Privacy policy

Last updated: 12-11-2026

Asperity offers interactive escape rooms and digital resilience training, for schools and businesses. This statement explains what data we collect via asperity.nl, why, and what your rights are.

1. Website visitors

When you visit this website (for example the homepage, the offering, or a free demo), we record per visit:

• Date and time
• The page visited and, where applicable, the referring page (referrer)
• Technical browser information (user agent)
• A non-reversible hash of your IP address — never the IP address itself

We do not use cookies for these general visitor statistics. This is done solely to gain insight into website usage and to help recognise abuse. In addition, only with your consent, we use Google Analytics — see section 4.

2. Schools and businesses with an account

During registration we ask for a name, contact person, email address and address details. We use this to manage your account, link licenses and send invoices. Passwords are stored encrypted (never readable, not even for us).

For logged-in users we additionally record which pages in the portal were visited and when, linked to the account. We use this for security and customer support. Google Analytics (see section 4) never runs inside the logged-in portal — only on the public website outside it.

3. Students and session participants

Students do not need an account to take part in an escape room or training — only a session code (or QR code) from their teacher. During play, a self-chosen team name and score is recorded, linked to that session. This is not personal data traceable to an individual student, unless a team chooses to use a recognisable name itself (which is neither necessary nor recommended).

4. Cookies

We use a functional session cookie, needed to stay logged in and to let forms work securely. This cookie contains no tracking information and is not shared with third parties.

In addition, we use Google Analytics and Snitcher to see how visitors use the website — but only if you give consent via the cookie banner at the bottom of the page. Without your consent, nothing is collected. Your choice is remembered locally in your browser (not in a cookie, but via localStorage) and can be changed at any time via the "Cookie settings" link in the bottom-left corner of the page.

5. Sharing with third parties

We do not sell or share data with third parties for marketing purposes. A few exceptions you should know about:

• Hosting: this website runs at TransIP (a Dutch hosting provider); they process data solely as a hosting provider.
• Fonts: part of the website loads fonts directly from Google Fonts. In doing so, your IP address is sent by your browser to Google's servers. We are working to further limit this.
• Google Analytics: only if you give consent (see section 4). Google then processes anonymised usage statistics; we never send names, email addresses or other directly identifiable data.
• Snitcher: only if you give consent (see section 4). Snitcher resolves a business visitor's IP address to the company that IP address belongs to (based on public IP registration data), so we can see which companies visit our website. This does not identify individual people.
• Google login at Hackdoku: only if you choose to log in at Hackdoku (see section 8). Google then verifies your sign-in; we only receive and keep an anonymous id.

6. Retention period

We do not retain data longer than necessary for the purpose for which it was collected: for as long as a school or company account is active, or until a deletion request has been processed. Visitor data is retained for a limited period for security purposes and insight into website usage.

If you request a one-time reminder, we keep your email address until that email has been sent and erase it afterwards. Unconfirmed requests are deleted after 14 days. You can cancel through the link in the confirmation email.

7. Your rights

You have the right to access, correct or delete your data, and the right to object to its processing. Please contact us via info@asperity.nl. If we cannot resolve this together, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. Hackdoku

Hackdoku (asperity.nl/hackdoku) is a public puzzle game about real hacks. You can play without an account. Per game we keep the puzzle, your time, which attempt it is and the number of hints and mistakes, to check your solution. We delete this after 30 days. To prevent abuse we also keep a code of your IP address that changes every day, never the IP address itself. Your progress is stored in your own browser. Visits and games started and solved count towards the visitor statistics in section 1.

A place on the highscore list is voluntary: you choose a nickname that everyone can see. Do not use your real name. Scores without an account are deleted after 12 months. Logging in with Google is not required and is intended for people aged 16 and up. We then keep only an anonymous id from Google, your best times and your nickname, no name, email address or photo. You can delete this yourself under Account. You can also choose to sign up for email about new cases and now and then something about our awareness training (16+, with a confirmation email). We keep your address until you unsubscribe through the link in every email; unconfirmed addresses are deleted after 30 days. More on the page Privacy at Hackdoku.

9. Changes

We may update this statement, for example when new functionality is added. The date at the top of this page indicates when this last happened.

10. Contact

Questions about this statement? Email info@asperity.nl.