Privacy Policy

Which data we use for purchase, create game, gameplay, location, support and cookies, and how long we keep it.

Privacy Policy

We process only the data needed for purchase, create game, gameplay, support, security and your cookie choices.

Purposes of processing

We process contact details, payment references, checkout confirmations, ticket code, configurations, tasks, final messages, game and progress data and support messages. When the recipient opens the game link for the first time, start coordinates may be stored so the distance to the next point can be calculated correctly. During gameplay, the page uses the current position for distance display; we also document the ticket code and time of location consent. For game invitations, we store the required opt-in and delivery records. Technical server logs are created when the website is visited. Google Analytics loads only if you consent to the statistics category.

Legal bases

Purchase, ticket delivery, create game and gameplay are based on Article 6(1)(b) GDPR. Tax and retention duties are based on Article 6(1)(c) GDPR. Security, server logs and abuse prevention are based on Article 6(1)(f) GDPR. Optional cookies, statistics and invitation records are processed on the basis of your consent under Article 6(1)(a) GDPR.

Recipients and third-country transfers

We use service providers for hosting, payment processing, map display, email delivery, support and optional statistics. Stripe processes payment data. The Leaflet map loads tiles from OpenStreetMap servers; technical request data such as IP address, browser data and map area may be transmitted. Google Analytics loads only after consent. Service providers receive data only as far as needed for their task. We do not sell data.

Storage periods and erasure

Game data such as ticket code, configuration, start coordinates and progress are deleted no later than seven days after the ticket has been fully used. Tickets that are not fully used and their related game data are cleaned up no later than after three years. Cookie and consent logs are stored for no more than six months and removed earlier after withdrawal or on request. Delivery and opt-in records for game invitations are deleted after ticket use, after the invitation expires or during the three-year cleanup. Support requests are kept for up to six months. Payment, checkout and invoice records are kept as long as statutory retention duties require, usually up to ten years.

Your rights

You have rights to access, correction, deletion, restriction, data portability and objection. You can withdraw consent for the future. You may also lodge a complaint with a data protection supervisory authority.

Withdrawal of consent and contact

Cookie consent can be changed through the cookie banner or the Cookie settings link in the footer. Location access can be withdrawn in the browser or inside the game. Invitation recipients may ignore the confirmation link or ask us to delete their contact details. For privacy questions, use the imprint or contact form.

Back Back to start