Privacy Policy

Last updated: March 2026

1. About Simspire

Simspire is operated as a teaching tool within the context of university courses at Sungkyunkwan University (SKKU), Seoul, Republic of Korea, by Frank Huettner, Professor at SKKU. It has no commercial purpose. For any privacy-related questions, contact huettner@skku.edu.

2. What data we collect and why

Your data is processed as part of your course participation. We collect only what is necessary to run the simulations and keep track of your progress.

Account data

When you sign in via Google or GitHub, we receive your name, email address, and profile picture from those providers. We store this to identify you within your course.

Learning data

We store your simulation decisions, round results, and case study submissions so that the simulations work correctly and your instructor can review your progress.

Session data

We store a session token (see Cookies below), your IP address, and browser user agent to keep you signed in and to detect unusual access.

LTI / Canvas users

If your institution connects Simspire via Canvas LTI, your institution may send us identifying information such as your name, email address, profile picture, and course role — or only an anonymous token, depending on your institution's configuration. In this case your institution is the data controller and we act as a data processor on their behalf.

3. Cookies

We use a single cookie to keep you signed in. No advertising or analytics cookies are set.

NamePurposeExpiry
better-auth.session_tokenKeeps you signed in90 days

4. Third-party services

Simspire relies on the following infrastructure providers to operate. Your data passes through or is stored by these services:

ServicePurposeLocation
CloudflareHosting, CDN, file storage (R2)Global edge / US
NeonPostgreSQL databaseSingapore (AWS ap-southeast-1)
Google OAuthSign-in (if you choose Google)US / Google infrastructure
GitHub OAuthSign-in (if you choose GitHub)US / GitHub infrastructure
ResendTransactional email (invitations)US
SentryServer-side error monitoringUS

5. Legal basis

We process your data on the basis of course participation — your enrolment in a course that uses Simspire — and legitimate interests for server-side error monitoring needed to keep the service running. We do not process data for advertising or profiling.

6. Data retention

Your account and learning data are retained while you have an active membership in any course and generally for up to two years thereafter. Session tokens expire after 90 days of inactivity.

7. Your rights

Under the Personal Information Protection Act (PDPA, Korea) you have the right to access, correct, or delete your personal data, and to object to or restrict processing. To exercise these rights, email huettner@skku.edu. We will endeavour to respond promptly.

8. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision.