Policies

Privacy policy

This policy explains what personal data Escape Door collects when you use Escape Door, why we collect it, and the choices you have.

Last updated 4 November 2026

What we collect

Booking details: name, email, phone number, team name, number of players and the time you booked.
Account details: if you create an account, your name, email, phone and a securely hashed password.
Payment details: payments are processed by Razorpay. We receive the payment status and reference, never your full card or bank details.
Gameplay data: answers, hints used, scores, team chat messages and the display name you choose.
Location: for GPS city games only, your phone’s location while a mission is active, to check you have reached a checkpoint. We do not track you outside a game.
Camera and photos: the camera is used only when you choose to scan a QR code, use the AR lens, or take a photo for a challenge. Only photos you submit are uploaded.

How we use it

To take your booking, send confirmations, access codes, reminders and results.
To run the game: verify answers and arrivals, sync progress across your team, and let a Game Master help you.
To process payments and refunds, prevent fraud and meet tax and accounting obligations.
To improve our games using aggregated statistics, such as which puzzles are too hard.

We do not sell your personal data.

Service providers

We share data only with providers that help us run the service: Razorpay (payments), our email delivery provider (booking emails), our hosting provider, and Anthropic (optional AI hints and photo-challenge review, which receive only the puzzle context and the photo you submit).

Cookies and local storage

We use essential cookies to keep you signed in and to link your phone to your game seat. During offline-capable games your phone stores the game pack and your progress locally so you can keep playing without a connection. We do not use advertising cookies.

How long we keep it

Booking and payment records are kept as long as tax law requires. Gameplay data and photos are kept so you can see results and certificates, and you can ask us to delete them at any time.

Your rights

You can ask to access, correct or delete your personal data, or withdraw consent for optional processing. Contact us using the details on our contact page. We may need to keep some records where the law requires it.

Children

Players under 18 should play with a parent or guardian, who makes the booking on their behalf.

Changes

If we change this policy we will update the date at the top of this page.