Privacy Policy
Last updated: 2 September 2026
The short version
- • No account, no password.
- • With your consent, we use Google Analytics to see which pages get visited — never advertising cookies, ad tracking, or cross-site profiling. Nothing loads until you accept.
- • We never ask for your child's name, photo or contact details.
- • Your email is optional and used only to send your game link and receipt.
- • Everything is deleted automatically after 90 days.
- • We never sell your data.
1. What we collect
| Data | Why | Required? |
|---|---|---|
| Game setup | The child's age (a number), chosen theme, difficulty, number of players, and the household items you tick. Used to generate an age-appropriate game. | Yes |
| Room photo (optional) | If you upload one, it is sent for AI analysis to identify usable objects. We do not store the photo — only the list of item names it produced. | No |
| Email address | To send your game link and receipt. You can opt out at creation — untick the box and we will not email you at all. | No |
| Device identifier & IP | A random id stored on your device, plus your IP address, used only to enforce free-usage limits and prevent abuse of the generator. Not used for advertising or profiling. | Yes |
| Payment record | Amount, a Stripe reference, and the email you gave at checkout. We never see or store your card details — those go directly to Stripe. | If you buy |
2. Children's privacy
Quest at Home is intended for parents and adults to buy and set up. It is not directed at children and children should not purchase or provide details. The only child-related information we handle is an age number that you enter — never a name, photograph, contact detail, or anything that identifies a child.
3. Who we share it with
Only the providers needed to run the service. Each receives the minimum required, and none receive your data to use for their own marketing:
- • Stripe — payment processing. Handles your card details directly; we receive only a reference and the amount.
- • Google (Gemini) — generates the puzzles from your setup answers, and analyses a room photo if you upload one.
- • Resend — sends your game link and receipt, if you opted into email.
- • Google Analytics — aggregate site-usage statistics (which pages get visited, from where). Ad personalization and cross-site signals are switched off; we do not use it to build advertising profiles or retarget you.
- • Our hosting and database provider — stores the game so your link works.
4. How long we keep it
- • Your game link works for 30 days from purchase, then stops working.
- • Records are deleted after 90 days. The gap exists so we can still help with a support or billing query after your link has closed.
- • Deletion is permanent and automatic — a scheduled job removes the record, including your email address.
- • Stripe keeps its own transaction records for longer where tax and anti-fraud law requires it.
5. Cookies and local storage
We use no advertising cookies — nothing here builds a profile of you or follows you to other sites. We store a small amount of data in your browser for the service to function: a random device id for usage limits, and — where no database link is used — your game itself so you can return to it. These are strictly necessary— the site can't work without them, so they load without asking and can't be switched off short of clearing your browser data.
We'd also like to use Google Analytics to understand aggregate traffic — which pages get visited and roughly where from — via a first-party analytics cookie. This one is optional and off by default: it only loads if you click “Accept” on the cookie banner shown on your first visit. We do not enable Google Signals or ad-personalization features, so this data is never used to advertise to you or combined with your Google account activity, and it is not linked to your game, email, or payment record.
You can change your mind at any time — click “Cookie preferences” in the footer of any page to reopen the banner and switch analytics on or off. Rejecting, or never accepting, means the Analytics script never loads and no analytics cookie is ever set.
6. Your rights
You can ask us to show you what we hold, correct it, or delete it early — just reply to your purchase email. Depending on where you live (for example the UK/EU under GDPR, or California), you may also have rights to object to processing, restrict it, or receive a copy of your data, and to complain to your data protection regulator.
Because we hold so little and delete it automatically after 90 days, most requests are straightforward. Note that deleting a record early also removes your access to that game.
7. Security
Traffic is encrypted in transit. Your game link contains a long random code that acts as its key — anyone with the link can open the game, so treat it like a password and avoid posting it publicly. Payment codes sent by email are stored only in hashed form and expire quickly.
8. Changes & contact
If this policy changes we will update the date above. For any privacy question, or to exercise your rights, reply to your purchase email.
See also our Terms & Conditions.