Privacy Policy

WhatsWalking respects your privacy. This policy explains what we collect when you buy or play a hunt, and why.

What we collect

• Email address — to send your access code and order confirmation
• Selected play date — to help you plan and align refunds
• Billing address, phone number, and optional tax ID (NIF) — collected by Stripe at checkout
• Checkout phone is stored for order support; any WhatsApp number can redeem the access code
• WhatsApp phone number — when you message us to play (from Twilio/Meta)
• Payment details — processed by Stripe; we do not store card numbers
• Hunt progress — to run the experience and improve content

How we use it

To deliver your hunt, provide customer support, prevent fraud, and improve our routes. We do not sell your personal data.

Processors

We use Stripe (payments), Resend (email), Supabase (database), Vercel (website hosting and privacy-friendly page-view analytics), Render (hunt engine), and Twilio/Meta (WhatsApp messaging). Each processes data under their own terms and, where applicable, data processing agreements.

Retention

We keep order and play data as long as needed for support, accounting, and product improvement. You may ask us to delete your contact details where we have no legal obligation to retain them.

Your rights

If you are in the EU/EEA or UK, you may have rights to access, correct, delete, or restrict processing of your data. Contact hello@whatswalking.com.