Privacy Policy

Who we are

Sogverse is run by School of Gaming Galactic Oy ("School of Gaming", "we", "us"), a Finnish company. We’re responsible for looking after the personal information you and your child share with us — in legal terms, we’re the "data controller".

Here are our official details:

• School of Gaming Galactic Oy (business ID 3110461-1)
• Isokatu 56, 90100 Oulu, Finland
• Email: help@sog.gg

The information we collect

We try to collect as little as possible — only what we genuinely need to run Sogverse. Here’s what that looks like:

• Your name, email address, and (if you add one) phone number — so we can set up your account and keep in touch about your child’s clubs.
• Your language and currency preferences — so the site shows up the way you expect.
• Your password, which we store only in a scrambled (hashed) form — we can never see it.
• Payment details are handled directly in Stripe. We never see or store your full card number.
• About your child: their first name, their birth month and year (we don’t ask for the full date — only what we actually need), and optionally their gender — so we can place them in the right group and address them properly. We store your family surname on their account too, because your child is part of your account; Gedus and other gamers never see it. Their account itself uses an internal Sogverse address rather than a real email, unless you choose to give them a sign-in with their own email address; we then hold that address and send them their own copy of the emails we send you about their clubs, camps and events.
• Optionally, your child’s username in the games their clubs use — today that’s Minecraft and Roblox — and the account id that game gives them, so we can recognise them in the game and so they can connect to our Minecraft server during sessions.
• Session records our Game Educators write — attendance, session reports, and short notes that help us support your child in the group.
• Basic, anonymous information about how the site is used (see "Cookies, analytics and advertising" below).
• The campaign tag — source, medium and campaign — carried by the link your visit came from. We store it once, when the account is created, so that we and our partners know which outreach actually reaches families.

Children’s privacy comes first

Most of the people using Sogverse are children, so their safety and privacy is our highest priority.

A child can never create their own account. Only a parent or guardian sets up a child’s account, chooses what to share, and gives permission on their behalf. That’s how we meet our responsibilities under data-protection law when it comes to children.

What we hold about a child is set out above under "The information we collect", and we don’t collect anything about a child beyond what we need to run our clubs, camps, and events. We never show children advertising, and we never sell or share their data for marketing. When your child is signed in as a gamer, nothing about their browsing is sent to an advertising platform, even if marketing is switched on for the device. Live sessions are run by our trained Game Educators (we call them Gedus).

If you ever want to see, change, or delete your child’s information, just email help@sog.gg and we’ll take care of it.

How we use your information

We use the information above only to run Sogverse and give your family a good experience — specifically:

• To create and manage your account and your child’s account.
• To place your child in the right club, camp, or event group and connect them with a Game Educator.
• To run the live voice and video sessions.
• To take payments and send receipts, reminders, and important updates about your clubs.
• To answer your questions when you contact us for help.
• To keep Sogverse safe, fix problems, and make it better over time.

Why we’re allowed to use it

Data-protection law (the GDPR) asks us to have a clear reason for using your information. Ours are simple:

• To deliver what you signed up for — the clubs and services you’ve bought from us (our contract with you).
• Because a parent has given permission on their child’s behalf (consent).
• To meet our legal duties, such as keeping accounting records for payments.
• For our legitimate interest in keeping the site secure and working well — always balanced against your privacy.
• For our legitimate interest in understanding which of our outreach efforts reach families — always balanced against your privacy, and you can ask us to stop at any time.
• Your consent, for the analytics and marketing cookies — which you can withdraw at any time from Privacy choices at the bottom of every page.

The companies that help us run Sogverse

Running an online service means relying on a few trusted companies for things like hosting, payments, and email. They only handle your information to do their job for us, under contracts that require them to keep it safe. The main ones are:

• Supabase — securely stores your account, family, and club information.
• Stripe — processes payments. Your card details go straight to Stripe; we never see them.
• Brevo — sends our emails, such as receipts and reminders.
• Daily.co — powers the live voice and video sessions.
• Vercel — hosts the website and provides anonymous usage statistics.
• Meta (WhatsApp) — used to send some messages and reminders to families who prefer WhatsApp.
• Roblox — receives your child’s Roblox account id, so we can confirm the account and show their avatar picture.
• Mojang (Microsoft) — receives your child’s Minecraft username, so we can confirm the account.
• Meta (Facebook and Instagram ads) — learns, through the Meta Pixel, that you visited and whether you created an account, so we can show our ads there. Only if you allow marketing cookies.
• TikTok — learns, through the TikTok Pixel, that you visited and whether you created an account, so we can show our ads on TikTok. Only if you allow marketing cookies.

Cookies, analytics and advertising

A few cookies are simply how the site works: they keep you signed in, remember that you entered your parent PIN, hold your language and timezone, and store the cookie choice you make. These don’t need your consent — without them there is no site to consent to.

Everything else waits for you. The first time you visit we ask, and nothing beyond those necessary cookies runs until you answer. You can change your mind whenever you like from Privacy choices at the bottom of every page: switching something off takes effect straight away, and it doesn’t change anything we already did while it was on.

There are two things to say yes or no to:

• Analytics — Vercel’s, and only if you choose it. It counts visits, measures how quickly pages load, and receives a few anonymous events about how the site is used: how someone reached their My SOG, when someone changes the language. It can’t see who you are, and we never hand it to advertisers.
• Marketing — the Meta Pixel and the TikTok Pixel, and only if you choose them. They learn that you visited School of Gaming and whether you created an account, so Meta and TikTok can show you our ads on their own platforms. Neither pixel loads while your child is signed in as a gamer. If you say yes to marketing and then create an account, we set one short-lived cookie of our own — five minutes, no name, no address, nothing but the word "registration" — whose only job is to tell the pixels on the next page that an account was created. Switching marketing off deletes the cookies the pixels left in your browser, but we can’t delete what Meta and TikTok already hold — you can ask them to, in your own settings there, where Meta calls it "activity off Meta technologies".

Voice and video sessions

Live clubs, camps, and events take place over voice and video, powered by Daily.co. Sessions are run live by our trained Game Educators, and we use it only to deliver the session your child signed up for.

How long we keep your information

We keep your information for as long as you have an account with us. If you close your account, we delete or anonymise your information — except where the law requires us to keep certain records longer, such as Finnish accounting law, which requires payment records to be kept for several years.

Where your information is kept

Some of the companies that help us (listed above) are based outside the European Union, for example in the United States. When your information is sent to them, we make sure it’s protected by the safeguards data-protection law requires — usually the European Commission’s Standard Contractual Clauses.

Your rights — and your child’s

You’re in control of your information. At any time you can ask us to:

• Show you what information we hold about you and your child.
• Correct anything that’s wrong.
• Delete your information (the "right to be forgotten").
• Give you a copy to take elsewhere.
• Stop or limit how we use it.

Keeping your information safe

We protect your information with industry-standard measures: encrypted connections, passwords stored only in scrambled form, and strict limits on who can access data. No system is ever perfectly secure, but we work hard to keep your family’s information safe.

Changes to this policy

We may update this policy from time to time — for example, if we add a new feature. When we make an important change, we’ll update the date at the top and, where it matters, let you know.

Getting in touch and your right to complain

To use any of the rights above, or if you have a question about your privacy or your child’s information, just email help@sog.gg. There’s no charge, we’ll always reply, and email is the best way to reach us.

If you’re ever unhappy with how we’ve handled your information, you have the right to complain to the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto) at tietosuoja.fi(opens in a new tab).