1. Introduction
Welcome to the Signal Knot website.
Signal Knot is a web-based interactive decision simulation platform designed for professional and educational purposes. The simulations are intended to help participants practise responsible decision-making, evidence assessment, source evaluation, and the consideration of communication and institutional risks in uncertain and rapidly changing information environments.
Signal Knot is committed to processing personal data lawfully, fairly and transparently. Accordingly, we only process personal data that is genuinely necessary for the operation of the service.
This Privacy Notice explains:
- what personal data we process;
- why we process it;
- the legal bases on which we process it;
- how long we retain it;
- which parties are involved in the processing;
- and what rights users have in relation to their personal data.
2. Data Controller
Data Controller
- Name
- Nikolett Pénzváltó
- Status
- natural person
- Contact email
- info@signalknot.com
In this Privacy Notice, the data controller is also referred to as Signal Knot, we, us, or the controller.
If the operation of Signal Knot is later transferred to a sole proprietorship or another business entity, the details of the data controller and this Privacy Notice will be updated accordingly.
3. What does this Privacy Notice cover?
This Privacy Notice applies to the processing of personal data in connection with the use of the Signal Knot website and services, including in particular:
- use of the public website;
- use of the Contact form;
- direct contact by email;
- creation and management of user accounts;
- use of the Simulation Player;
- management of access rights relating to simulations;
- saving the progress required to resume a simulation.
This Privacy Notice describes the current pilot version of Signal Knot.
The following are not currently available during the pilot:
- online payments;
- invoicing features;
- subscriptions;
- marketing analytics;
- marketing or advertising cookies.
If any of these features are introduced in the future, this Privacy Notice will be updated accordingly.
4. Data Protection Principles
When processing personal data, the controller observes in particular the following principles:
- lawfulness;
- fairness;
- transparency;
- purpose limitation;
- data minimisation;
- accuracy;
- storage limitation;
- integrity and confidentiality.
Accordingly, we only process personal data that is necessary for the operation of the service and do not use it for purposes other than those described in this Privacy Notice.
5. Brief Description of the Signal Knot Service
Signal Knot provides interactive decision simulations for professional and educational purposes.
The current pilot version includes:
- public marketing pages;
- a public demo;
- user accounts;
- a protected Simulation Player;
- a protected Facilitator Companion;
- a Contact form;
- manually managed access rights;
- Simulation Progress saving to allow users to resume the Simulation Player.
The service does not use a scoring or competitive system and does not create long-term performance profiles of users.
6. Personal Data We Process
| Processing activity | Personal data processed | Purpose | Legal basis | Retention period |
|---|---|---|---|---|
| Technical operation of the website | IP address, timestamp, browser and network technical data, requested URLs, security and traffic metadata | Serving the website and ensuring its security, availability and proper technical operation | The controller’s legitimate interest in operating the service securely | For as long as necessary for the operation and security of the service, in accordance with the retention rules of the relevant technical service providers |
| User account | Email address, User ID, authentication-related technical data | Registration, sign-in, access management, password reset | Performance of a contract necessary for providing the service | For as long as the user account remains active |
| User profile | Display name, email address, User ID | Managing the user account | Performance of a contract necessary for providing the service | For as long as the user account remains active |
| Access rights | User ID, Simulation ID, access type, status | Managing access rights | Performance of a contract necessary for providing the service | For as long as maintaining the access record is necessary, but no longer than until deletion of the user account |
| Contact form | Name, email address, organisation (if provided), message, type of enquiry, related simulation | Handling enquiries and processing access requests | Taking steps at the request of the data subject prior to entering into a contract and/or the controller’s legitimate interest in responding to enquiries | Up to 12 months after the enquiry has been closed |
| Direct email contact | Name, email address, subject and content of the message, any attachments, email metadata | Receiving and responding to the enquiry | Taking steps at the request of the data subject prior to entering into a contract and/or the controller’s legitimate interest in responding to enquiries | Up to 12 months after the enquiry has been closed |
| Simulation Progress | User ID, Simulation ID, current passage ID, content version, timestamps | Allowing the user to resume the simulation from where they left off | Performance of a contract necessary for providing the service | Until the simulation is completed or restarted |
How Simulation Progress works
Signal Knot stores only the minimum information required to allow a simulation to be resumed.
