Version cye-2026-10-25-v4
1. Controller
The controller for this shop is Dream Studio OÜ, registry code 14226430, address Kaera tn 14, Tõrvandi alevik, Kambja vald, 61715 Tartu maakond, Estonia. Send privacy questions and rights requests to info@canyouescape.eu.
2. Purchases, game access and customer support
For orders we use the buyer’s name and email, language, products, quantities, amounts, order and payment references and payment status. Fulfilment records link the order, game and issued access and record issuance and email status. Necessary information enables us to enter into and perform the contract (GDPR Article 6(1)(b)); without it we cannot fulfil the order. Full card or bank authentication details are not entered into our checkout: payment takes place in the payment provider’s environment.
Game operation processes access details, progress and start/completion events. For the start confirmation given by the player at the first START, we retain the version and hash of the confirmation text, the terms version, language, confirmation time and the link to the access and the purchase. The confirmation is recorded as the player’s action, not as proof that the player was the buyer. These records support performance, required information and, where necessary, legal claims; they are not marketing consent. Access links are personal: share access only with the intended gift recipient.
Contact requests use the name, email, language and message you provide. Withdrawal statements additionally contain the purchase description, statement, receipt time and acknowledgement status. Processing supports replies, contract performance and legal duties (Article 6(1)(b) and (c)). Necessary evidence for disputes is based on legitimate interests in protecting our and customers’ rights (point (f)). Accounting is based on a legal obligation (point (c)). Invoice details are requested separately when you ask for an invoice.
3. Gift recipients and partner vouchers
For direct gift delivery, the buyer supplies the recipient’s name and email. We use these to send the gift and instructions and arrange access. The source is the buyer; the basis for recipient data is our legitimate interest in delivering the purchased gift (Article 6(1)(f)). This does not subscribe the recipient to a newsletter. Ask about the source or object at info@canyouescape.eu.
A partner-voucher request uses email, language, the selected sales channel, voucher code and any message you provide. These allow verification of entitlement and a reply. Where necessary, a code is checked with its issuer. Provide only the information needed to handle the request.
4. Free demo and newsletter
The B-12 demo form asks for email and language and asks you to confirm a newsletter subscription. A confirmation email is sent first; opening the email or link does not confirm subscription. You confirm using a button on the page. We retain the request time, source, confirmation time and a secure confirmation identifier. Newsletter processing is based on consent (Article 6(1)(a)); the same address is used to deliver the demo.
Unsubscribe by confirming the link in an email or by contacting info@canyouescape.eu. Unsubscribing does not invalidate game access already received or make earlier processing unlawful. Order, service and withdrawal confirmations are necessary service messages, not newsletters.
5. Browser storage and visitor statistics
The shop uses a necessary session cookie to associate an order with its browser and protect forms. It lasts up to 24 hours and may be renewed when the session is used. Product and quantity storage preserves your cart; payment-attempt and order references may remain for the tab’s session. Cart storage remains until emptied or browser data is cleared. Your consent preference is stored in the browser to remember your choice.
Optional visitor statistics start only with your consent. Withdraw it through statistics settings on public pages. DNT or GPC signals suppress collection. Declining does not prevent purchases. Once you agree, random browser and visit identifiers are used; a visit ends after 30 minutes without a measured page or focus event. The browser identifier remains until consent is withdrawn or storage is cleared. These identifiers do not reliably identify individual people.
We measure an allowlisted public page path, language, event time and coarse device class. Other URL query parameters and fragments, emails, form contents, passwords, game codes and personal-link tokens are excluded. Checkout, payment-result and personal access/approval pages are excluded. New collection does not record screens, keystrokes, mouse movements or session replay. Daily visitor identifiers derive from a random identifier, not an IP/browser fingerprint. Raw IP addresses and full user-agent headers are not stored in statistics.
A consented visit triggers one operator notification through ntfy for that visit. It contains an event type and opaque reference, not form details or personal links. Verified-sales reports use order records, not purchase-button clicks, based on our legitimate interest in understanding business performance. Visit identifiers are not joined to buyers to attribute purchases.
6. Recipients and security
Authorised support staff and payment, email, server-hosting, operator-notification and accounting providers receive the information needed for their tasks. LHV/EveryPay handles payments and returns references and results. The payment provider may act as an independent controller for its own duties. Customer emails and messages to responsible staff pass through email services; ntfy operator messages contain limited event information. Information may be disclosed to competent authorities where legally required.
Administrative access is restricted by duties. Servers check payment status, access rights and form origin and limit abusive requests; connection information is used for security on the basis of legitimate interests. You can ask a person to review an erroneous automated failure or restriction. For information about providers, their roles, processing locations and safeguards for any international transfers, contact info@canyouescape.eu. We do not claim that every copy of an email remains on our servers.
7. Retention
Accounting source documents are retained for the statutory seven years from the end of the relevant financial year. The need for other order, access, consent and support data depends on contract performance, validity of unused access, an unresolved request, applicable claim limitation periods and a particular dispute or legal duty. Game expiry does not automatically delete the purchase or confirmation evidence. These criteria do not justify retaining all information indefinitely.
Unconfirmed newsletter requests expire and are removed after 30 days. Daily statistics keys and statistics request-quota hashes are removed on the second following Tallinn calendar day. Demo abuse-prevention hashes are removed after 24 hours. Aggregate statistics have a 400-day retention limit and detailed visit histories a 90-day limit; cleanup is periodic, not at the exact second of expiry. New collection adds no screen recordings to historical data.
Notification-queue content is retained for sending or resolving a delivery problem. Technical sending evidence and identifiers preventing duplicate messages may remain after content is removed. Queue cleanup does not delete the original order, request, customer correspondence or the recipient’s mailbox copy. Deleting a backup and deleting an active record are separate actions. In response to a data request, we explain the basis for retaining the particular data and any limits on deletion.
8. Your rights
You may request access and a copy, correction of inaccurate data, erasure, restriction and, subject to the law, portability. You may object on grounds relating to your situation to processing based on legitimate interests. You can always object to direct marketing. Consent can be withdrawn at any time without affecting the lawfulness of earlier processing. Mandatory retention or necessary defence of a claim may limit erasure.
Contact info@canyouescape.eu. We verify identity proportionately where needed. We respond without undue delay, normally within one month. Complex or numerous requests may allow a statutory extension of up to two further months; we explain the reason during the first month. You may complain to the Estonian Data Protection Inspectorate (https://www.aki.ee/) or the competent authority where you live or work and seek a judicial remedy. Contacting us first is not a condition for complaining.
We publish a new version when this policy changes. Any new use requiring consent needs new consent.