RAGNARCRAFT // ACADEMY

RagnarCraft Archive Seal

Welcome to RagnarCraft Academy

// ENTER CLASSROOM PIN

Students join with a session code from your teacher. No account, no email. Prefer a classroom alias, not a legal name.

// EDUCATOR VERIFICATION

The teacher runs the room. School staff sign in with Microsoft Entra ID or Google Workspace — not a student login.

AUTHORIZE VIA MICROSOFT AUTHORIZE VIA GOOGLE

// TRUST PACK: DPA

Trust Pack v1.2 · Effective 18 July 2026 · Last reviewed 13 September 2026 · GDPR Art. 28 summary

Svensk sammanfattning

Huvudmannen (skolan / nämnden) är personuppgiftsansvarig. RagnarCraft OÜ (Äriregister 17428661, VAT OSS EE102951316) är personuppgiftsbiträde för LAB-sessioner. Hosting: Microsoft Azure Sweden Central (Gävle). Inget elevkonto och ingen e-post. Elever går in med PIN och ett alias. Callsign, närvaro, framsteg och valfri chatt är personuppgifter. Läraren styr rummet (Microsoft Entra ID eller Google Workspace). Azure OpenAI endast för läraren (missionsutkast och privat instruktörshjälp), EU Data Zone — ingen live-Assist för elever. Röst/video endast om läraren öppnar mediabryggan. När sessionen går ut slutar rummet att vara aktivt; chatt, roster och framsteg raderas inte automatiskt — det regleras i det undertecknade avtalet. Fullständig Art. 28-text på engelska nedan. Undertecknat biträdesavtal på begäran: support@ragnarcraft.com.

1. Parties & roles

For RagnarCraft LAB Academy classroom sessions:

  • Controller: the school’s huvudman (education organisation / municipal board that determines purpose and means). Not the individual teacher.
  • Processor: RagnarCraft OÜ (Äriregister 17428661, VAT OSS EE102951316), acting only on the controller’s documented instructions to operate LAB.

Where RagnarCraft operates its own public store or marketing site outside a school session, it may act as an independent controller for that separate processing. This DPA summary covers LAB classroom processing only.

2. Subject matter, nature & purpose

Processing is limited to delivering a live classroom: session PIN access, teacher authentication, module push / progress metrics, optional session chat, optional teacher Azure OpenAI tools (mission drafting and private instructor Assist), optional classroom voice/video when the teacher opens the media bridge, and session lifecycle (start, pause, finale, expiry).

Purpose: enable a teacher-led learning session. LAB does process personal data for the live room (callsign, presence, progress, optional chat, optional media identifiers). It does not sell student data, build advertising profiles, or use LAB classroom content to train RagnarCraft’s own foundation models. There is no student-account / email / legal-name collection by design — that is data minimisation, not a claim of “no student data”.

3. Duration

Live join ends when the teacher closes the session or the expiry sweep marks it expired (teacher-configured length: 15 / 30 / 60 / 90 minutes). Students cannot re-enter with that PIN. Azure Communication Services room identities are torn down on close/expire.

Stored artefacts: roster, last-50 chat buffer, and progress signals remain in the LAB database after expiry until deleted or returned under the signed DPA. Security audit rows for educator SSO and session lifecycle are append-only. Exact purge windows are in the executed annex — this summary does not claim automatic erasure of chat at expiry.

4. Data subjects & data types

  • Teachers / staff: organisational identity via Microsoft Entra ID (organisations endpoint) or Google Workspace (OIDC: openid / profile / email only), session control actions, support contacts the school provides.
  • Students: self-chosen classroom callsign, session PIN proof (httponly cookie until session end), module completion signals (anonymous client id in the browser — not a hash of a legal name), optional chat (ring buffer, last 50 messages), optional ACS media identity if the teacher opens voice/video. Those are still personal data. Students do not create accounts with legal name or email by default.
  • Technical: security / operational logs necessary to run Azure-hosted services (access, errors, abuse prevention). Short-lived IP rate-limit counters on join/chat. Student-join events are not stored with an IP in the LAB audit table. Educator login/session audit may include IP.

5. Processor commitments (Art. 28)

  • Process personal data only on documented controller instructions.
  • Ensure persons authorised to process are under confidentiality.
  • Implement appropriate Art. 32 security measures (encryption in transit, access control, environment isolation, least privilege).
  • Engage subprocessors only under written terms no less protective; publish the current register; give prior notice of material additions where required.
  • Assist the controller with data-subject rights, DPIAs, and supervisory authority engagement, insofar as LAB’s design allows.
  • Notify the controller of a personal-data breach without undue delay after becoming aware (Art. 28(3)(f)). The 72-hour clock to a supervisory authority (Art. 33) is the controller’s duty, not RagnarCraft’s.
  • On end of processing: delete or return classroom personal data available to RagnarCraft, except where EU / Member State law requires storage.
  • Make available information necessary to demonstrate Art. 28 compliance and allow agreed audits / inspections.

