VisitPlay

Privacy and cookie choices

Effective October 15, 2026

This privacy policy explains how VisitPlay handles information when you visit visitplay.app, create or use an operator account, or play a VisitPlay-hosted game. An attraction may have its own privacy policy for ticket sales, mailing lists, and other services it provides.

Information we collect and why

• Operator accounts: your name, email address, password hash, account and farm identifiers, memberships, invitations, and sign-in sessions let us provide and secure your workspace. We store a salted password hash, rather than your password. If you add a passkey, we store its public key, credential identifier, nickname, and technical sign-in information. We do not receive your fingerprint or face scan from your authenticator. Operator and administrator registration does not ask for your age or date of birth.
• Farm information: farm name, owner contact details, logo, seasons, and game configuration let operators manage and publish their experiences. Published game copy and branding are visible to guests; uploaded logos are publicly accessible. Do not put private information in public game content or logos.
• Guest games: all current VisitPlay-hosted games keep progress on your device. We do not upload your game save, checkpoint history, selected answers, or local game identifier. Games do not require an account, and operators do not receive per-player activity reports. Opening a game or scanning a sign still makes ordinary website requests. QR tokens identify shared signs, not individual players.
• Requests and security: serving a page exposes request information such as your IP address, requested URL, and browser information to our hosting services. To limit account and website abuse, VisitPlay stores attempt counts with identifiers such as an email or IP address, or a hash of either. The retired guest synchronization endpoint does not record gameplay or create guest rate-limit records. These security records are separate from optional homepage measurement.
• Support: if you email us, we receive your address and the information you include so we can respond. Please avoid sending passwords or unnecessary sensitive data.

VisitPlay currently has no in-app checkout and does not collect payment-card details through this service. Any separately arranged purchase has its own payment provider and terms.

Children and location

Our games are for families, including children. Guests can play without creating an account. Current VisitPlay-hosted games do not ask for a name, initials, email address, birth date, photo, or precise device location. Game progress stays on your device, and there is no public player profile, chat, or shared player scoreboard. We do not use guest gameplay for targeted advertising. A parent or guardian with a concern about a child’s information can contact us using the request process below.

Who receives information

Authorized farm operators can access their farm’s business information and game configuration. VisitPlay administrators can access records to operate the service and provide support. Providers that host our application, database, uploaded assets, and support email process information needed to provide those services. Our application is hosted on Vercel; uploaded farm logos use Vercel Blob when logo storage is enabled. These providers may process ordinary request information even when homepage measurement is off.

VisitPlay does not sell personal information or share it for cross-site targeted advertising. We may disclose information when required by law or to address fraud, abuse, or a security incident. If a game or link takes you to another website, that service’s privacy policy governs the information it collects there.

Cookies and browser storage

Cookies keep you signed in and help the site work. Optional site measurement helps us improve the public homepage. You can turn that measurement off here and continue using VisitPlay, including your account and saved games.

Cookies we use

• Sign-in: keeps an operator or administrator signed in for up to 14 days.
• Admin invitation: carries an invitation link across an admin redirect for up to two minutes, then is cleared when displayed.
• Site measurement: uses a random first-party identifier for up to 90 days to keep the homepage version consistent and attribute views of the tested section, clicks, and completed farm signups.
• Privacy choice: remembers whether site measurement is allowed or off for one year. It does not contain a visitor identifier.

What site measurement records

Experiment records contain a hashed random identifier, test and version, variant, event type, and time. These records do not contain your IP address, browser user agent, or full page URL. We keep them for no more than 90 days. We do not use advertising cookies or send these experiment events to a third-party analytics service.

Hosting and security services process ordinary request information to serve the site and limit abuse. The site measurement choice does not disable those services.

We honor Global Privacy Control for optional homepage measurement as described above. We do not separately change our practices in response to the older Do Not Track browser setting. VisitPlay does not embed third-party advertising or analytics trackers to follow you across websites.

How long information stays

Homepage experiment records expire within 90 days. Cookie lifetimes are listed above; a cookie’s expiry is not a deletion deadline for related server records. Account, farm, and historical synchronized game records currently have no fixed automatic deletion period. New gameplay no longer adds to those historical records. They remain until removed through administration; retiring synchronization does not itself delete earlier records. You can request deletion using the process below; we review requests and explain any information that must be retained for security, legal obligations, or resolving a dispute. Hosting logs, email, and backups are managed separately by service providers; their retention can differ from application data.

Game saves stay on your device until they are removed. Lantern Trail offers a Clear saved game control; other games offer their own reset controls. Clearing saved progress depends on the browser allowing storage changes. Reset does not clear cached pages, artwork, or offline QR routing data. Those cached resources remain until you clear VisitPlay site data, your browser removes them, or a service-worker update retires their cache.

Clearing local saves or cached resources does not delete previously synchronized server records. Turning off homepage measurement stops future attribution and does not erase existing records immediately.

Your choices and privacy requests

Use the control above to change optional homepage measurement in this browser. You can manage passwords and remove passkeys on your account page. Your browser’s site-data settings let you remove local game saves and cookies; doing so can sign you out and remove progress needed for offline play.

To ask about, access, correct, or delete information held by VisitPlay, including information about a child’s game session, email hello@visitplay.app. For an account request, tell us which account or farm is involved. For a concern about historical game records, the game URL and approximate play date can help us investigate; do not send a child’s name, birth date, or photo. Historical sessions use random identifiers, so we may be unable to locate one from a name or email. We will use the minimum information needed to verify an appropriate request and explain anything we must retain. Current game saves are held in your browser and can be cleared there, without contacting us. Requests about an attraction’s separate records should go to that attraction.

Changes to this policy

We will post updates here and change the effective date when our practices change. For a material change, we will describe the change on this page before it takes effect.