Privacy Policy

Neighbourhood Quest ("we", "us", "our"), Diemen, the Netherlands, is the data controller for the personal data described on this page. [Placeholder: add the registered company name, KvK number, VAT number and registered address before launch.]

For any privacy question, use our Contact page - the same address handles support and privacy requests.

Email address: if you sign in to reach your game, we send you a one-time sign-in link. If you join a waitlist, we store your email so we can notify you. We use it only to deliver your game and related updates, not for unrelated marketing.

A device identifier: to let your whole team play from separate phones without an account, we set a random, unreadable identifier in your browser when you join a session. It only identifies your device as a member of that game session - it holds no personal details itself and cannot be linked to your identity by anyone but us.

Team name and display name: the team name you choose is shown publicly on our leaderboard, and your optional first name is visible to your own teammates. Do not enter anyone's personal data as a team or display name.

Gameplay data: your progress, hints used, wrong answers, timestamps and final score, so the game and leaderboard work and so we can help if something goes wrong.

Payment reference: our payment processor handles your payment directly. We only store a reference id to confirm your purchase - never your card details.

Language preference: which of our two languages (English or Dutch) you're playing in, so emails and the game are sent in the right one.

We do not track your location. Stops use an honour-system "I'm here" check-in - no GPS data is requested or stored.

We do not receive or store your card details; our payment processor handles those directly.

A small number of cookies are always set and are strictly necessary to make the site work - for example, remembering your language and identifying your device within your team's session, including a cookie that records your choice in our cookie banner so we don't have to ask again on every page.

With your permission, we also use analytics and advertising cookies to understand how the site is used and to show relevant ads. These are only set if you click "Accept" in the cookie banner shown on your first visit, never before and never if you click "Decline". You can change your mind at any time via the "Cookie settings" link in the footer.

We use a small number of service providers to run the site - for payments, hosting, email delivery, and error monitoring - each only for that purpose and bound to keep your data confidential.

If you accept analytics or advertising cookies, our analytics and advertising partners also receive data as described in the Cookies section above - only for visitors who accept, and never otherwise.

We do not sell your personal data, and we do not share it with anyone for their own marketing purposes.

Mostly because it's necessary to deliver the game you paid for: your email to send the play link, your device identifier to keep your team's session working, and your payment reference to confirm you paid.

The rest is our legitimate interest in keeping the service working and secure, or your consent, for analytics and advertising cookies.

Because only a first completion ever counts and games cannot be replayed, we keep completed game and leaderboard data indefinitely so standings stay accurate, unless you ask us to delete it (see your rights below).

Waitlist emails are kept until the escape they relate to launches or you ask us to remove you, whichever comes first.

All traffic between your device and our service is encrypted. Our service providers each apply their own industry-standard security measures, and we limit access to personal data to what's needed to run and support the service.

Under the GDPR/AVG you can ask us to: give you a copy of the personal data we hold about you, correct it if it's wrong, delete it, restrict or object to how we use it, or receive it in a portable format. Where we rely on your consent, you can withdraw it at any time - for cookies, use the "Cookie settings" link in the footer. Contact us via our Contact page - we aim to respond within one month, as required by law.

Removing your team's gameplay data may remove your entry from the public leaderboard.

If you believe we have mishandled your data, you can also lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

Our games are designed for families and groups of all ages to play together, but anyone under 18 must be accompanied by a responsible adult, per our Terms. We do not knowingly collect personal data directly from children beyond the team/display name a supervising adult enters on their behalf.

This policy sits alongside our Terms & Conditions, which govern your purchase and play of a game. Where the two overlap, this policy is the one that applies to how we handle your personal data specifically.

We may update this policy from time to time; the date at the top shows when it last changed. Continuing to use our games after a change means you accept the update.