Effective {{EFFECTIVE_DATE}}
Privacy
The short version: players' names never leave your device. The only email address we keep is the buyer's, from the purchase. Family members are invited with a code sent by text; we never ask for their email. No ads, tracking or analytics.
Who we are
QuestfulFun is run by {{LLC_NAME}}, a Wyoming limited liability company ("we", "us"). Questions about privacy go to {{SUPPORT_EMAIL}}.
Names and game progress stay on your device
To personalize a mission, you type in up to five first names and pick an age group. These, your puzzle progress and your sound setting are saved in your browser's own storage on your device, so Santa can use the names and you can pick up where you left off.
They are never sent to us or to anyone else. We can't see them, and we have no copy. Clearing your browser's site data removes them.
The Christmas Hero certificate is drawn by your browser on your device. Downloading or printing it doesn't send anything to us.
Children
The missions are made for families to play together, and an adult buys the pass. Only adults can be invited; children play on a grown-up's device. We don't ask children for any information, and the names typed into a mission stay on the device as described above. We don't collect personal information from children.
If you believe a child has sent us personal information some other way, for example by email, write to us and we'll delete it.
When you buy a pass
Payment happens on a checkout page run by Stripe, our payment processor. Stripe collects your card details, email address and billing details, and handles them under Stripe's privacy policy. We never see or store your full card number.
From Stripe we receive a record of the purchase: your email, name, billing country or postal code, the amount, the date, and the last four digits of the card. We use it to confirm the payment, send receipts, answer questions, handle refunds and disputes, and keep the business records the law requires.
After you pay, our site asks Stripe whether that checkout was paid. If it was, we set up your family pass: the checkout's ID, the number of players, and your email address from the checkout.
Your family pass
The person who bought the pass can invite other adults to play on their own devices. They give each person a name of their choosing, such as "Grandma", and send them a one-time code by text from their own phone. For each invited person we keep only that name, whether they've joined, and when. We never ask for their email or phone number, and we don't see the buyer's contacts or messages.
We use the buyer's email only to send them a sign-in code when they ask for one, for example on a new phone. Those emails are delivered for us by Resend, an email delivery service, under Resend's privacy policy.
Each device on a pass holds a random sign-in key. We keep only a scrambled copy of it (a SHA-256 hash), plus when the device was last used, so we can tell whether it's still on the pass. One-time codes are kept the same way and expire after 1 hour (sign-in) or 14 days (invites).
When the buyer removes someone, their name, codes and device key are deleted straight away.
Sharing with friends
The "Share with friends" button opens your device's own share menu, or copies a message, with a link to our site. It never includes names or anything about your mission. We don't see who you share it with.
What our servers record
Like almost every website, our web host keeps standard server logs: IP address, browser type, the page requested and the time. They're used only to keep the site secure and working, and they're deleted on the host's regular schedule.
Everything the game needs, including its fonts, comes from our own site. Playing doesn't contact any other company. The only outside services are Stripe, when you choose to buy a pass, and Resend, when we email the buyer a sign-in code.
What we don't do
- No passwords. You sign in on a new device with a one-time code sent to your email.
- No advertising, no ad networks, no tracking pixels and no analytics.
- No tracking cookies. Our pages use your browser's storage only for the game itself. Stripe's checkout page sets its own cookies, for fraud prevention.
- We don't sell or rent personal information, and we don't share it for advertising.
- No marketing emails. We email only the sign-in codes the buyer asks for.
How long we keep things
Family passes, with the names of invited people, are deleted within 60 days after the season ends. Purchase records are kept as long as tax and accounting law requires, usually up to seven years, and then deleted. Emails you send us are kept while we help you, and for up to two years after.
Your choices
You can ask us what we hold about you, or ask us to correct or delete it, by writing to {{SUPPORT_EMAIL}}. We'll reply within 30 days. We may need to keep payment records the law requires us to keep. You can remove everything stored on your device by clearing this site's data in your browser.
Changes
If we change how we handle information, we'll update this page and its effective date. If a change affects the names you enter in a mission, we'll say so on the home page before it takes effect.