Privacy Notice

Spooky English Escape Room is operated by Perica Sardjoski, trading as Pegasus English Language School ("Pegasus ELS", "we", "us"). Perica Sardjoski is a sole trader based in North Macedonia and is the data controller for the personal data described in this notice. You can reach us via www.pegasusels.com.

We collect the following categories of personal data:

• Teacher account data — name, email address, and login credentials (or Google sign-in identity) when you create a teacher account;
• Content you create — escape rooms, puzzles, and illustrations you upload;
• Support messages — if you contact us;
• Usage and technical data — device identifiers, IP address, and basic telemetry used to keep the service secure and improve it.
• Analytics data (only with your consent) — if you choose “Accept analytics”, we use Google Analytics 4 to understand how visitors interact with selected public pages and teacher-facing features of our website. This may include pages visited, approximate geographic location, device and browser characteristics, referral sources, and limited interaction events such as viewing a free escape-room page, clicking “Play for Free”, or launching a teacher-guided game. We configure these events not to include names, email addresses, account identifiers, game codes, team or student names, puzzle answers or game content. Student joining and gameplay pages, teacher game-control screens and projector screens are excluded from Google Analytics.

Students do not create accounts. Students join games anonymously with a display name and a game code. We store only their chosen display name, team assignment, and game progress for the duration of the game session — no email, no login, no tracking.

• To create and manage your teacher account and provide the service (performance of a contract);
• To keep the service secure and prevent fraud (legitimate interests);
• To improve the product (legitimate interests);
• To provide customer support (legitimate interests);
• To meet legal obligations, such as tax and accounting records (legal obligation).

With your consent, we use analytics data to understand interest in our educational resources, evaluate website performance and improve the experience for teachers visiting our platform. You may withdraw your consent at any time.

• Service providers that host and operate the platform (cloud hosting, authentication, and analytics providers), acting on our instructions;
• Paddle, our Merchant of Record, for the sale of subscriptions, payment processing, tax compliance, and invoicing. Paddle processes payment data under its own privacy terms — we never see or store your card details;
• Professional advisers (legal, accounting) where needed;
• Authorities where required by law.

Google Analytics 4 is provided by Google, including Google Ireland Limited and Google LLC as applicable. Google processes analytics data under the relevant contractual arrangements and data-processing terms. We do not enable Google Signals, Google advertising personalisation or remarketing features for this implementation.

Some of our service providers process data outside the UK/EEA. Where this happens, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

Analytics information may be processed outside North Macedonia, including in the United States. Where applicable, transfers are governed by relevant data-protection arrangements, including the EU–US Data Privacy Framework and contractual safeguards. Further information is available in Google's privacy and international data-transfer documentation.

We keep teacher account data while your account is active. Game session data (student display names, teams, progress) is kept only as long as needed for the session and teacher reporting, then deleted or anonymised. When data is no longer needed, we delete or anonymise it.

Our Google Analytics property is configured to retain user-level and event-level data for two months, subject to Google's applicable retention rules. Aggregated reporting information may remain available for longer. Analytics cookies normally expire after up to two years, subject to browser limitations and earlier removal if you withdraw consent.

Depending on your location, you may have the right to access, rectify, or erase your personal data, restrict or object to processing, request data portability, and withdraw consent. You may also complain to your local data protection authority. We respond to requests within one month. Contact us via www.pegasusels.com to exercise any of these rights.

We use appropriate technical and organisational measures, including encryption in transit and access controls, to protect personal data.

We use essential cookies and storage technologies for functions such as teacher authentication, remembering consent preferences and operating the platform. These remain available regardless of your analytics choice.

With your consent, we also use Google Analytics 4 cookies:

Google Analytics is not loaded before you explicitly accept analytics cookies.

If you select “Reject”, optional analytics remains disabled and the website continues to function.

You can change or withdraw your choice at any time using the “Cookie settings” control.

Withdrawing consent stops subsequent Google Analytics collection from your browser and removes the analytics cookies controlled by our website. It does not automatically erase data previously collected by Google.

We do not use Google Analytics for advertising personalisation or remarketing.

We may update this notice from time to time. The "last updated" date above shows the latest version.

Our analytics implementation is intended to evaluate interest in our public educational resources and limited teacher-facing website interactions.

Google Analytics is not loaded on student joining pages, student gameplay screens, teacher game-control screens or projector views.

We do not intentionally transmit student names, game participation records, answers or other identifiable student information to Google Analytics.

Visitors, including students who reach the public homepage, can use the student joining functionality without accepting analytics cookies.