Escape Game City

Privacy policy

Last updated: 26 September 2026

This policy explains which personal data Escape Game City processes when you use the escapegamecity.com website, the in-browser game or the Escape Game City mobile app, why, for how long, who it is shared with, and how to exercise your rights. The French version prevails in case of discrepancy.

1. Who is responsible for your data

The data controller is ARA Solutions, a French SARL with a share capital of €1,050, registered with the Bordeaux Trade Register under number 807 436 605, with its registered office at 55 rue Louis Lagorgette, 33150 Cenon, France.

For any question about your data: contact@escapegamecity.com, or by post to Escape Game City, 55 rue Louis Lagorgette, 33150 Cenon, France.

2. Playing without an account

You can play without creating an account. In that case we know neither your name nor your email address. The app only sends what the game needs, described below.

3. The data we process, and why

When you play (app and in-browser game)

  • A device identifier, provided by the phone's operating system and specific to our app. It links your games together (resuming a game, finding an access code you used, your badges) without asking you for an account.
  • Your progress and results: the game played, the last stage reached, time, number of hints used, score. They are used to resume a game, to rank team games, and to produce statistics for creators (success rate, stages where players give up). Creators only see aggregate statistics, never your identity.
  • The player or team name you choose for a team game: it is shown in that game's leaderboard.
  • Your reviews (rating, text, and the name you enter, optional): they are published on the game's page and the creator may reply.

Legal basis: performance of the service you request (playing, resuming, ranking), and our legitimate interest in measuring the quality of games.

What never leaves your phone

  • Your GPS location. It guides you and validates a "place to reach" stage. The list of games is downloaded in full and distances are computed on your phone: your location is not sent to us. The map comes from Google Maps, which receives, as for any map, the area to display.
  • The camera. It scans the games' QR codes and takes the end-of-game selfie. The selfie stays on your phone; it is only shared if you choose to, through your phone's share sheet.
  • Your settings (language, appearance, games downloaded to play offline).

If you create an account (optional)

  • Email address, first name, password (stored in hashed form, never in clear text) and, for creators, a publisher name and a public presentation.
  • They are used to sign you in, to find the games you bought or unlocked on all your devices, to send account emails (address confirmation, forgotten password, moderation of your games) and, for creators, to publish their public page.

Legal basis: performance of the contract (terms of use).

If you buy a game or a subscription (on the website)

Payment is processed by Stripe. We never see nor store your card details; we keep the order (game, amount, date, account). Legal basis: performance of the contract and our accounting obligations. The mobile app sells nothing.

If you write to us or to a creator

Name, email address and message, to reply to you. Writing to a creator requires an account with a confirmed address: the creator receives your message with your public name and email address, so they can reply; their own address is not disclosed to you. We keep a copy of the message to prevent abuse. The website's contact form is protected by Google reCAPTCHA.

If you create a game with assisted writing

The texts of your game (theme, plot, clues) are sent to our artificial-intelligence provider to produce a draft. Do not include personal data in them.

4. Audience measurement and trackers

  • Mobile app: no audience measurement tool, no advertising, no advertising tracker.
  • Website: a session cookie (needed to stay signed in) and your preferences (language, theme) stored in your browser. Google Analytics is only loaded if you accept it in the banner shown on your first visit; you can change your mind at any time with the "Manage cookies" link at the bottom of every page. Pages that display a map load Google Maps.

5. How long we keep it

  • Account: for as long as it exists. You can delete it at any time, from the app (Profile → My account → Delete my account) or from the website (My account).
  • When the account is deleted: your account data is erased. Your games, reviews and orders are detached from your identity and kept with no link to you (game statistics; orders are kept ten years under our accounting obligations). A published review stays visible under the name you entered; write to us to have it removed.
  • Messages: as long as needed to handle your request and keep a record of it.

6. Who has access

Your data is never sold. It is accessible to the Escape Game City team and, for their part, to our providers:

  • OVH (France): website and database hosting, email sending;
  • Stripe: payments;
  • Google: maps (Google Maps), contact-form protection (reCAPTCHA) and, with your consent, website audience measurement (Google Analytics);
  • Ollama: assisted writing of games, only for the texts you submit to it.

Some of these providers may process data outside the European Union; such transfers are governed by the European Commission's standard contractual clauses or by the EU–US Data Privacy Framework.

7. Your rights

You have the right to access, rectify, erase, restrict and object to the processing of your data, the right to data portability, and the right to set instructions on what happens to it after your death. Write to contact@escapegamecity.com; we reply within one month. You can also delete your account yourself, in the app or on the website.

If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).

8. Children

Games can be played as a family. Creating an account is reserved for people aged 15 and over; below that age, a parent creates the account and plays with the child.

9. Changes

This policy evolves with the service. The date of the last update is shown at the top of the page; in case of a significant change, we will inform you on the website or in the app.