1. Scope and acceptance
Escape Scenario provides facilitator-led online learning and team-development activities. This Privacy Policy explains how we handle personal information when people visit escapescenario.com, create an account, join a facilitated room, use room or presentation access, request support, seek education eligibility, or purchase access when checkout is available.
By accessing or using the Service after this Privacy Policy and the Terms of Service are conspicuously presented or linked, you acknowledge this Privacy Policy and agree to the Terms of Service, which incorporate this Privacy Policy and include informal-resolution and individual-arbitration provisions. This Privacy Policy describes our information practices and does not limit rights that cannot be waived under applicable law.
Participants can join without an account. A nickname, room-scoped identifier, device session, and activity data are still processed so the session can operate and reconnect. A facilitator or organization may separately control how it uses information or results outside the Service.
2. Information we collect
- Account information, such as email address, account identifier, optional display name, authentication status, preferences, and account history.
- Participant and room information, such as nickname, room membership, team assignment, progress, submissions, scores, results, room settings, facilitator actions, and session continuity data.
- Commerce and eligibility information, such as selected plan, capacity, discount or education-verification status, transaction reference, payment status, and limited billing information from the payment provider. We do not intend to receive full payment-card numbers.
- Support and legal communications, including the message, contact information, and privacy-safe diagnostics supplied by the sender.
- Technical and operational information, such as essential cookies or local storage, browser and device information, IP address and request metadata processed by providers, sign-in and authorization events, errors, security events, and limited first-party product analytics.
3. How we use information
We use information to provide accounts, rooms, live synchronization, scoring, results, recovery, support, education review, and paid access; enforce account, role, room, capacity, and entitlement boundaries; prevent fraud and unauthorized access; maintain and improve the Service; communicate material service, security, billing, or policy information; comply with law; and protect legal rights.
We do not use activity scores to make employment, admission, credit, insurance, medical, housing, or other decisions that produce legal or similarly significant effects.
4. How we share information
We share information only as reasonably needed with service providers that support hosting, database, storage, authentication, email, security, analytics, and payment processing; with facilitators, authorized room operators, participants, or presentation screens according to their role and the activity phase; with professional advisers or authorities when legally necessary; or with a successor in a business transaction subject to applicable protections.
We do not sell personal information for money or share it for cross-context behavioral advertising. We do not use advertising cookies.
5. Cookies and tracking choices
The Service uses storage that is necessary for sign-in, participant-session continuity, security, and requested features. Disabling it may prevent sign-in, joining, or reconnection. We may use limited first-party operational analytics, but not to create an advertising profile across unrelated services.
Because we do not currently conduct cross-site behavioral advertising, browser Do Not Track signals do not change a separate advertising practice. If we introduce a covered tracking practice, we will provide any notice, consent, or opt-out required by law and will honor legally required preference signals.
6. Retention and security
We keep information only as long as reasonably needed for the Service, account or room history, support, security, purchases, disputes, legal obligations, and backup rotation. When information is no longer needed, we delete it, deidentify it, or restrict it until deletion is possible. Some transaction, security, audit, or completed-room records may need to be retained.
We use safeguards designed for the information we handle, including server-side authorization, account- and room-scoped access, database access controls, expiring or revocable credentials, private-media controls, audit records, and redaction of secrets from ordinary diagnostics. No online service can guarantee absolute security.
7. Your choices and privacy requests
Depending on where you live and subject to legal exceptions, you may have rights to access, correct, delete, or obtain a copy of personal information, or to object to or restrict certain processing.
Email support@escapescenario.com with the subject "Privacy Request." Describe the account, room, or interaction well enough for us to locate the information. Do not send passwords, access tokens, full payment-card numbers, protected scenario answers, or unnecessary identity documents. We may request reasonable information to verify identity and authority. Use the subject "Privacy Appeal" to request reconsideration of a denied request.
8. Children and schools
Facilitator accounts are intended for people age 18 or older. The ordinary public Service is intended for participants age 13 or older. A minor may participate only with appropriate permission and adult or organizational supervision.
The ordinary public Service is not intended for children under 13. Facilitators must not invite a child under 13 to submit information through it. Education pricing does not mean that Escape Scenario has entered into a school contract or satisfies FERPA, COPPA, state student-privacy laws, or local school requirements. Schools must not provide education records or use the ordinary Service with children under 13 unless an approved agreement and the necessary notice, consent, access, security, deletion, and vendor controls are in place.
9. U.S.-first operation, changes, and contact
Escape Scenario is operated from the United States, and information may be processed in the United States or other countries where providers operate. The current launch posture is U.S.-first and does not claim readiness for every international market.
We may update this Policy prospectively. We will post the new effective date and provide additional notice or obtain consent when required.
Use support@escapescenario.com for all privacy, child-privacy, security, or legal inquiries. Do not send passwords, access tokens, full payment-card numbers, protected scenario answers, or unnecessary sensitive information.