Privacy and Cookies

Last updated: 27 April 2026

This notice explains how personal data, gameplay data, and cookies are handled when you use Reserva, a central bank simulation game created for academic research.

1. Who we are

Reserva is operated by the research team responsible for the study. For UK data protection purposes, the organisation or researcher named in your participant information sheet will normally be the data controller for personal data collected through Reserva.

2. Data we collect

We may collect information you provide when creating or using an account, such as your name, email address, login details, eligibility information, and any other details requested as part of the research.

We also collect gameplay and research data generated through your participation in Reserva. This may include the games you join, the outcomes of those games, the moves and decisions you make, timing information, scores, simulation results, and technical information about your use of the service.

3. How we use your data

We use your data to operate Reserva, manage accounts, run the simulation, support research participation, protect the security and integrity of the game, troubleshoot problems, and comply with legal or ethical obligations.

We use gameplay and research data for academic research. This may include analysis, teaching, conference presentations, working papers, journal articles, books, reports, and other academic publications. Published research may describe aggregate trends, statistical results, gameplay patterns, and examples from the simulation.

4. Lawful basis

Where UK data protection law applies, our lawful basis for processing your personal data may include your consent, performance of a task in the public interest, legitimate interests, contractual necessity, or compliance with a legal obligation. The specific lawful basis should be explained in the participant information sheet or consent materials for the study.

5. Research outputs and identification

We will not intentionally publish your password or private account credentials. Where research outputs include participant-level examples, we will take reasonable steps to avoid identifying you directly unless you have separately agreed otherwise. Some gameplay data may still be unique or difficult to fully anonymise, especially in small research groups.

6. Cookies and similar technologies

Reserva may use essential cookies or similar technologies to keep you signed in, protect your session, remember security tokens, and make the service work correctly. These cookies are necessary for the operation of the game and cannot usually be switched off within the service.

We do not intend to use non-essential advertising cookies. If analytics, preference, or other optional cookies are added later, this notice should be updated and, where required, you should be given a choice before those cookies are set.

7. Sharing your data

We may share data with members of the research team, academic collaborators, institutions involved in the study, service providers who host or support Reserva, ethics or governance bodies, and regulators where required. We will not sell your personal data.

8. International transfers

If personal data is transferred outside the United Kingdom, we will take steps required by applicable data protection law to protect it, such as using approved transfer safeguards where needed.

9. How long we keep data

We will keep personal data and research data for as long as needed for the research, academic verification, legal compliance, security, and record-keeping. The expected retention period should be explained in the participant information sheet or study materials.

10. Your rights

Under UK data protection law, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data. You may also have the right to withdraw consent where processing is based on consent. These rights may be limited in some circumstances, including where data is being used for academic research and appropriate safeguards are in place.

11. Security

We use reasonable technical and organisational measures to protect personal data. No online service can be guaranteed to be completely secure, so you should keep your login details confidential and tell us if you believe your account has been compromised.

12. Contact and complaints

If you have questions about this notice, your data, or the research, please contact the research team using the contact details provided with your participant information or account materials. You may also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.