Privacy policy

1. About this policy

This policy explains what personal information Lucid Escape collects when you use lucid-escape.pages.dev, what we use it for, who we share it with and what rights you have. By booking, sending a message, writing a review or creating an account, you agree to the data handling described below.

2. Information we collect

Only what we need to serve you:

• When you book: the lead player's name, team name, phone number, email, Facebook link (if given), team size, date and time, notes, voucher code and deposit status.
• When you create an account: your email and password (stored encrypted — we can't see it). If you sign in with Google: the name, email and profile picture you allow Google to share. We never receive your Google password.
• When you contact us: your name, email and/or phone number and your message.
• When you write a review: display name, rating, comment and photo (if any). Approved reviews may be shown publicly on the site.
• Solved cases: team name, team size, escape time and team photo (if the team agrees) may be published.
• Technical data: your IP address, one-way hashed (the original IP isn't stored), to stop spam and rate-limit forms; anonymous page-view statistics (see section 5).

3. How we use it

• Hold your session, confirm deposits, send booking/cancellation emails and contact you about your booking.
• Show your booking history in your account.
• Reply to messages and help when you need it.
• Prevent spam and fraud and keep the site secure.
• Understand how the site is used (popular pages, where visitors come from) to improve our service.

We don't sell your information and don't send you marketing without your consent.

4. Sharing with third parties

We only share data with the service providers the site needs to run, and only as much as they need:

• Supabase — database, sign-in accounts and photo storage.
• Cloudflare — website hosting, bot protection (Turnstile) and secure connections.
• Resend — booking, cancellation and password-reset emails.
• Google — only if you choose to sign in with your Google account.
• Banks — when you pay the deposit by QR transfer; the payment is handled by your bank.

We may disclose information when required by a competent authority under Vietnamese law.

5. Cookies, browser storage and visit statistics

The site itself sets no advertising cookies. Your browser keeps a few small items (localStorage / sessionStorage) so the site works:

• Your account sign-in session.
• The language you chose.
• A random ID per visit (renewed after 30 minutes of inactivity) used to count page views anonymously. It isn't linked to your name, email or phone, and statistics are deleted automatically after 13 months.

You can clear these at any time in your browser settings.

6. Storage and security

Data is stored with the providers in section 4 and sent over encrypted (HTTPS) connections. Only Lucid Escape staff with an admin account can see bookings and messages; a customer account can only see its own bookings.

We keep booking information as long as needed to serve you, handle complaints and keep accounting records. Bookings with a deposit are kept for payment reconciliation; when you ask for deletion we delete or anonymise personal details that are no longer needed.

7. Your rights

Under Vietnamese personal data protection law (Decree 13/2023/ND-CP), you have the right to:

• Know about and see the personal data we hold about you.
• Ask us to correct inaccurate data.
• Ask us to delete your data or your account.
• Withdraw consent, object to or ask us to restrict processing.
• Complain if you believe your data was mishandled.

8. How to request data deletion

To delete your account (including accounts that sign in with Google) or your personal data, contact us by email, phone or our Fanpage (section 10) with your account email or booking code. We'll verify you own the data and act within 30 days.

If you signed in with Google, you can also remove Lucid Escape's access at myaccount.google.com → Security → Third-party apps and services.

9. Under-16s

People under 16 should book or create an account together with a parent or guardian.

10. Contact

For questions about this policy or requests about your personal data, contact:

11. Changes

We may update this policy as the site changes. The latest update date is always shown at the top of this page.