This notice describes the current public website and the sign-in for customers and IT partners.
Current website
The pages do not provide public account registration, checkout or contact forms. Customer administrators and IT partners can sign in, as described below; players never sign in. We have not added analytics or tracking cookies to these pages. Browser storage and the data sent to ShiftPoint are limited to what's described below. No personal or confidential information is requested through a form. The setup page only fills in an email in your own email app; it doesn't send or store anything itself.
The game demo
The Urgent Wire Escalation runs entirely in your browser. Its scenarios use fictional people, companies and accounts. A trainer can choose to enter their own company name, staff names and policy wording in the optional setup form; nothing else is requested. The demo does not send or store your choices anywhere. If you download a debrief, that text file is created on your device and stays there. Reloading the page clears the game. If you set the demo up with your company's names and rules, those settings are kept only in the page link, after the # sign. Browsers don't send that part of a link to our web host, and we never receive it. Anyone you share the link with will see those settings. The team scoreboard page keeps team names and result codes only while it is open, and sends nothing anywhere.
Sending your result to your manager
In the full version, a company can turn on automatic results. Then, at the end of the game, a player can choose to type their name and press “Send my result to” their manager. Only that name, their result code (which situation they played, their score, the date and which safety habits they showed) and the time it was sent are stored, in a Google Sheet owned by ShiftPoint Crisis Labs’ business Google account. Google may process that data under its own terms. Only that company’s signed-in administrators, its IT partner (if it has one), its manager report link and ShiftPoint can see it. We don’t store email addresses, IP addresses or players’ answers. We delete a company’s results 12 months after its license ends, or sooner if the company asks. A player can ask their manager or us to delete their entry at any time. Sending is optional. Players can give their code to their manager instead.
Customer and partner sign-in
Paying customers' administrators and ShiftPoint's IT partners can sign in to see results and change their company's game settings. To set this up we store, in the same ShiftPoint Google Sheet: each company's name, the work emails of the people allowed to sign in for it, its IT partner's email if it has one, and its game settings (the names, titles, approval limit, callback rule and industry it chooses to put in the game). When you sign in, we email you a 6-digit code using Google's mail service; codes work once, for 15 minutes. Signing in creates a session that lasts 30 days or until you sign out. That session ID and your email are kept in your browser's storage on that device, and in the sheet so we can check it. We don't use passwords, and we don't track what you do after you sign in. Anyone with a company's player link can load that company's game settings, so don't put anything confidential in them. We delete a company's sign-in emails and settings 12 months after its license ends, or sooner if asked.
Partner dashboard
The partner dashboard saves a partner’s name, contact, logo, client list and the results it has loaded in that partner’s own browser on that device. The logo is never uploaded. Loading results reads each client’s results from ShiftPoint’s results sheet, either through the partner’s sign-in or the report links the partner adds.
Manager report
The manager report page saves the names, result codes, company name and practice-summary details you type into it in your own browser’s storage on that device, so the report is still there when you come back. It is never sent to us or anyone else. Use “Clear all” on that page, or clear your browser’s site data, to delete it. Anyone who uses the same browser profile on that device can see it.
Hosting and external links
Cloudflare hosts the site and may process network information, including IP addresses, under Cloudflare’s policies, to deliver pages and protect them from attacks. The pages use fonts and images stored on this website itself, not loaded from other services. Links to external sources take you to services with their own privacy practices.
Seeing, fixing or deleting your information
To see, correct or delete what we hold about you or your company (sign-in emails, game settings or results), email us from your work address and we'll take care of it. Please don't send passwords, account numbers or other sensitive records by email.
Contact
Business inquiries: shiftpointcrisislabs@gmail.com. If you email us, we receive whatever you choose to include, such as your name, organization and message, and use it only to respond to you. Please don't send sensitive records by email.