Privacy
What this site knows about you
The short version: nothing unless you say yes, give us your email address, or write to us. There is no advertising here and no tracker from any other company.
Last updated 21 October 2026.
Who we are
This website is run by Covert Learning LLC. For anything on this page, message us through our contact form.
Children
This website is written for parents, carers and teachers. It is not for children, we do not knowingly collect anything from a child, and the newsletter and contact forms both say they are for grown-ups. If you think a child has sent us something, tell us and we will delete it.
The games are a separate matter, and each game's page says what that game does. Learn Dungeon has no accounts for children and sends us nothing about how a child plays.
If you join the newsletter
We keep:
- your email address;
- when you signed up, and which form on the site you used;
- the exact wording you agreed to, which today reads: “For grown-ups. Occasional email from Covert Learning about our games, and nothing else. Unsubscribe from any email.”
- the IP address and browser description the request came from, as a record that the request was real.
You are not on the list until you press the button in the confirmation email. Until then we send that one email and nothing else.
Every email has an unsubscribe link, and it keeps working however old the email is. After you unsubscribe we keep your address marked as unsubscribed, so that we do not email you again by mistake. Ask us and we will delete it entirely.
If you write to us
The contact form stores your name, email address, message, and the IP address and browser description it was sent from. It is also emailed to us so that we can reply. We keep messages for as long as the conversation needs, and delete them on request.
If you agree to be counted
The first time you visit, a banner asks whether we may count your visit. If you say no, or simply ignore it, nothing on this list happens. If your browser sends a Global Privacy Control or Do Not Track signal we treat that as a no and do not ask.
If you say yes, we record on our own server:
- a random identifier for your browser, stored in a cookie, so that two pages read by the same browser count as one visitor;
- which pages you open, and which page you came from;
- on your first visit, the link that brought you here, plus your IP address and browser description;
- what you click (which button or link, and where on the page) and how far down each page you scroll.
Unless you also tick the box described under Recording a visit, we do not record mouse movement. We never record anything you type, or the text of anything that is not a link or a button. If you later join the newsletter, the link that first brought you here is noted against your subscription, so that we can tell which mentions of us are worth our time.
How long it is kept
| What | Kept for |
|---|---|
| Pages opened | 24 months |
| Clicks and scroll depth | 12 months |
| Recordings and pointer movement, if you ticked the second box | 365 days |
| IP address and browser description on a first visit | 30 days, then blanked |
| The link that first brought you here | 24 months, or 60 months if you joined the newsletter |
| Monthly totals, with no identifier in them | Indefinitely |
Recording a visit
Under the same banner there is a second box: also record how I move around the pages. It starts unticked, it is only offered together with a yes to being counted, and if you leave it unticked nothing in this section happens.
If you tick it, we also record, on our own server:
- a recording of the pages as you saw them: where the pointer went, what you clicked, how you scrolled, and how the page changed, so that we can play the visit back and see where the site is confusing;
- where the pointer moves on each page, as positions on the page, for a map of where attention goes.
It never records what you type: every form field is recorded as blank asterisks, and any text inside a form (such as our reply after you send a message) is hidden. It records nothing from other websites or other tabs. The recording is made by a program called rrweb that is served from this site, so it too sends nothing to anybody else. Only the people who run this site can watch a recording, and each one is deleted 365 days after the visit.
A Global Privacy Control or Do Not Track signal turns this off as well. To stop, use Cookie choice at the bottom of any page.
One thing counted without asking
When anybody follows a link from this site to one of our games' own websites, we add one to a count of how often that happens. Unless you agreed to be counted, that record holds no identifier at all: it says that a click happened, and when, and nothing about who. Those records are kept for 24 months.
Cookies
| Cookie | What it is for | Lasts |
|---|---|---|
covert-learning-session |
Keeps a form working between pages. Necessary; set for everyone. | 120 minutes |
XSRF-TOKEN |
Stops another website submitting a form here in your name. Necessary; set for everyone. | 120 minutes |
cl_consent |
Remembers your answer to the banner, so that we do not ask again. | 365 days |
cl_recording |
Remembers your answer to the second box, about recording a visit. | 365 days |
cl_visitor |
The random browser identifier. Only set if you agreed to be counted. | 365 days |
You can change your answer at any time with the Cookie choice link at the bottom of every page. There are no advertising cookies and no cookies from other companies.
If your browser sends a Global Privacy Control or Do Not Track signal (some, like Brave, do this by default), there is nothing to choose: we take it as a no, never ask, and the Cookie choice link brings you here instead.
Who else sees it
We do not sell or rent anything on this page, and we do not share it for advertising. Two kinds of company necessarily handle some of it on our behalf: the company that hosts this website, and the company that delivers our email (Postmark) . Neither may use it for anything else.
The fonts and drawings on this site are served from this site. Nothing is loaded from another company's servers, so no third party learns that you were here.
Like every web server, ours keeps a technical log of requests, including IP addresses, to keep the site running and to spot abuse. Those logs are kept for up to 90 days.
Your choices
You can ask to see what we hold about you, have it corrected, or have it deleted. Message us through our contact form, giving the email address concerned, and we will do it. Depending on where you live you may also have the right to complain to a data protection authority.
Changes
If what this site collects changes, this page changes first, and the date at the top changes with it.