Privacy Policy

Last updated: 13 August 2026

EscaperoomTracker ("we", "us") lets you track the escape rooms you play. This policy explains what personal data we process, why, and the choices you have. It applies to the website (escaperoomtracker.nl) and the EscaperoomTracker mobile app.

Who is responsible

EscaperoomTracker is operated by Gijs Cox (the Netherlands). For any privacy question or request, contact gieske166@gmail.com.

What we collect

• Account data: your email address and username. Your password is stored only as a salted hash, so we never see it.
• Your content: the plays you log (room, date, outcome, time used, rating, and any private notes), and any venues or rooms you add.
• Group data: if you join a group, your membership and the plays you share with it.
• Technical data: basic server logs (IP address, timestamps) needed to run and secure the service.

We do not use advertising trackers, and the app does not track you across other apps or websites.

Why we process it (legal basis)

We process account and content data to provide the service you asked for (performance of a contract), and technical data to keep the service running and secure (legitimate interest). This is done under the EU General Data Protection Regulation (GDPR).

Where it is stored

Data is stored on Microsoft Azure servers in the European Union (West Europe). Traffic is encrypted in transit with HTTPS. On your phone, your login tokens are stored in the operating system's secure keychain.

Sharing

We do not sell your data. Plays you share with a group are visible to that group's members. We use Azure (hosting) and an email provider to send account emails; these process data only on our behalf.

Deleting your account and data

You can permanently delete your account and its data at any time, directly in the app: Profile → Delete account. This removes your account, your logged plays, your group memberships, and groups you own. The action is immediate and cannot be undone.

Prefer not to use the app? Email gieske166@gmail.com from your registered address and we will delete your account and data.

Retention

We keep your data until you delete your account. Server logs are retained for a short period for security and then discarded.

Your rights

Under the GDPR you have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise these rights, contact us at the address above. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Cookies

The website uses only essential cookies required to keep you logged in and to remember your language choice. We do not use analytics or advertising cookies. The mobile app does not use cookies.

Children

The service is not directed at children under 16. We do not knowingly collect their data.

Changes

If we change this policy we will update the date above and, for material changes, notify you in the app or by email.