Player privacy in reports

Pseudonymous mode (default)

By default, players appear under a pseudonym such as Player-7F3A, in reports, exports and leaderboards alike.

• The pseudonym is computed from the player's account identifier and a secret key specific to your organisation. It never contains any part of a name or email.
• It is stable: the same person keeps the same pseudonym over time, so you can follow progress without knowing who it is.
• It is specific to your organisation: the same person has a different pseudonym in another organisation.

Nominative mode

An admin can switch the organisation to nominative mode in the security settings. Players who are current members of the organisation then appear under their display name; anyone else (a player from outside who played a public game, a former member) stays pseudonymised. This change:

• requires a recent re-authentication and is recorded in the audit log;
• is shown to players, with a notice in the game, before they play.

Switch back to pseudonymous mode at any time: names disappear from reports immediately.

Public games: leaderboard and presenter screen

The leaderboard of a Public game and its presenter screen can be read by anyone, and are often projected in front of a room: they never show a real name, even in nominative mode.

• A signed-in member appears under their pseudonym (Player-7F3A).
• A player without an account appears under the nickname they chose before playing (optional, 2 to 24 characters, filtered), otherwise under a neutral Player-XXXX pseudonym specific to their session. Each session without an account is a distinct player.
• The nickname stays attached to the session: it is deleted with it (after 13 months, or when the organisation is deleted). It never appears in reports or exports.

Your organisation's reports (dashboard, CSV, PDF) follow the usual reporting mode: players without an account are never listed there, they only count in the totals.

Small groups are never detailed (k-anonymity)

When you filter a report by group, the group must count at least 5 distinct players over the period. Below that threshold the report shows no figures at all, not even averages: with two or three people, an average reveals almost everyone's score. The screen says that the group is too small; widen the period or pick a larger group.

The threshold applies in both modes, and to exports too.

What the threshold does not cover

The threshold protects groups, the only filter that lets you isolate a few named people. The report of a whole fork, and the games and completion rate shown in the forks list, are always detailed, even with fewer than 5 players: they cover everyone invited to the game, and players stay pseudonymous unless your organisation chose the nominative mode.

See also reading your statistics.