6. Hosting & transfers

Primary application and database hosting: Microsoft Azure Sweden Central (Sweden / EEA; Microsoft’s Sweden region includes capacity in Gävle and related Swedish sites). Real-time chat uses Azure Web PubSub in the LAB Azure subscription (resource region in the signed annex). Optional teacher AI uses Azure OpenAI in the EU Data Zone under Microsoft’s Online Services terms. Optional voice/video uses Azure Communication Services in the LAB Azure subscription (resource region in the signed annex). Students do not trigger Azure OpenAI during a live session.

International transfers outside the EEA, if any occur through a listed subprocessor (including teacher Google OIDC), rely on a valid Chapter V mechanism (adequacy and/or EU Standard Contractual Clauses 2021), plus Microsoft’s Product Terms / Data Protection Addendum or Google’s customer DPA. Schools may request the transfer annex with the signed DPA.

7. AI processing (2026 posture)

RagnarCraft is a deployer of Azure OpenAI (Microsoft is the service provider; RagnarCraft is not the GPAI model provider). Two teacher-only tools run in the EU Data Zone: Mission Assist (Command Deck drafts) and private instructor Assist. They are not live-student Assist. Teachers must not paste legal names or home addresses into prompts.

These tools are not designed for admission, allocation, exam scoring, or exam-proctoring under AI Act Annex III education use-cases. Annex III high-risk duties for standalone systems apply from 2 December 2027. Teachers remain responsible for pedagogical decisions. Outputs that affect a learner’s standing must involve human review (GDPR Art. 22 posture: no solely automated decisions with legal or similarly significant effect via LAB).

8. How to get the signed DPA

This modal is the public Trust Pack summary for transparency and procurement screening. Contracting schools receive a signature-ready Art. 28 DPA (with annexes: processing description, TOMs, subprocessors, transfer mechanisms, resource regions) on request.

Contact: support@ragnarcraft.com · Controller questions should go first to the school’s DPO / privacy lead.

Not legal advice. If your ministry or municipality requires a specific DPA template, send it to support — we map LAB processing to your clauses rather than forcing a one-size fantasy contract.

// STUDENT PRIVACY

Trust Pack v1.2 · Effective 18 July 2026 · Last reviewed 13 September 2026 · Classroom notice (students & guardians)

Svensk sammanfattning

Elever skapar inget konto och lämnar ingen e-post. PIN kommer från läraren. Välj ett alias, inte ditt juridiska namn. Callsign, närvaro, framsteg och chatt är personuppgifter och syns för läraren. Chatt sparas som de senaste 50 meddelandena. Röst/video bara om läraren slår på det. Huvudmannen är personuppgiftsansvarig. Klagomål: skolan först, därefter Integritetsskyddsmyndigheten (IMY).

Who decides & who runs the room

Your school’s huvudman (the education organisation / municipal board) is the data controller. The teacher runs the live room. RagnarCraft OÜ runs the LAB software as a processor. Questions about why the school uses LAB, parental information under local rules, or student rights go to the school first.

How students join (live now)

  • Students enter with a session PIN from the teacher — no student account, no email signup.
  • The browser stores that PIN in an httponly cookie until the session ends (same clock as the teacher-set session length).
  • Students pick a short callsign (letters only) for the roster and chat. Prefer a classroom alias, not a legal name.
  • Teachers sign in with Microsoft Entra ID or Google Workspace (organisation accounts), not student logins. Google is used only to sign the teacher in — not for student Google accounts.

What we process about students

  • Callsign and presence in the live roster.
  • Module progress signals (anonymous client id in the browser so the teacher can see clears — not a hash of your name).
  • Chat messages you send during the session (if chat is enabled). The last 50 messages are stored with the session, not only shown on screen.
  • Voice / video only if the teacher opens the classroom media bridge. If they do not, LAB does not process your microphone or camera.

By default LAB does not ask students for legal name, home address, phone number, government ID, or payment details. Callsigns, presence, progress, and chat are still personal data. Do not type a legal name or home address into chat.

What teachers can do

Teachers can view live progress, use classroom controls, and — where chat is on — moderate the room (including rename / remove a callsign from the live roster). That is classroom supervision, not advertising surveillance. Teacher AI helpers are private to the teacher; they are not a student chatbot. Teachers must not paste a pupil’s legal name into those tools.

