Privacy Policy

Overview

QuestKey helps adults, parents, educators, and event organizers create and run treasure hunt experiences with QR progression, printable cards, puzzle clues, imports, exports, and optional cloud sharing. This policy describes the categories of information the app or public website may process. Final wording depends on product decisions, enabled services, launch regions, and legal review.

The current static landing website is intended to work without forms, cookies, marketing analytics, tracking pixels, third-party embeds, or external scripts. If those features are added later, this policy must be updated before they are enabled.

Who operates QuestKey

QuestKey is operated by FASELA. Questions about this policy or privacy requests should be sent to support@questkey.club. FASELA must confirm the final response process before launch.

Information the app may process

Depending on how QuestKey is configured and used, the mobile app may process these categories of information:

• Account and authentication information if sign-in is enabled, such as display name, email address, Google or Apple sign-in identifiers, Supabase authentication state, and whether cloud features are enabled.
• Hunt content created, saved, imported, exported, or published by an organizer, including hunt titles, themes, schedules, step counts, clue text, puzzle details, status labels, feature pictures, and related media.
• Private route and setup details, such as private hunt keys, exact step placement notes, creator-only notes, and unpublished draft/private hunt records. These details should be treated as private boundaries unless the product owner later documents a different sharing model.
• QR, PDF, sharing, import, export, file, and deep-link data used to play, print, transfer, or duplicate hunts. Shared/imported copies may include hunt structure and lineage fields, while private keys and local-only media paths require careful owner/legal review before any public claim is made.
• Local settings and app state, such as theme, sound, haptics, saved hunts, imported hunt counts, authored hunt counts, total steps, and published authored hunt counts.
• Support information you choose to send to support@questkey.club, such as your message, contact details, device context, screenshots, or files attached to a support request.

Local device storage

QuestKey may store hunt drafts, imported hunts, settings, generated QR or PDF materials, feature images, local media references, and play/setup state on the user's device. Removing the app, clearing app storage, or deleting a local hunt may remove local copies, but the owner must confirm platform behavior, backup behavior, and any recovery limitations before finalizing this section.

Cloud, account, and public sharing data

If account or cloud features are enabled, QuestKey may use cloud services to authenticate organizers, store owner-scoped hunt records, upload media, and publish selected hunt summaries. Public or published hunt summaries may include title, author display name, theme, step count, publish time, and a hosted feature image URL when available.

Draft hunts, private hunts, creator private keys, exact placement locations, local media file paths, avatar images, ratings, and creator-only notes must not be described as public catalog data unless implementation evidence and legal review support that statement. Product owner must confirm whether cloud browsing, publishing, and account features are adult-organizer only.

Children and parent or guardian review

QuestKey is designed for hunts that may be played by children under adult supervision, but the legal policy for child accounts, consent, age gates, parent-managed use, school use, and child-data requests is not finalized in this policy. Until the owner supplies reviewed legal decisions, assume that adults, parents, guardians, educators, or organizers create accounts, configure hunts, choose locations, review clues and media, and supervise children during play.

Parent or guardian privacy requests should be sent to support@questkey.club. Product owner must confirm whether children may create accounts, whether parental consent is required, how consent is obtained and recorded, how parent access/deletion requests are handled, and whether app store or regional child-privacy disclosures are required.

Retention, deletion, and export requests

Local information may remain on a device until the user deletes a hunt, clears app data, removes generated files, or uninstalls the app. Cloud data may remain until it is deleted by the organizer, removed through a supported account or support process, or retained for a period required by legal or operational obligations that FASELA must confirm before launch.

To request deletion, export, or correction, contact support@questkey.club and include enough detail to identify the account, request, and affected hunt content. Product owner must confirm the implemented deletion/export workflow, identity verification process, response timeline, child-data process, exceptions, and whether published or shared copies can be fully recalled.

Security

QuestKey should use reasonable technical and organizational safeguards for account, cloud, local, and shared hunt data. However, QR codes, printed PDF cards, exported files, shared links, screenshots, and device backups can be copied or forwarded by people who receive them. Organizers should avoid placing sensitive personal information in clues, notes, titles, media, or printable materials unless they are comfortable sharing it with the intended players and recipients.

International and regional privacy review

The product owner must confirm launch regions, service providers, data hosting regions, cross-border transfer disclosures, app store privacy labels, applicable privacy laws, and regional privacy rights. This policy does not finalize regional legal rights, retention periods, lawful bases, consent language, or dispute handling.

Contact

For privacy questions, privacy requests, and product support, contact FASELA at support@questkey.club.