Privacy Policy

1. What data does the policy apply to?

The policy describes the processing of data for authors and recipients of Little Quest quests, as well as people whose names or photos are added to the story. The person responsible for the processing of personal data is Viacheslav Starykov. The contact address in Spain is listed below.

2. What do we get and why?

• Gift contents: names, texts, answers, chapter settings and uploaded photos - for creating, storing and displaying the quest. This data is entered by the author; they can apply to the recipient and other people.
• Author access: hash of a random secret from a cookie - to limit editing of gifts. The secret itself is stored in the browser. Previously created gifts may retain the owner ID provided by the platform.
• Walkthrough: session ID, stages, start and end times - to show the author the result of the game. Ratings and comments are sent only at the request of the player and are visible to the author.
• Support requests: your email, the content of the correspondence and the information provided - to answer the question and fulfill requests for data. Mandatory requests are also processed on the basis of a legal obligation, Article 6(1)(c) GDPR.
• Data on the device: a draft with photos, sound settings and temporary progress - to restore work. The draft is not sent to the server automatically.

When a site is accessed, the infrastructure processes network and technical information necessary to deliver pages and secure the connection, including the IP address. Specific infrastructure logs, their timing and location will be specified for the selected public hosting. The current version does not collect payment information.

3. Processing grounds

The author's data, necessary to provide the requested service, is processed to fulfill the agreement with the author. Protecting access and providing a quest addressed to the recipient is related to the legitimate interests of the service and the author, taking into account the rights of the recipient and other people. Articles 6(1)(b) and 6(1)(f) GDPR apply respectively. When contacted by a person whose data was added by the author, we evaluate the need for further processing and his rights. If consent is required by law for certain processing, it must be requested separately: the mere fact of opening a page does not count as consent for any purpose.

We do not use quest content for advertising profiling and do not make automated decisions with legal consequences based on it. The current application does not include advertising or analytical trackers.

4. Who can see the data

The quest is available via a unique link to anyone who has received it and has access to the site. The recipient can save the photos and pass the link on. Therefore, do not add documents, passwords, banking information, or sensitive information.

The work uses the Sites hosting infrastructure and Cloudflare storage. Their role, contractual terms, processing regions and grounds for international data transfer must be clarified for public placement before launch. We do not promise storage exclusively in any country without such verification.

5. How long is data stored?

Access to each personal photo is closed 72 hours after uploading. Changing the text does not extend this period. Automatic deletion is provided for expired files; physical removal may be delayed due to technical failures. The service does not control copies saved by recipients on their devices.

Texts, settings, progress information and reviews are saved until the gift is deleted by the author. If the deletion is successful, the gift, associated photos and reviews are deleted, and the link stops working. If the deletion was unsuccessful, it must be repeated.

Correspondence regarding requests is stored until the issue is resolved; Information necessary to fulfill legal obligations or defend claims may be retained for appropriate legal periods, with use limited to that purpose.

The editor cookie is valid for up to a year. A draft older than seven days is deleted the next time the workshop is opened. Progress older than 72 hours is not used for recovery. More details in cookie policy.

6. Your rights and deletion

Depending on the applicable law, you may request access to your data, correction, erasure, restriction of processing, portability, and object to processing on the basis of legitimate interest. If processing is based on consent, it can be withdrawn without invalidating the lawfulness of the previous processing. You can also contact the competent data protection authority.

The author can correct or delete the gift in the workshop. The recipient and the person in the photo do not need author access to contact: write to support@littletrip.app. To search for data, just a link to the corresponding quest and a description of the request; do not post them in open comments. If necessary, reasonable verification of the applicant's relationship with the data may be required. Typically the response is provided free of charge within one month; For complex or numerous requests, the period can be extended to another two months with notice in the first month.

The complaint can be sent to Agencia Española de Protección de Datos (AEPD) or other competent EU supervisory authority.

7. Safety and photos of other people

Editing is limited to checking access on the server. Clearing cookies or switching to another browser will deny access to gifts; the recipient link does not restore this access. On a shared device, other browser users can access the workshop.

Download materials only if you have the necessary rights and legal basis. Be especially careful when handling photographs of children; do not add them without the necessary permissions from your legal representative. Demonstration characters and tickets on the main page are fictitious.

8. Policy changes

If the processing changes, we will update this page and the revision date. Significant new processing purposes will be accompanied by the necessary notice and, where required, separate consent.