The pilot version does not permanently store:
- the complete list of decisions made by the user;
- the user’s decision path;
- the Decision Profile result;
- the ending reached;
- a score;
- a performance assessment;
- a behavioural profile.
The progress record associated with a simulation is deleted when the user restarts or completes that simulation.
7. What data do we not process?
In particular, the Signal Knot pilot version does not process:
- bank card details;
- payment data;
- invoicing data;
- online transaction data;
- subscription data;
- marketing profiles;
- advertising profiles;
- analytics data used to analyse marketing or user behaviour;
- detailed decision histories;
- facilitator notes;
- assessments of workshop participants;
- documents or files uploaded by users.
If new features are introduced in the future, this Privacy Notice will be amended accordingly.
8. Automated Decision-Making and Profiling
The Signal Knot pilot version does not use automated decision-making or profiling that produces legal effects concerning the user or similarly significantly affects them.
The Decision Profile displayed at the end of a simulation forms part of that individual session only. It is not stored by the system, is not used to assess the user, and is not used to build a long-term profile.
9. Processors and Service Providers
The controller uses the following processors and technical service providers to operate the service.
| Service provider | Role | Data concerned |
|---|---|---|
| Cloudflare | Serving the website in a Cloudflare Workers environment, domain and DNS services, HTTPS connections, network traffic handling, and supporting the security and availability of the service | IP address, timestamp, browser and network technical data, requested URLs, security and traffic metadata |
| Supabase | User authentication, management of user profiles and access rights, storage of Simulation Player and Facilitator Companion content and configuration, saving Simulation Progress, and storing data submitted through the Contact form. The Signal Knot project operates in the Central EU (Frankfurt) region. | Email address, user identifier, profile data, access rights, simulation progress, personal data submitted through the Contact form, and technical and timestamp data |
| Resend | Delivery of transactional emails as the SMTP provider for Supabase Auth, including registration confirmation, password reset and other authentication-related emails. The sending region for Signal Knot emails is Ireland (eu-west-1). | Recipient email address, email subject and content, delivery status, and technical delivery metadata |
| Google Gmail | Handling forwarded emails received at Signal Knot’s official contact email address | Sender name and email address, message subject and content, any attachments, and email and technical metadata |
Signal Knot’s official contact email address is info@signalknot.com. Emails sent to this address are forwarded and subsequently handled in a Gmail email environment.
Data submitted through the Contact form is stored directly in the Supabase database. The Contact form does not currently generate an automatic email notification.
Lovable is used as a development and preview environment, while GitHub is used as a private source-code repository and as part of the deployment process. Under the current setup, we do not store database exports containing Signal Knot user data or users’ personal data in these services, and they are therefore not listed in this Privacy Notice as service providers processing users’ personal data.
10. Data Security
The controller applies appropriate technical and organisational measures to ensure the confidentiality, integrity and availability of the personal data processed.
These measures include in particular:
- HTTPS-based encrypted communications;
- user authentication and access management;
- role-based access controls;
- restricting access to personal data;
- maintaining an up-to-date software environment;
- appropriate technical measures designed to prevent unauthorised access, alteration, disclosure or loss of data.
11. Are personal data transferred outside the European Economic Area (EEA)?
When designing its infrastructure, Signal Knot has selected European regions wherever possible. The Supabase project operates in the Central EU (Frankfurt) region, where project data is stored and primarily processed. For Resend, the sending region for transactional emails is Ireland (eu-west-1).
However, some of the technology providers used by Signal Knot operate global infrastructure. As a result, certain personal data or technical metadata may be processed or transferred outside the European Economic Area. This may occur in particular in connection with Cloudflare’s global network services, Resend’s email services, Google Gmail, and certain processing operations carried out by Supabase or its subprocessors.
