Privacy Policy

CluePanda collects the minimum needed to build your hunt and run your account. We do not sell personal information and we do not show advertising. This policy explains what we collect, why, and the choices you have.

Account details. Your name, email address and a hashed password when you sign up. We never store your password in readable form.

Hunt content. What you type into the builder: the child's first name and age, the theme and play area, clue text, hiding spots and any party details you add to the invitation. Until you save a hunt to your account, a draft is kept only in your browser's local storage on your device.

Technical information. Standard server logs such as IP address, browser type and the pages requested, kept briefly for security and debugging.

Hunts are built by adults about children. The child's first name and age you enter are used only to personalize the printed kit. We do not create accounts for children, do not knowingly collect information directly from anyone under 13, and do not use children's details for any other purpose. If you believe a child has provided us information directly, email us and we will delete it.

• To generate, save and print your hunts.
• To sign you in and keep your account secure.
• To answer support requests and process refunds.
• To send account emails, such as a password reset. We do not send marketing email unless you opt in.
• To understand, in aggregate, how the product is used so we can improve it.

We remember your language choice in a necessary cookie for one year. We suggest a language using the country provided by our hosting service or an approximate country lookup of your IP address on our server. Your IP address is not sent to an external location service for this lookup. If the country is unavailable, we use your browser language. We use authentication cookies so you stay signed in. They are necessary to your account and do not track you across other sites. The builder also keeps your in-progress draft in your browser's local storage so you can pick up where you left off. Your analytics preference is also saved on this device. Clearing site data removes these stored choices and your local draft.

When analytics is enabled on our public website, we ask before loading Google Analytics 4. If you allow it, Google processes usage information such as page visits, builder starts, checkout starts, completed purchases and their value and currency, browser and device information, and approximate location derived from your IP address. Analytics cookies help measure visits across sessions. A separate purchase reference prevents duplicate counting; recent references are also saved on this device.

Our tracking excludes names, email addresses, clue text, invitation details and checkout identifiers. We remove query strings and use generic page names. Advertising storage, Google signals and advertising personalization are disabled.

You can decline and still use CluePanda. Withdrawing consent stops further analytics collection and removes our first-party analytics cookies and stored purchase references; it does not erase data already processed. We also respect your browser's Do Not Track or Global Privacy Control signal by leaving analytics off.

You have not made a choice yet, so analytics is off.

Learn more about Google's privacy practices.

We share information only with providers that help run the service, and only as needed for that purpose:

• Hosting and database providers that store the application and your data.
• An email delivery provider, for account emails.
• A payment processor, when you buy a kit. We never see or store your full card number.
• Google Analytics, only when optional analytics is enabled and you have allowed it.

We may also disclose information if required by law or to protect the safety of our users.

Account and saved hunt data are kept for as long as your account exists. When you delete your account, your saved hunts and personal details are removed within 30 days, except for records we must keep for tax or legal reasons. Server logs are kept for up to 90 days.

You can view and edit your saved hunts in the product, and delete your account at any time. Depending on where you live you may also have the right to access, correct, export or erase your personal information, or to object to certain processing. Email us to exercise these rights and we will respond within 30 days.

Data travels over encrypted connections, passwords are hashed, and access to production systems is limited to the people who need it. No service can promise perfect security, so please use a strong, unique password.

We may update this policy as the product evolves. The date at the top shows the current version, and we will notify account holders of significant changes.

Privacy questions or requests: hello@cluepanda.com.