Privacy policy

Who we are

Cluejoy is a web app operated by Cluejoy (cluejoy.com), Netherlands. Contact: hello@cluejoy.com.

What we collect and why

While you build a hunt: what you type (recipient's first name, age group, hiding spots, gift, options) is saved only in your own browser (localStorage) so your hunt survives a page refresh. We do not receive it until you start checkout.

When you start checkout: we store your hunt (the text of the clue cards and your choices) on our server so we can deliver it after payment. Unpaid hunts are deleted automatically after 30 days.

After you pay: we keep your paid hunt linked to your order or license key so you can unlock and download it again on any device. We store the license key only in encrypted form. Legal basis: performing our contract with you (Art. 6(1)(b) GDPR).

Free Christmas hunt (email sign-up): if you ask for the free sample hunt, we store the email address you enter, the time you ticked the consent box (and which version of the consent text you saw), your chosen paper size, your language, when you first and last asked, and how many times you asked. We do this only with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by emailing us. We are not sending any emails yet: the download links are shown on the page straight away. If we start sending emails later, we will only write to addresses that gave this consent, and every email will include an unsubscribe link. To limit abuse, we count sign-up requests per network for about one hour using a one-way hashed (not readable) version of your IP address; we do not store your IP address itself.

Christmas Morning Bundle: if you buy the bundle, we store your order number, the hunts you create with it (up to two, with the same hunt data as above), which of the two hunt slots are used, and whether the order was refunded. The certificate, tickets and letters are filled in with the name, gift and date you type when you create them; we use these details only to produce the printable and do not keep them after that. If the order is refunded, we mark it as refunded and both hunts and every unlock link and token for them stop working.

Payment: Lemon Squeezy is our reseller and Merchant of Record. It collects your name, email address, billing country and payment details and processes them as an independent controller under its own privacy policy. We never see your full card details. From Lemon Squeezy we receive the order status, order number, product, amount, your email address and your license key status.

We do not use analytics, advertising trackers or third-party cookies on this site. The Lemon Squeezy checkout window is loaded from Lemon Squeezy only when you start checkout and may use its own cookies.

Who processes data

Lemon Squeezy, LLC (payments, invoicing, tax, refunds; Merchant of Record and independent controller for payment data) - lemonsqueezy.com/privacy.

Cloudflare, Inc. (hosting and storage of hunts, bundle orders and free-hunt sign-ups; processor on our behalf) - cloudflare.com/privacypolicy. Data may be processed outside the EU under the providers' standard contractual clauses or other approved safeguards.

How long we keep it

Unpaid hunts: up to 30 days. Paid hunts and bundle orders: until you ask us to delete them, so you can re-download your purchase. Free-hunt sign-ups: until you withdraw your consent or ask us to delete them. Hashed request counters: about one hour. Order and invoice records are kept by Lemon Squeezy as tax and accounting law requires.

Your rights

You can ask for access to, correction or deletion of your data, restriction of or objection to processing, and a copy of your data, by emailing hello@cluejoy.com. Include your order number or license key so we can find your hunt. For payment data you can also contact Lemon Squeezy directly. You can also complain to your local data protection authority.

To clear what is stored in your browser, delete this site's data in your browser settings.