Any transfer of personal data outside the EEA may only take place in accordance with the conditions set out in Chapter V of the GDPR. Applicable safeguards may include, in particular:
- an adequacy decision adopted by the European Commission;
- the EU–U.S. Data Privacy Framework, where the relevant provider and processing activity fall within its scope;
- Standard Contractual Clauses (SCCs) adopted by the European Commission;
- other appropriate safeguards available under applicable data protection law.
The controller reviews the data processing and international transfer arrangements of the service providers used by Signal Knot when material changes are made to the service.
12. Browser-Side Storage
Signal Knot uses browser-side storage mechanisms that are necessary to maintain user authentication and operate the service.
In the current pilot version, Supabase Authentication uses Local Storage to maintain the authenticated user session.
This storage is used solely for user authentication and maintaining the signed-in session.
The Signal Knot pilot version does not currently use:
- marketing cookies;
- analytics cookies;
- advertising tracking technologies;
- marketing or behavioural analytics technologies.
If such technologies are introduced in the future, this Privacy Notice will be updated accordingly and, where required, a separate Cookie Notice and consent mechanism will be introduced.
13. Your Data Protection Rights
Under applicable data protection law, you have the following rights.
Right to Information and Access
You have the right to request information about whether we process personal data relating to you and, if so, what data we process, for what purposes and on what legal basis. You may also request access to the personal data we process about you.
Right to Rectification
If personal data relating to you is inaccurate or incomplete, you may request that it be corrected or completed.
Right to Erasure
In the circumstances provided for by law, you may request the deletion of your personal data.
If you wish to have your user account deleted, please contact us using the contact details provided in this Privacy Notice.
Right to Restriction of Processing
Where the applicable legal conditions are met, you may request that the processing of your personal data be restricted.
Right to Data Portability
Where the applicable legal requirements are met, you may have the right to receive personal data that you have provided to us in a structured, commonly used and machine-readable format and to request that it be transmitted to another controller.
Right to Object
Where processing is based on legitimate interests, you have the right to object to the processing of your personal data.
Requests relating to the exercise of your data protection rights may be sent to info@signalknot.com.
14. Complaints and Legal Remedies
If you believe that the processing of your personal data does not comply with applicable data protection law, we encourage you to contact us first. Our aim is to investigate and respond to all data protection enquiries as promptly as possible.
If you believe that the processing of your personal data continues to infringe applicable law, you may lodge a complaint with the supervisory authority.
Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
- Address
- 1055 Budapest, Falk Miksa utca 9–11., Hungary
- Postal address
- 1363 Budapest, Pf. 9., Hungary
- ugyfelszolgalat@naih.hu
- Website
- the official website of the Hungarian National Authority for Data Protection and Freedom of Information
You also have the right to seek judicial remedies in accordance with applicable law.
15. Changes to this Privacy Notice
Signal Knot reserves the right to amend this Privacy Notice where necessary, including as a result of changes to the service, the introduction of new features, changes to processors or technical service providers, or changes in applicable law.
The amended Privacy Notice takes effect when published on the website.
Where a change materially affects users’ rights or important aspects of the processing of personal data, users will be informed in an appropriate manner.
16. Contact
If you have any questions or requests relating to this Privacy Notice, the processing of your personal data or the exercise of your data protection rights, please contact us.
- Data Controller
- Nikolett Pénzváltó
- info@signalknot.com
17. Scope of this Document
This Privacy Notice has been prepared for the pilot version of Signal Knot.
It describes the features available during the pilot and the processing of personal data associated with those features.
This document may need to be reviewed and updated if future versions of the service introduce, in particular:
- online payments;
- invoicing features;
- subscription services;
- analytics or statistical systems;
- marketing tools;
- new processors or technical service providers;
- new purposes for processing personal data.
Document Version
- Document name
- Signal Knot – Privacy Notice
- Version
- Pilot v1.1
- Effective date
- 8 August 2026
- Last updated
- 8 August 2026