BranchTrack takes privacy seriously and is committed to protecting all user and learner data. Our privacy practices comply with the EU General Data Protection Regulation (GDPR) and Latvian personal data protection laws. This article explains what data BranchTrack collects, how technical data is pseudonymized, data deletion timelines, and how authors can manage learner privacy.
What Learner Data BranchTrack Collects
The type and scope of data collected depend on how a simulation is delivered:
Direct Share Links & Web Embeds (Anonymous Mode): Playing a simulation via a direct link or embed does not require learner registration. BranchTrack collects technical interaction data (choices selected, time spent, completion status, scores) that is stored separately from profile data and linked only via a pseudonymized token. No direct Personally Identifiable Information (PII) is linked.
Classes & Active Learner Accounts: When learners register or join a BranchTrack Class, the platform stores profile information including Name, Email Address, assigned Team/Organization, and scenario performance metrics (choices, scores, timestamps, leaderboard rankings).
LMS Exports (SCORM & xAPI): For standard SCORM packages, learner PII remains strictly within your LMS—BranchTrack receives no personal learner data. For xAPI (Tin Can) packages, learner statements (actor name/email, choices, scores) are transmitted directly to your configured Learning Record Store (LRS) or LMS.
Data Protection, Storage, and Pseudonymization
Pseudonymization of Technical Data: Technical interaction data and server logs are stored in separate operational databases. They are not directly linked to personal profile data (such as name or email), but connected through an identification token to ensure data pseudonymization.
Data Encryption & Hosting: All data transmitted between the learner's browser and BranchTrack servers is encrypted using standard TLS/HTTPS. Data is hosted securely within European Union data centers.
Cookies Policy: BranchTrack uses session cookies (deleted when closing the browser) and persistent cookies to maintain user preferences, secure sessions, and optimize performance.
How to Delete Learner Data & Right to Be Forgotten
Account Owners and Authors can request or execute data deletions under GDPR guidelines:
1. Deleting a Learner from a Class
Navigate to Classes, select the Class, and open the Learners tab.
Click the Three Dots (...) menu next to the learner's entry and select Delete Learner.
Deleting a registration permanently removes the learner’s profile details (name, email, organization, profile picture). Their technical action logs remain pseudonymized in operational logs but are unlinked from any identifiable personal information.
2. Account Deletion Timelines
Operational Database Deletion: When a user or organization submits a formal account or data deletion request, personal data is permanently removed from BranchTrack's operational databases within 5 working days of receiving the request.
Encrypted Backups: Deleted data is automatically removed from encrypted technical backups when those backups cycle and expire according to general backup retention settings.