Legal

Privacy Policy

Effective: October 13, 2026

This policy explains what information Rondus Entertainment collects, why, how long it is kept, and how to ask for it to be deleted.

1. Who is responsible

Rondus Entertainment is operated by Rondus LLC, registered in Washington State, United States. Rondus LLC is responsible for the information described here. Contact us through rondusentertainment.com/contact.

2. Information from account holders

  • Email address and sign-in credentials (passwords are stored only in encrypted form by our authentication provider).
  • A display name you choose for games and community features.
  • Game progress: journey progress, story completions, Mastery rounds and scores, certificates, Arena results and trophies.
  • Content you post, such as comments, reactions or parable submissions.

3. Information from Heritage Live guests

Guests can join a game without an account. Even so, we collect:

  • Display name — up to 30 characters, shown to the host and other players in that game. If you type your real name, it is personal information. Please use a nickname.
  • Session cookie — a security cookie that keeps your seat if you reconnect. It holds a random code; we store only a scrambled (hashed) version of that code.
  • Gameplay records — your seat, answers, answer times and score in that game.
  • Network information — values derived from your IP address are used in short-lived counters that limit abuse and automated flooding.

4. Contact and newsletter information

When you use the contact form we collect your name, email, subject and message. Values derived from your IP address are used to prevent spam. Newsletter sign-ups store your email address.

5. Cookies

  • Sign-in cookies or storage keep you logged in.
  • The Heritage Live guest cookie is limited to one game, cannot be read by page scripts, is sent only over secure connections, and expires in your browser after 4 hours.
  • We do not use advertising or cross-site tracking cookies.

6. How long we keep information

Cookie expiry is not the same as deletion. When the guest cookie expires after 4 hours, your browser can no longer reconnect to that seat, but the game's stored records (display names, seats, answers and scores) remain in our database.

  • Game and account records remain stored until they are deleted following an applicable request, a specific administrative action, or another lawful retention decision. No automatic deletion schedule currently exists for guest gameplay records or account records.
  • Contact messages are kept so we can respond and keep a record of support requests.
  • If purchases are ever made, payment and tax records are kept as long as the law requires.

7. How we use information

  • To run games, score answers and show leaderboards.
  • To save progress and issue certificates.
  • To answer support requests.
  • To protect the service from abuse, cheating and attacks.

8. Service providers

We do not sell personal information or use it for targeted advertising. These providers process data on our behalf:

  • Cloudflare — website hosting and delivery.
  • Lovable Cloud (built on Supabase) — database, sign-in and server functions.
  • Mailgun — sending email notifications.
  • Stripe — payment processing, if and when paid features are offered. No payments are taken for free features.

9. Children

Rondus Entertainment is for people aged 13 and over and is not directed to children under 13. If you believe a child under 13 has given us information — for example a real name entered as a guest — please tell us through the contact page. We will investigate the report and handle or delete the relevant personal information as required by applicable law.

10. Your choices and deletion requests

There is no self-service delete button yet. To ask for access to, correction of, or deletion of your information, send a request through the contact page.

  • For accounts, we will confirm the request using the email address on the account before acting.
  • Deletion removes your sign-in account and your progress, certificates, favorites, Arena records and roles. Payment and tax records, if any, are kept as the law requires with your account details removed.
  • Account deletions are carried out by our team manually. We aim to complete verified requests within 30 days and will tell you if it will take longer, along with the reason.
  • Guests without an account can also ask for deletion. Please give as many details of the game as you can (such as the date, approximate time, game PIN and display name used). We will assess the request using those details, but we may not be able to identify or match every guest record with reasonable certainty.
  • Applicable legal retention obligations and your rights under applicable privacy laws may affect how and when we can complete a deletion request.

11. Changes to this policy

We may update this policy. The current version will always be on this page.