Privacy

This notice covers The Twenty-Four Days only. It sits alongside the main TCERC privacy policy, which covers everything else we do.

Who We Are

The Cyber Escape Room Co. (company number 13753868, ICO registration ZC074478), Queensgate House, 23 North Park Road, Harrogate, HG1 5PD. Privacy contact: legal@cyberescaperoom.co.

What We Keep

• Your email address, handle and team, so you can sign in and appear on the leaderboards.
• Which doors you opened, your attempts, hints used and points, so we can run the game and the boards.
• Anything you type in a free-text answer.
• Your email choices, and where you came from (for example a link from LinkedIn) if the link told us.
• If you choose to make a certificate, the name you want printed on it. We keep that name so the certificate's link keeps working. We do not ask for, or keep, an address: the certificate is digital.

We use one cookie, to keep you signed in. We do not use advertising or analytics cookies on this site.

Why, and On What Basis

• Running the game and the leaderboards: this is what you asked us to do when you signed up (contract).
• The daily door email and the January follow-up: only if you ticked the box (consent). You can change this at any time on your account page, and every email has an unsubscribe link.
• Making your certificate: only if you choose to, and only with the name you type (your choice). You can remove it at any time from the certificate page.
• Keeping the game fair and secure, including rate limiting: our legitimate interest.

Who Sees It

Your handle, team name and points are public on the leaderboards unless you hide yourself on your account page (your points still count towards your team). Nobody else sees your email address. Free-text answers are only ever shown to other players anonymously, and only after we have read them. A certificate has its own link that anyone you share it with can open; it can't be found through search engines or guessed, and it shows only the name you chose and what you have done in the game.

Where It Lives

Data is stored with Neon (AWS London, eu-west-2) and the site runs on Vercel, both in the UK. Email goes through Resend, which is a US company, under the UK international data transfer terms.

How Long

We delete game accounts, answers and points by 31 March 2027. If you opted in to the January follow-up, we keep your email for that purpose only until you unsubscribe. If you made a certificate, it is deleted with your account, or when you remove it.

Your Rights

You can delete your account yourself, at any time, from your account page. That removes your solves, points and answers. You can also ask us for a copy of your data, or to correct it, by emailing legal@cyberescaperoom.co. We reply within one month. If you are unhappy with how we have handled your data you can complain to the ICO.