Privacy policy

1. Who we are

We are Red Threads. We are responsible for the data you leave on the site and process it under the EU General Data Protection Regulation (GDPR). For any question about your data, write to hello@redthreads.games.

2. What we process

Your email address — for your profile, sign-in links, purchase and gift emails.

Order data: what was bought, amount, date, promo code used, payment status.

Game data: trips, questions, report answers, time played, result, team members. Other players in your team see the part of your email before “@” as your nickname.

For gifts — the recipient’s email, the sender’s name and the message.

Technical data: IP address and browser details in server logs, needed for security.

Card details are processed by Stripe; we never see or store them.

3. Purposes and legal bases

To perform the contract: give access to cases, take payment, save team progress — Art. 6(1)(b) GDPR.

To meet accounting and tax obligations — Art. 6(1)(c) GDPR.

To protect the service from abuse and keep the ranking fair — our legitimate interest, Art. 6(1)(f) GDPR.

We do not send marketing emails without your separate consent.

4. Cookies and browser storage

We use only necessary cookies: rt_session (keeps you signed in, 90 days) and rt_in (shows that you are signed in). They do not require consent.

Browser storage keeps your preferences: map style, music volume, whether you have seen the tutorial. This data stays on your device.

There are no analytics or advertising cookies at present. If we add any, we will ask for consent first.

5. Who receives data

Stripe Payments Europe Ltd. — payments.

Resend — sending emails.

[Hosting provider] — hosting the site and database.

Some of these companies process data outside the EEA (for example in the US). Transfers rely on the European Commission’s adequacy decision (EU–US Data Privacy Framework) or EU standard contractual clauses.

We do not sell personal data.

6. How long we keep data

Profile and game data — while your profile exists. You can ask us to delete it by email.

Server logs — up to 90 days.

7. Your rights

You can ask for access to your data, correction, erasure, restriction, portability, and object to processing based on legitimate interest.

Write to hello@redthreads.games — we reply within one month.

8. Children

People of any age can use Red Threads. Under Latvian law, a person can consent to the processing of their data by online services from the age of 13. If a player is under 13, their profile is created with the consent of a parent or guardian.

We collect the same minimal data from children as from adults and never use it for advertising.

If you find out that a child under 13 gave us their data without your consent, write to us and we will delete it.

9. Changes

If this policy changes, we will update the version date and tell you about important changes by email.