Privacy Policy

1. Overview

This Privacy Policy explains how Mystery Game Generator (“we,” “us,” or “our”) collects, uses, and shares information when you use our website and services at mystery.sasquatchninjagames.com (also available at mystery-game-generator.fly.dev) (the “Service”).

We respect your privacy. We sell digital game tools—not your personal data.

2. Information we collect

Account information

• Email address and password (stored and authenticated by Supabase; we do not store plain-text passwords)
• Subscription tier, owned packs, and Stripe customer ID (for billing)
• Saved games you choose to store in your cloud library

Payment information

Payments are processed by Stripe. We receive billing status, subscription state, and limited customer metadata. We do not receive or store your full credit card number on our servers.

Live gameplay

• Player display names entered when joining a room
• Room codes, game state, chat messages, accusations, and host actions during active sessions
• Chat may include public messages and private whispers between players you designate

Technical & usage data

• Browser type, IP address, and request logs (standard web server / hosting logs)
• Local storage on your device (e.g., player session ID for rejoining a live game)
• Authentication session tokens managed by Supabase client libraries
• First-party product analytics, including random browser and session identifiers, landing page, campaign parameters (such as UTM source/campaign), and milestones such as trial setup, room creation, game start/completion, and checkout completion
• Digital purchase usage records, including the internal account ID, pack ID, policy version accepted, first paid-content access, PDF generation/download, print action, and whether that purchased pack was used to create a live room

3. How we use information

We use collected information to:

• Create and manage your account
• Provide subscriptions, pack purchases, and feature access (watermarks, live hosting, save limits)
• Save and sync your games to the cloud
• Operate live rooms (join codes, real-time updates, chat, accusations)
• Process payments and prevent fraud
• Respond to support requests and enforce our Terms of Service
• Confirm delivery and use of digital packs, administer the Pack Fit Promise, and respond to payment disputes
• Maintain security, debug issues, and improve reliability
• Measure which campaigns lead to trials, completed games, and purchases so we can improve the customer journey

We do not sell your personal information to third-party marketers.

4. How we share information

We share information only with service providers that help us run the Service, including:

We may also disclose information if required by law, to protect rights and safety, or in connection with a business transfer (e.g., acquisition).

5. Data retention

• Account data is kept while your account is active. You may request deletion (see Section 8).
• Saved games remain until you delete them or close your account.
• Live room data (chat, players, game state) is temporary and may be removed after rooms expire or are closed (typically within days, up to approximately 7 days for inactive rooms).
• Server logs are retained for a limited period for security and troubleshooting.
• First-party analytics events are retained for up to approximately 400 days and do not include account email addresses, player display names, chat messages, or payment-card details.
• Digital purchase usage records are retained for up to approximately 2 years. They use an internal account ID rather than an email address and do not contain player names, chat, game answers, or payment-card details.
• Stripe retains payment records according to its policies and legal obligations.

6. Cookies & local storage

We use essential browser storage for sign-in sessions (via Supabase), a local player ID so you can rejoin a live game after refreshing, and random first-party analytics identifiers used to connect campaign visits with product milestones. We do not use third-party advertising cookies or session-replay tracking.

You can clear site data in your browser settings; doing so may sign you out or require rejoining live games.

7. Security

We use industry-standard practices including HTTPS, hosted authentication, and secret key management on our servers. No method of transmission or storage is 100% secure; use a strong, unique password and keep it confidential.

8. Your choices & rights

Depending on where you live, you may have rights to:

• Access or export personal data we hold about you
• Correct inaccurate account information (via Account settings or email)
• Delete your account and associated saved games
• Cancel subscriptions via the Stripe billing portal
• Object to or restrict certain processing where applicable law provides

To make a privacy request, email thesasquatchninja@proton.me from the address associated with your account. We may verify your identity before fulfilling requests.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. Mystery games may be played by mixed-age groups at in-person events under adult supervision; account holders should be 13+. Contact us if you believe a child has provided personal information without appropriate consent.

10. International users

Our Service is operated from the United States. If you access the Service from other regions, your information may be processed in the U.S. and other countries where our providers operate. We take steps to use reputable processors with appropriate safeguards.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page with an updated date. Continued use of the Service after changes take effect means you accept the updated policy.

12. Contact

Privacy questions or requests: thesasquatchninja@proton.me

See also our Terms of Service.