My EscapesPrivacy policy
Effective 26 October 2026
My Escapes ("we", "us") is a small independent app for logging and reviewing escape rooms, run by Brennan. This policy explains what we collect, why, who can see it, and how to delete it. If anything here is unclear, email brennan@lupyrypa.com.
What we collect
From your Google account
When you sign in with Google, we receive your name, email address, profile picture and Google account ID. We ask only for the basic openid, email and profile permissions. We cannot see your Gmail, contacts, calendar, Drive files or anything else in your Google account.
What you add
- Escape rooms you log: the game and venue, date, whether you escaped, your time, puzzles, features, photos, scores and comments.
- Voice notes you record to log a room, and the text transcript made from them.
- Friends you connect with, people you tag on a visit, and guest names you type for people who don't have an account.
- Your wish list, Escape of the Day results and streak, and any reports you send about a review.
- Venues and games you add or correct in the public directory.
Collected automatically
- A sign-in cookie that keeps you logged in. We don't use advertising or tracking cookies.
- Small settings saved in your browser, such as sound and graphics preferences.
- Standard server logs (IP address, browser type, the page requested and the time), used to keep the service running and to fix problems.
How we use it
- To sign you in and keep your room, logs and reviews tied to your account.
- To turn a voice note into a transcript, and the transcript into a draft review that you check before saving.
- To show public game, venue and city pages, and to work out average scores.
- To let you add friends, tag them on visits, and see visits you were tagged on.
- To keep the service secure, stop abuse and fix bugs.
We don't sell your data, show ads, or use your data to build advertising profiles.
Google user data
We use the information we receive from Google only to create and run your My Escapes account, as described above. We don't share it with anyone except the service providers listed below that we need to run the app, and we don't use it for advertising. My Escapes' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Who can see what
| What | Who can see it |
|---|---|
| Your reviews (scores and comments) | Anyone, by default, on the public game page, with your name and profile picture. You can set each review to friends-only or private. |
| Visits you were tagged on | The people on that visit. Shared facts, such as the date and escape time, show next to public reviews. |
| Your room, wish list and streak | You. |
| Your email address | Only us. It is never shown on public pages. |
| Voice notes and transcripts | Only you, and the providers that process them (below). |
Service providers
We use a few companies to run My Escapes. Each one only gets what it needs for its job:
- Railway hosts the app and its database, so it stores everything above.
- OpenAI receives voice-note audio to transcribe it.
- Anthropic receives the transcript text to draft a structured review.
- Google handles sign-in. Pages may also link to Google Maps for a venue.
- Google Fonts serves the fonts, so your browser connects to Google to load them.
- Your browser's speech recognition (from Google in Chrome, Apple in Safari, or Microsoft in Edge) may process your voice to show live captions while you record. On the phone this only happens if you turn live captions on. The voice recorder in the desktop 3D room uses it to type out what you say. That processing happens under your browser's own terms, not ours.
OpenAI and Anthropic process this data under their API terms, and we don't let them use it to train their models.
How long we keep it
- Your account and content are kept until you delete them or your account.
- The audio of a voice note is deleted once its transcript is saved. The transcript stays with your review until you delete it.
- Server logs are kept for a short time, normally no more than 30 days.
Deleting your data and other rights
You can edit or delete any review or log at any time. To delete your whole account, use the delete option in the app's settings when it's available, or email us and we'll do it within 30 days. When an account is deleted, its reviews, photos, voice notes and friend connections are removed. On visits shared with other people, your tag becomes a plain name, so their own logs still make sense.
You can also ask us for a copy of your data, ask us to correct it, or object to how we use it. Depending on where you live (for example, the EU, the UK or California), you may have more rights under local law, and you can complain to your data protection authority. You can also remove My Escapes' access at any time from your Google account's third-party connections page.
Security
All traffic uses HTTPS. Sign-in sessions use secure, http-only cookies, and each person's private data can only be read through their own account. No service is perfectly secure, but we'll tell affected users promptly if we learn of a breach.
Children
My Escapes isn't meant for children under 13, and we don't knowingly collect their data. If you think a child has signed up, email us and we'll delete the account.
Changes
If we change this policy, we'll update the date at the top. If the change is significant, we'll also tell you in the app.
Contact
Brennan, My Escapes: brennan@lupyrypa.com