Privacy Policy

Last updated: January 2026

TreasureRat ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and application (collectively, the "Service").

Information We Collect

Account Information

When you create an account, we collect:

  • Email address
  • Display name (if provided)
  • Profile photo (if you sign in with Google or Apple)
  • Authentication credentials managed by our authentication provider

Hunt Content

When you create hunts, we store:

  • Hunt titles, descriptions, and settings
  • Clues, hints, and answers you create
  • Track configurations for multi-track hunts
  • Theme and customization preferences

Player Information

When players participate in hunts, we collect:

  • Player name (as entered when joining)
  • Email address (optional, for completion notifications)
  • Hunt progress and completion status
  • Location data (only when required for location-based clues, with explicit consent)

Payment Information

Payment processing is handled entirely by Stripe. We do not store credit card numbers or other sensitive payment details. We receive only:

  • Confirmation of successful payments
  • Transaction identifiers for our records
  • The last four digits of your card (for your reference)

Usage Information

We automatically collect:

  • Device type and browser information
  • IP address
  • Pages visited and features used
  • Date and time of access

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our Service
  • Process transactions and send related information
  • Send administrative messages, updates, and security alerts
  • Respond to your comments, questions, and support requests
  • Monitor and analyze usage patterns to improve user experience
  • Detect, prevent, and address technical issues or fraudulent activity

AI-Generated Content

Our Service uses Google's Gemini AI to help generate clue content. When you use the AI generation feature:

  • Your hunt context (title, description, theme) may be sent to Google's API
  • Any custom instructions you provide are processed by the AI
  • Generated content becomes part of your hunt and is stored as described above

We do not use your hunt content to train AI models. Google's use of data is governed by their privacy policy.

Third-Party Services

We use the following third-party services:

  • Firebase (Google) - Authentication, database, and hosting
  • Stripe - Payment processing
  • Google Gemini - AI content generation
  • Google/Apple Sign-In - Optional authentication providers

Each of these services has their own privacy policy governing their use of your data.

Data Sharing

We do not sell your personal information. We may share information:

  • With service providers who assist in operating our Service
  • To comply with legal obligations or respond to lawful requests
  • To protect our rights, privacy, safety, or property
  • In connection with a merger, acquisition, or sale of assets (with notice to you)

Data Retention

We retain your account information and hunt content for as long as your account is active. Player session data is retained for 90 days after hunt completion. You may request deletion of your data at any time.

Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your account and associated data
  • Export your hunt data
  • Opt out of non-essential communications

Cookies

We use essential cookies to maintain your session and remember your preferences. We do not use third-party advertising cookies. You can configure your browser to reject cookies, but this may affect Service functionality.

Children's Privacy

Our Service is not directed to children under 13. Hunt creators must be at least 13 years old to create an account. Children may participate as players in hunts (such as birthday party treasure hunts) under adult supervision, but we do not knowingly collect personal information from children under 13 without parental consent.

Security

We implement appropriate technical and organizational measures to protect your information. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: support@treasurerat.com