Privacy Policy

1. Who we are

Escape Market ("we", "us", "our") operates the website at www.escape-market.com. We create tools for designing and running at-home mystery and escape room experiences.

2. Information we collect

We collect the following information when you use our service:

• Account information — Your email address and, if you sign in with Google, your name and profile picture.
• Mystery content — The projects, characters, evidence, and narratives you create using our editor. This content is stored on our servers so you can access it across devices.
• Usage data — Pages visited, features used, and general interaction patterns. We use this to improve the product.
• Device information — Browser type, operating system, and IP address collected automatically when you visit the site.

3. How we use your information

We use the information we collect to:

• —Provide, operate, and improve the Escape Market platform
• —Authenticate you and keep your account secure
• —Save and sync your mystery projects across sessions
• —Send transactional emails (magic link sign-in, account notifications)
• —Respond to support requests
• —Understand how the product is used and where to focus development

We do not sell your personal information to third parties, use it for advertising, or share it with anyone except as described in this policy.

4. Third-party services

We rely on the following third-party services to operate:

• Supabase — Authentication, database storage, and file storage. Your project data and account information is stored on Supabase infrastructure.
• Google OAuth — Optional sign-in method. If you use it, Google shares your name, email, and profile picture with us.
• Google Analytics — Analytics service used to understand site usage. Only activated with your explicit consent via the cookie banner. Data is collected anonymously (IP anonymization enabled) and governed by Google's privacy policy.
• Vercel — Hosting and deployment of the web application.

5. Cookies, analytics, and your consent

We use cookies to maintain your authentication session. We use browser local storage to cache editor state for performance.

We also offer optional analytics via Google Analytics. This is off by default. When you first visit the site, a cookie banner asks for your consent. Analytics only activates if you click Accept. Your choice is stored in your browser and persists across visits.

If you accept, Google Analytics sets cookies (_ga, _ga_*) to distinguish users and sessions. These cookies expire after 2 years and 24 hours respectively. IP anonymization is enabled — your full IP address is never stored.

You can withdraw consent at any time by clearing your browser's local storage or cookies, at which point the analytics banner will reappear on your next visit. You can also opt out globally using the Google Analytics Opt-out Browser Add-on.

6. Data retention

Your account and project data is retained for as long as your account is active. If you delete your account, your data is permanently deleted within 30 days. You may request deletion at any time by contacting us at the address below.

7. Your rights

You have the right to:

• —Access the personal data we hold about you
• —Request correction of inaccurate data
• —Request deletion of your account and associated data
• —Export your mystery project data at any time via the JSON export in the editor
• —Withdraw consent for any processing based on consent

8. Security

We use industry-standard security practices including encrypted connections (HTTPS), hashed API keys, and row-level security on all database tables. No system is completely secure, and we cannot guarantee absolute security, but we take reasonable precautions to protect your data.

9. Children

Escape Market is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

10. Changes to this policy

We may update this policy from time to time. We will post the revised policy on this page with an updated date. Continued use of the service after changes constitutes acceptance of the revised policy.

11. Contact

Questions about this policy? Reach us at privacy@escape-market.com.