Minors & school responsibility

Many LAB users are minors. GDPR Art. 8 and Member State rules on children’s consent for information-society services still matter when consent is the legal basis — but Swedish schools typically rely on their education / public-task bases (uppgift av allmänt intresse) for classroom tools. The huvudman must ensure parents/guardians are informed under local policy. RagnarCraft designs for data minimisation: PIN + callsign, no student account.

AI in LAB — what it is / isn’t (2026)

  • Is: optional teacher Mission Assist and private instructor Assist on the Command Deck (server-side Azure OpenAI in the EU Data Zone; no browser API keys).
  • Is not: a live student Assist button, automated exam scoring, admissions ranking, emotion detection, or biometric proctoring.
  • No solely automated decision from LAB determines a student’s legal status or final grade. Teachers keep human oversight. These tools are not designed for AI Act Annex III education high-risk uses (duties for those systems: 2 December 2027).

How long data stays

Live now: you cannot join after the session expires or the teacher closes it. Voice/video identities for that room are torn down. Roster, last-50 chat, and progress stay in the LAB database until the school’s signed DPA says they are deleted or returned — expiry is not automatic wipe.

Join security: failed PIN attempts are rate-limited using a short-lived IP counter. Successful student join is not written to the audit table with your IP.

Your rights

Access, rectification, erasure, restriction, objection, and complaint are exercised primarily via the school (controller / huvudman). RagnarCraft assists the school technically where LAB holds the relevant records. In Sweden you may also complain to Integritetsskyddsmyndigheten (IMY). Processor assistance: support@ragnarcraft.com.

Plain-language notice for classrooms. It does not replace the school’s privacy policy or the signed DPA between the school and RagnarCraft OÜ.

// SUBPROCESSORS

Trust Pack v1.2 · Register effective 18 July 2026 · Last reviewed 13 September 2026 · LAB Academy stack

Svensk sammanfattning

Underbiträden för LAB: Microsoft Azure (Sweden Central / Gävle) för hosting, Microsoft Entra ID och Google Workspace endast för lärarens inloggning, Azure Web PubSub för chatt, Azure OpenAI i EU Data Zone för lärarens AI-verktyg, Azure Communication Services för röst/video när läraren öppnar mediabryggan. Butikens betalleverantörer används inte i PIN-klassrummet. Resursregion för PubSub och ACS anges i det undertecknade avtalet.

Engagement rule

RagnarCraft OÜ may engage the entities below to process LAB personal data solely to deliver the service. Each is bound by written data-protection terms. Material additions will be reflected here; contracting schools get notice under the signed DPA (typically ≥30 days before a new subprocessor processes their classroom data, except emergency security replacements).

Current register (LAB)

Entity Role Region Status
Microsoft (Azure) Application hosting, compute, MySQL / persistent storage for LAB Azure Sweden Central (Sweden / EEA) Live now
Microsoft Entra ID Teacher authentication (organisations endpoint) School Entra tenant geography Live now
Google (OIDC) Teacher sign-in only (openid / profile / email). No student Google accounts. School Workspace processing stays on the school’s Google contract. Per Google customer DPA / SCCs Live now
Azure Web PubSub Real-time classroom chat fan-out (plus last-50 message buffer in LAB MySQL) LAB Azure subscription — region in signed annex Live now
Azure OpenAI Teacher Mission Assist + private instructor Assist (server-side; no browser API keys; no student live Assist) EU Data Zone Live when teacher uses Assist
Azure Communication Services Classroom voice / video when the teacher opens the media bridge (Rooms + tokens). Torn down on session close/expire. LAB Azure subscription — region in signed annex Live when media bridge is on

Microsoft chain

Microsoft may use its own authorised subprocessors under the Microsoft Products and Services Data Protection Addendum. The authoritative Microsoft Online Services subprocessor disclosure is published via the Microsoft Service Trust Portal. RagnarCraft’s obligation is to keep this LAB-facing register accurate for the services we enable.

Out of scope for LAB classroom

Separate RagnarCraft store processors (for example payment or physical merch fulfilment) are not engaged for PIN classroom sessions and are not listed here. If a school buys LAB through a channel that adds billing processors, those appear in the school’s order / DPA annex.

Objection

Controllers may object to a new subprocessor on reasonable data-protection grounds as set out in the signed DPA. Contact: support@ragnarcraft.com.

Last reviewed: 13 September 2026. If code enables a new vendor that touches classroom personal data, this register must be updated in the same release — Trust Pack ↔ code parity rule.

RAGNARCRAFT © 2026