Privacy & safety

Your save stays on your device

This browser saves your game progress, quiz answers and review history, simulated wallet, character choice, case progress and settings. We use this to remember your game and schedule reviews.

The game has no accounts, cloud saves or player database. We do not use Supabase. Local saves stay until you clear this site’s data. RESET PROGRESS clears the main run, review progress and wallet; settings and some other local choices stay.

A summary of some progress is sent with an online Skipper question, as explained below. We do not send your whole save.

Your date of birth

Before play, we check the date you enter on your device to see whether you are at least 15. We then discard it. It is never sent to us, the AI provider or PostHog.

Only the result (passed, or under 15) is kept, in this tab’s session storage, so the check cannot simply be retried with a different year. It ends with the browser session. A browser may restore session data when it restores closed tabs. This is a self-declared check, not an identity check.

Talking to Skipper

For an online answer, your latest message, up to 11 earlier chat turns and a small game summary go through our Vercel-hosted relay to the AI provider. The summary includes lessons read, your least confident topic, questions due for review and where you are in the game. This is an in-game location, not your real location.

Online Skipper uses Anthropic’s official Claude API. Both steps use Claude Haiku 5.5. First it runs a check that tries to hide personal details. Then it writes the answer. Anthropic is based in the United States. Messages may be processed outside the UK, including in the US. Our use of the API is covered by Anthropic’s data processing addendum (opens in a new tab), which includes the UK’s international data transfer addendum.

Anthropic’s published API retention policy (opens in a new tab) explains how long it keeps data. Our Anthropic account uses the standard setting: messages and replies are kept for 30 days and may be accessed by Anthropic for safety and security purposes. Flagged messages and replies may be kept for up to two years, and safety scores for up to seven years. Legal requirements can also change this. Sending feedback on replies to Anthropic is switched off for our account. We do not have zero data retention.

We do not write chat messages to a database or deliberately log their text. The thread is held in memory on your device and clears when you reload or leave the game. This does not delete copies already processed or retained by the provider.

We try to block personal details before sending and hide details with tags. These checks can miss things. The redaction model itself receives the text after the first checks. Never share your name, school, address, date of birth, passwords, or real bank and card details.

If the relay cannot answer, Skipper may use scripted replies from the game’s lessons. A failed request may already have reached the relay or provider.

Optional analytics

Analytics is off until you choose ALLOW ANALYTICS. Choosing NO ANALYTICS does not affect play.

If allowed, we send PostHog page views, play clicks, game starts, lessons completed, and battles won or lost. Events include the time, page path, game event details and a random ID for this tab. We do not send page query strings, your DOB, your whole save or Skipper messages. PostHog also receives your IP address through the connection.

We use PostHog’s EU capture endpoint. This code does not enable session recordings, advertising, cross-visit IDs or person profiles. A random ID still means the events are linked; we do not call them fully anonymous.

Your choice and the ID use session storage, not cookies. They last for the browser session and may be restored with a tab. Declining removes the local analytics ID. Do Not Track also prevents events.

PostHog keeps events for a period set by its pricing plan: one year on the free plan and seven years on paid plans. We cannot set a shorter period. PostHog’s EU Cloud is hosted in Frankfurt, Germany. PostHog says some of its subprocessors and support staff are outside the EU, so some access may happen from other countries, including the US.

You can stop future events at any time. To ask about events already sent, email us. Do not send private details to identify a game session.

Hosting and technical logs

Vercel delivers both websites and runs Moneywell’s Skipper relay. Loading a page or using the relay exposes connection data such as an IP address and request information to the hosting service.

The relay uses your IP address and recent request times to limit repeated requests. This record lives in the running function’s memory, not a player database. Each address is dropped about a minute after its last request.

Our relay logs error types, status codes, model names and names of blocked patterns. It does not deliberately log chat text. Vercel keeps these runtime logs, with request details such as the browser type and region, for one hour on our current plan. We do not forward logs to any other service. Vercel may also keep separate technical and security records. Vercel says its main processing facilities are in the United States.

Use Skipper safely

Skipper is an AI. It can make mistakes. It explains money concepts and game navigation. It must not recommend products or tell you what to do with your own money.

For a “what should I do with my money?” question, speak to a trusted adult or visit MoneyHelper (opens in a new tab). Coins, balances and transactions in the game are simulated, not real money.

If a reply is unsafe or wrong, stop the chat and report a concern to hello@vasmio.com. Describe the problem without sharing private details. The game does not automatically send us the chat.

This inbox and Skipper are not emergency services or a live safeguarding team. If someone is in immediate danger, call 999. You can also speak to an adult you trust or Childline (opens in a new tab).

The game has no player-to-player chat, uploads, real-money purchases or personalised adverts. Links to other organisations open separately; their own privacy rules apply.

Your choices and rights

You can play without analytics, stop using online chat, and clear your game data using your browser’s controls. We cannot recover a save after you clear it.

Under UK data protection law, you can ask about your data and request access, correction or deletion. Depending on the situation, you can also object, ask us to limit use, or request a portable copy. Email hello@vasmio.com. We may need enough information to check a request safely. Without an account we may not be able to link a technical record to you.

If you email us, your address and what you write reach our email service so we can reply. Emails to hello@vasmio.com are forwarded by Porkbun, our domain provider, to a Google Gmail inbox, so both handle them. We keep emails for 12 months, then delete them. A safety report is kept longer only while the problem it describes is still being dealt with. Avoid including private details. If you are unhappy with our response, you can complain to the ICO (opens in a new tab).

We use data to run the game, answer requested online questions, secure the service and, if you agree, understand use through analytics. Consent is the legal basis for optional analytics. For online Skipper answers, hosting and security, and replying to emails, we rely on legitimate interests: giving you the answer you asked for, keeping the service safe, and replying to you. We have weighed each of these against young players’ interests in our impact assessment, and given theirs extra weight.

The ICO Children’s Code

We use the ICO Children’s Code (opens in a new tab) as our design standard for protecting young players. The privacy defaults and Skipper’s child-safety rules apply to everyone who plays.

We have completed a data protection impact assessment and reviewed the game against all 15 standards of the Code. Our chief executive approved it on 8 October 2026. We review it at least once a year and whenever we change how the game uses data.

Before a wider release to young players we are finishing three things: our registration with the ICO, an upgraded data processing agreement with our hosting provider, and testing this page and the game with young people and parents.