Last Updated: January 23, 2026
1. Introduction
Welcome to Letter Left Behind ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our treasure hunt game service.
2. Information We Collect
2.1 Information You Provide
When you book a game or use our services, we may collect the following information:
- Contact Information: Name, email address, phone number
- Booking Details: Preferred date and time, number of players, payment method
- Game Data: Player names, team names, game progress, scores, completion times
- Personal Messages: Any personal messages you choose to include in your booking
- Communication Records: Support requests, feedback, and correspondence
2.2 Automatically Collected Information
We may automatically collect certain information when you use our service:
- Device information (browser type, operating system)
- IP address and location data (for game functionality)
- Game session data and progress
- Usage patterns and preferences
3. How We Use Your Information
We use the collected information for the following purposes:
- To process and manage your game bookings
- To send game links and confirmations to you and your designated recipients
- To provide customer support and respond to inquiries
- To improve our game experience and services
- To analyze game performance and player engagement
- To comply with legal obligations
- To prevent fraud and ensure security
4. Data Storage and Security
4.1 Data Storage
Your data is stored securely using Firebase (Google Cloud Platform) with the following measures:
- Data is encrypted in transit and at rest
- Access is restricted to authorized personnel only
- Regular security audits and updates
- Compliance with industry-standard security practices
4.2 Data Retention
We retain your data for the following periods:
- Booking Information: Retained for 2 years after your last booking or until you request deletion
- Game Session Data: Retained for 1 year after game completion
- Support Communications: Retained for 1 year after resolution
- Feedback and Reviews: Retained indefinitely (may be anonymized)
You may request deletion of your data at any time by contacting us at meghana.shettigar@gmail.com.
4.3 Data Location
Your data is stored on servers located in regions operated by Google Cloud Platform. By using our service, you consent to the transfer and storage of your data in these locations.
5. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- Service Providers: With trusted third-party service providers (e.g., Firebase, EmailJS) who assist in operating our service, subject to strict confidentiality agreements
- Legal Requirements: When required by law, court order, or government regulation
- Safety and Security: To protect our rights, property, or safety, or that of our users
- Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)
6. Your Rights and Choices
You have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data (subject to legal obligations)
- Objection: Object to processing of your data for certain purposes
- Data Portability: Request transfer of your data to another service
- Withdrawal of Consent: Withdraw consent for data processing where applicable
To exercise these rights, please contact us at meghana.shettigar@gmail.com.
7. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Remember your game progress and preferences
- Analyze usage patterns and improve our service
- Ensure security and prevent fraud
You can control cookies through your browser settings, though this may affect service functionality.
8. Children's Privacy
Our service is designed for users aged 13 and above. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately, and we will delete such information.
9. International Data Transfers
Your data may be transferred to and stored in countries outside your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the updated policy on this page
- Updating the "Last Updated" date
- Sending an email notification for significant changes
Your continued use of our service after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
We will respond to your inquiry within 30 days.
12. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), we process your personal data based on:
- Consent: When you provide explicit consent for specific processing activities
- Contract Performance: To fulfill our contractual obligations to provide game services
- Legitimate Interests: To improve our services, ensure security, and prevent fraud
- Legal Obligations: To comply with applicable laws and regulations
13. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected, used, and shared
- Right to delete personal information (with certain exceptions)
- Right to opt-out of the sale of personal information (we do not sell personal information)
- Right to non-discrimination for exercising your privacy rights
14. Data Breach Notification
In the event of a data breach that may affect your personal information, we will:
- Notify affected users within 72 hours of becoming aware of the breach
- Report to relevant data protection authorities as required by law
- Take immediate steps to contain and remediate the breach
15. Limitation of Liability
While we implement industry-standard security measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data. By using our service, you acknowledge and accept this risk.
Last Updated: January 23, 2026
Effective Date: January 23, 2026
← Back to Booking