Effective {{EFFECTIVE_DATE}}
Privacy
The short version: players' names never leave your device. We keep only the email addresses of the person who bought the pass and the adults they invite, to send invites and sign-in codes. No ads, tracking or analytics.
Who we are
QuestfulFun is run by {{LLC_NAME}}, a Wyoming limited liability company ("we", "us"). Questions about privacy go to {{SUPPORT_EMAIL}}.
Names and game progress stay on your device
To personalize a mission, you type in up to five first names and pick an age group. These, your puzzle progress and your sound setting are saved in your browser's own storage on your device, so Santa can use the names and you can pick up where you left off.
They are never sent to us or to anyone else. We can't see them, and we have no copy. Clearing your browser's site data removes them.
The Christmas Hero certificate is drawn by your browser on your device. Downloading or printing it doesn't send anything to us.
Children
The missions are made for families to play together, and an adult buys the pass. Only adults can be invited by email; children play on a grown-up's device. We don't ask children for any information, and the names typed into a mission stay on the device as described above. We don't collect personal information from children.
If you believe a child has sent us personal information some other way, for example by email, write to us and we'll delete it.
When you buy a pass
Payment happens on a checkout page run by Stripe, our payment processor. Stripe collects your card details, email address and billing details, and handles them under Stripe's privacy policy. We never see or store your full card number.
From Stripe we receive a record of the purchase: your email, name, billing country or postal code, the amount, the date, and the last four digits of the card. We use it to confirm the payment, send receipts, answer questions, handle refunds and disputes, and keep the business records the law requires.
After you pay, our site asks Stripe whether that checkout was paid. If it was, we set up your family pass: the checkout's ID, the number of players, and your email address from the checkout.
Your family pass
The person who bought the pass can invite other adults to play on their own devices. For each invited person we keep their email address, whether they've joined, and when.
We use these email addresses only to send invites and sign-in codes. Invite and sign-in emails are delivered for us by Resend, an email delivery service, under Resend's privacy policy. If the buyer sends an invite by text message instead, it goes from their own phone; we don't see their contacts or the message.
Each device on a pass holds a random sign-in key. We keep only a scrambled copy of it (a SHA-256 hash), plus when the device was last used, so we can tell whether it's still on the pass. One-time codes are kept the same way and expire after 1 hour (sign-in) or 14 days (invites).
When the buyer removes someone, their email address, codes and device key are deleted straight away.
Sharing with friends
The "Share with friends" button opens your device's own share menu, or copies a message, with a link to our site. It never includes names or anything about your mission. We don't see who you share it with.
What our servers record
Like almost every website, our web host keeps standard server logs: IP address, browser type, the page requested and the time. They're used only to keep the site secure and working, and they're deleted on the host's regular schedule.
Everything the game needs, including its fonts, comes from our own site. Playing doesn't contact any other company. The only outside services are Stripe, when you choose to buy a pass, and Resend, when we email an invite or a sign-in code.
What we don't do
- No passwords. You sign in on a new device with a one-time code sent to your email.
- No advertising, no ad networks, no tracking pixels and no analytics.
- No tracking cookies. Our pages use your browser's storage only for the game itself. Stripe's checkout page sets its own cookies, for fraud prevention.
- We don't sell or rent personal information, and we don't share it for advertising.
- No marketing emails. We email only invites and the sign-in codes you ask for.
How long we keep things
Family passes, with the invited email addresses, are deleted within 60 days after the season ends. Purchase records are kept as long as tax and accounting law requires, usually up to seven years, and then deleted. Emails you send us are kept while we help you, and for up to two years after.
Your choices
You can ask us what we hold about you, or ask us to correct or delete it, by writing to {{SUPPORT_EMAIL}}. We'll reply within 30 days. We may need to keep payment records the law requires us to keep. You can remove everything stored on your device by clearing this site's data in your browser.
Changes
If we change how we handle information, we'll update this page and its effective date. If a change affects the names you enter in a mission, we'll say so on the home page before it takes effect.