Privacy Policy
Last updated: July 2026
We collect the least we need, keep it the shortest we can, and never sell your data. This summarises what we hold and your rights (EU GDPR).
What we collect
Account details (email, name, language, password hash); gameplay data (scores, clues, interrogation transcripts); live GPS position only while you're in an active event; and payment references (cards are handled by Stripe, never by us).
Why, and for how long
To run the game and your account. GPS is kept for the event + 30 days, then anonymised into heatmaps; transcripts for the event + 90 days; event photos only with your explicit opt-in consent, revocable at any time.
Your rights
From your account you can export your data, delete your account (game history is kept pseudonymously, e.g. “Player #4213”), and manage photo and marketing consent. Contact us for anything else.
Who we share with
Only the processors we need — Stripe for payments, our cloud host for infrastructure — under data-protection agreements. No third-party advertising trackers, ever.
Contact
Questions or requests about your data? Reach us via the contact page.