Useful signals. No tracking identity.

Controller and contact.

Civic Simulations, the independent publisher of National Triage Service, is the data controller for the personal information described in this notice.

To ask a privacy question or exercise a data-protection right, use the feedback form and choose “Privacy or data request”. You may provide an email address if you would like a reply. Do not include identity documents, medical details or other sensitive information in the initial message; additional information will only be requested if it is genuinely needed.

What is measured.

The early-access beta needs enough evidence to tell whether people can find the game, start a tenure and use it without crashes or slow pages.

The site records page views, clicks on links that open the game, new or resumed tenures, views of term and final reports, browser performance measurements such as Core Web Vitals, and software errors. Game events use only coarse properties such as mode, difficulty and weeks served.

Heatmaps are enabled. They record pointer or tap positions, mouse movement and scroll depth together with the page path and viewport size. They are used to see aggregate patterns such as whether controls are found or a page is abandoned. They do not record text entered into a field.

Page URLs and referring URLs have query strings and fragments removed before they are sent. Campaign parameters are not retained.

Information you choose to send.

The “Follow the journey” form collects your email address so occasional project updates can be sent. The feedback form collects the report you write, the feedback category, any browser or device details you provide and, if you choose to add it, your email address for a reply.

These forms are processed and stored by Netlify. Please do not submit medical information, patient information, passwords, financial details or other sensitive personal information.

What is not collected.

PostHog analytics does not receive your name, email address, account identity, save files, exact game state, exact policy or budget values, typed text or console logs. Session recording is disabled. Heatmaps can record privacy-limited interaction coordinates on page controls, but not the underlying saved choice or budget value. PostHog does not write analytics cookies, local storage or session storage.

When you select a same-tab link that opens the game, the site briefly places the source page, link position and timestamp in session storage so that click is not lost during navigation. The game removes that handoff as soon as it opens; stale handoffs are ignored after ten minutes, and the browser clears session storage when the tab closes. It contains no account or analytics identifier.

Browser storage belongs to the game, not analytics.

National Triage Service stores game saves and display settings locally in your browser so you can continue later. Those files stay on this device unless you explicitly download a backup yourself. There is no account or cloud save.

Clearing this site’s browser data removes local saves and settings. It does not remove downloaded backup files.

Why this information is used.

Analytics, heatmaps and software diagnostics: the lawful basis is legitimate interests. The interest is understanding whether the beta is discoverable, usable, reliable and fast, using limited cookieless data. This use is kept separate from advertising and person profiling.

Early-access updates: the lawful basis is consent. You can withdraw consent at any time by using the unsubscribe link in an update or contacting the controller through the feedback form.

Feedback and replies: the lawful basis is legitimate interests in investigating beta problems, improving the game and replying when you ask for a response.

How long information is kept.

• PostHog analytics events, including heatmap data and software errors, are currently configured for retention for up to 84 months.
• Early-access email addresses are kept until you unsubscribe, the list is closed or consent is otherwise withdrawn, then removed from the working list within 30 days.
• Feedback submissions are kept for up to 12 months, unless they need to be kept longer to investigate an unresolved problem or meet a legal obligation.

Who processes information.

Cookieless analytics events are processed by PostHog in its EU Cloud. IP anonymisation is enabled. PostHog groups events with a server-side, privacy-preserving hash; no analytics identifier is written to your browser.

Website hosting and form submissions are processed by Netlify. Netlify may process information outside the UK; its Data Processing Agreement provides the applicable transfer safeguards. Information is not sold and is not shared for advertising.

Your data-protection rights.

Depending on the information and lawful basis, you may have rights to access, correct, erase or restrict personal information, object to its use, and receive information you provided in a portable format. Where processing relies on consent, you can withdraw it at any time. These rights are not always absolute.

The site does not use personal information to make solely automated decisions with legal or similarly significant effects.

If you are unhappy with how your information is handled, first contact the controller so the concern can be investigated. You also have the right to complain to the Information Commissioner’s Office; its helpline is 0303 123 1113.

This notice will be updated if the measurement or form design changes. Last updated 18 July 2026.