Privacy Policy

Escapestamp.com is the controller of the personal data described in this policy. You can contact us at privacy@escapestamp.com.

• Account information, such as your user ID, username, contact details, and authentication information managed through Clerk.
• Passport information, including your display name, nationality, completed rooms, play dates, and the stamps you add.
• Organization and venue information submitted by venue owners or managers, including listing details and uploaded assets.
• Messages and requests you send us, including feedback and requests for missing rooms or venues.
• Technical and usage information, such as page URLs, page titles, device or browser data, and interaction events, when you consent to optional analytics or advertising cookies.
• An approximate location when you choose “Use my location” to find nearby rooms. The rounded coordinates are kept in a short-lived, essential cookie for that search.

• To create and operate your account and passport, save stamps, provide public sharing features, and respond to your requests. We do this to perform our agreement with you.
• To manage venue listings, prevent duplicate or abusive activity, secure the service, diagnose failures, and improve reliability. We do this where necessary for our legitimate interests in operating a safe and useful service.
• To measure site usage and advertising performance. We do this only with your consent, which you can change through Cookie settings in the footer.
• To comply with legal obligations and respond to valid legal requests when required by law.

Escapestamp is designed around shareable passports. Your public passport may show your display name, nationality, stamp collection, rooms played, play dates, and related statistics. Do not add information you do not want others to see. Account credentials and private service records are not shown on public passports.

Necessary storage supports authentication, security, your cookie choices, and features you request. Optional analytics and advertising technologies are disabled unless you consent. Your cookie choice is stored in your browser.

If enabled, Google Tag Manager may process usage and campaign measurement data. Vercel also provides hosting, performance, and service infrastructure. You can reopen Cookie settings from the footer at any time.

We use specialist providers to run the service, including Clerk for authentication, Prepr for catalogue and venue content, database and storage providers, Vercel for hosting and performance tooling, and Google for consented analytics and advertising measurement. They may process data only to provide their services to us or as separately disclosed by them.

Some providers may process data outside the European Economic Area. Where required, we rely on an adequacy decision or appropriate safeguards such as standard contractual clauses.

See our Service Providers register for the providers currently used, their purpose, the data involved, and processing locations.

We generally keep account and passport data while your account is active. We keep operational records only as long as needed for security, support, dispute handling, and legal obligations. Cookie preferences remain in your browser until you clear them or replace your choice; nearby-search coordinates expire after 15 minutes. When data is no longer needed, we delete or anonymize it, subject to reasonable backup cycles and legal requirements.

Depending on your situation, you may ask to access, correct, delete, restrict, or receive a portable copy of your personal data. You may also object to certain processing and withdraw consent at any time without affecting earlier lawful processing.

Email us to make a request. We may need to verify your identity. You also have the right to complain to your local supervisory authority, including the Belgian Data Protection Authority.

We use reasonable technical and organizational safeguards designed to protect personal data. No online service can guarantee absolute security, so please use a strong password and protect your account access.

Escapestamp is not directed to children who cannot lawfully agree to use an online service in their country without parental permission. Contact us if you believe a child provided data improperly.

We may update this policy as the service or the law changes. We will post the revised policy here and change the effective date; we will give additional notice when a material change requires it.