Privacy

Privacy policy

Valid from 18 October 2026

1. Controller

The controller of your personal data is Treasure Hunt s.r.o., Platnéřská 88/9, Staré Město, 110 00 Praha 1, Czech Republic, company ID (IČO) 05497230, VAT ID CZ05497230, registered in the Commercial Register kept by the Municipal Court in Prague, file C 264679. Contact for any privacy question: e-mail info@tablettreasurehuntprague.cz, phone and WhatsApp +420 775 961 430.

2. What data we process and why

  • Buying a code – your e-mail, name, country (and address, if you enter it), what you bought, the price and the time of the order. We need them to send you the code, to provide the game and to deal with complaints (performance of the contract).
  • Payment – card or payment details are entered only on the payment page of Stripe; we never see your full card number. We receive confirmation of the payment and basic details about it.
  • Invoices and accounting – the tax document with your name and the order is kept as required by tax and accounting laws (legal obligation).
  • Using the code and playing – the code, when it was first used, a random identifier of each phone that used it (to allow at most 2 phones), and the progress of your game: the team name you choose, times and solved tasks. Game progress is kept on your phone; the team name and results may be sent to us so that the game works and, if you want to compete, so that you can appear in a leaderboard (performance of the contract).
  • Location – the game uses your phone’s location only on your phone, to open tasks when you are at the right place; we do not store your location.
  • Communication – messages you send us and our replies (legitimate interest in dealing with your requests).
  • Website – our hosting provider keeps technical logs (such as IP address and time of access) to run the site securely. We do not use analytics or advertising cookies; the game stores only what it needs to work in your browser (your progress and access).

3. Who processes data for us

We use these providers, who process data on our behalf or as independent controllers for their own service: Stripe (payments), Google (storing orders and sending e-mails with codes, website fonts), Vercel (website hosting), Fakturoid (invoices) and our accountant. Some providers may process data outside the EU; in that case they use safeguards required by the GDPR, such as the EU standard contractual clauses or the EU–US Data Privacy Framework.

4. How long we keep data

  • orders and codes: for the validity of the code and then for the time needed for complaints and claims, at most 3 years after the purchase,
  • tax documents: 10 years, as required by law,
  • game results: until you ask us to delete them, at most 3 years,
  • messages: as long as needed to deal with your request, at most 3 years.

5. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict its processing, to data portability and to object to processing based on our legitimate interest. Write to us at the contact above. You may also file a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, www.uoou.cz).