, to limit abuse (for example, too many requests at once). We don't use your IP address to identify or profile you.
We use only what's needed for the game to work. No advertising or analytics cookies, and no third-party trackers.
You can clear these at any time in your browser settings. Clearing session storage ends a guest game.
Where data-protection laws such as the GDPR apply, we rely on: providing the service you asked for (running your account and game, answering your AI requests, showing your shared question); legitimate interests (keeping the service secure, preventing abuse, and improving the game using anonymous counts); and legal obligations where they apply.
We never sell or rent personal information, and we don't share it for advertising. We use a small number of service providers who process data on our behalf, under contracts that require them to protect it:
We may also disclose information if the law requires it, or to protect the safety of people or the service.
Our providers may process data in the United States and other countries. Where data leaves the UK, EU or another region with transfer rules, we rely on recognised safeguards such as the European Commission's standard contractual clauses or equivalent protections offered by our providers.
Depending on where you live, you may have the right to access, correct, download or delete your information, to object to or restrict how we use it, and to complain to your data-protection authority. You can do most of this yourself:
For anything else, use the form below. We'll respond within one month. We don't make decisions about you based solely on automated processing that have legal or similarly significant effects.
Accounts are for people aged 16 and over. Anyone can play without an account, and we don't ask guests for personal information. If you believe someone under 16 has created an account, please tell us and we'll delete it.
StartupGame.me never needs your real customers' names, contact details, payment card numbers or passwords for other services. Please don't type them into the game or into chats. The game never takes payments.
Connections are encrypted (HTTPS). Passwords are stored as one-way hashes. Sign-in tokens and voter cookies are stored only in hashed form. Access to the database is limited, and our admin console shows aggregate numbers and the messages people send us, not people's games. No system is perfectly secure, but we work to protect your information and will act promptly if something goes wrong.
If we make important changes, we'll update the date at the top and, where appropriate, tell account holders in the game.
Questions, or a request about your information? Send it here. If you're signed in, we'll link it to your account; otherwise, add an email address so we can reply.