Privacy
We hold almost nothing about you, for almost no time. This page says exactly what, exactly how long, and how to get rid of it.
Who we are
Outro Party is made by Thoughts in Action BV, the data controller. Write to us at [email protected] and a person reads it.
Mgr. Dr. H. Poelslaan 32, 1187 BC Amstelveen, The Netherlands.
Chamber of Commerce (KvK) 89017587. VAT NL864854717B01.
What we collect, and nothing else
| Who | What we hold | Why |
|---|---|---|
| The organiser | Email address. First name if they give one. | To send the links, the reminders and the receipt. There is no other way to reach you and we do not want one. |
| Contributors | First name, as they type it. The message and question they write. An email address only if they choose to give one. | The name goes in the game, because a message from nobody is worth nothing. The address is used for one reminder and then never again. |
| The receiver | First name. Email address only if the organiser schedules a delivery by email instead of handing the link over themselves. | To deliver the game on the day. That is the whole reason. |
| Everyone | Counts: how many people opened a link, how far through the game someone got. Not tied to a name. | To see whether the thing works. We do not build profiles from it. |
Counts we keep to see whether it works: whether a contributor opened their link and started typing, how far the receiver got in the game, how long it took, and whether the browser reported a technical error. None of that is tied to a name or sold on.
What we deliberately do not collect
- A contributor may add one photo, one voice note of up to 30 seconds and, on Premium, one video of up to 20 seconds; all are optional. We store and show them only after the contributor ticks a box giving explicit consent, shown in plain words before anything is uploaded. Photos are stored without their location and camera data, recordings are converted to a plain audio or video file, we run no face or voice recognition on any of them, and they are shown only inside that one game to the organiser and the receiver. Consent can be withdrawn at any time by writing to us or the organiser, and both are deleted then, and in any case with everything else 90 days after delivery.
- No accounts, no passwords, no logins for contributors or receivers.
- No card details. Our payment provider handles the payment; we never see the card.
- No advertising trackers, no third-party analytics scripts, no social buttons, no fingerprinting.
- No location, no contacts, no address book, nothing from your device.
How long we keep it
- 90 days after delivery, everything to do with that quest is deleted automatically: messages, names, the game itself, the links. It is a scheduled job, not a promise someone has to remember.
- A quest that is never paid for is deleted 30 days after the last thing anyone did with it.
- Ask earlier and it goes earlier, the same day, without a reason and without proving who you are beyond the address you wrote from.
- What survives: the payment record, because tax rules require it. That is an amount, a date and an email address. It contains none of the messages.
Who else sees it
A small number of suppliers, each because the product cannot run without them, and each a processor acting on our instruction only:
- Payment — Stripe Payments Europe, Ltd. They handle the payment and the card; we never see the card number.
- Email — Google (Google Workspace) sends the links, reminders and receipts on our behalf.
- Hosting — [ hosting provider — named here once the production server is chosen ], a server inside the European Union.
We do not sell your data. We do not rent it, share it for marketing, or hand it to anyone who asks nicely. If we are ever legally forced to hand something over, we will tell you unless we are forbidden to.
Your quest is not on the internet
A quest has no public page. It cannot be found by searching, it is not linked from anywhere, and our robots file tells search engines to stay out of every quest path. The only way in is the private link, which carries a 192-bit random token. Guessing one is not realistic; forwarding one to the wrong chat is, so treat the link like a key. Tell us and we will replace it within the hour.
What you can ask for
- A copy of everything we hold about you. You get a small JSON file, usually the same day, automatically.
- Deletion. Same day, automatic, no reason needed.
- A correction, if a name is spelled wrong.
- Your message out of a game, even one already delivered.
Write to [email protected]. Most of these are handled by the system itself within minutes; nobody has to read your request first.
If we get it wrong
If data we hold ends up somewhere it should not, we will tell the people affected directly and say what happened, what it means for them, and what we changed. We would rather say it plainly and quickly than accurately and late.