Privacy at Questline

Account and game data

We process the account details needed to authenticate you and the Questlines, Quest Pools, Sessions, and marks you choose to create. Supabase provides our authentication and database services. This product data is used to provide Questline and is not copied into product analytics.

Essential reliability measurement

We collect privacy-minimised performance and failure categories to keep Questline secure and reliable. Routes are reduced to templates, resource identifiers are removed, IP collection is disabled in our analytics payloads, and raw error messages are not sent. PostHog Cloud EU processes these bounded operational events on our behalf. We retain error events for up to 90 days.

Optional product analytics

If you accept, we use PostHog Cloud EU to understand discovery, account activation, creation, sharing, and meaningful play. We use your stable account UUID after sign-in, but never send your email, handle, search terms, authored Quest text, titles, descriptions, Team names, variables, seeds, passwords, or raw URLs. Session replay and automatic click capture are disabled.

Product analytics is retained for up to 12 months. It is used only to improve discovery, creation, sharing, play, and launch quality; it is not used for advertising or automated decisions.

Processors and access

Supabase processes account and product data, while PostHog Cloud EU processes the optional analytics and bounded reliability data described above. Access is limited to authorised Questline operators who need it to run and improve the service.

Product feedback

Signed-in users can choose to send product feedback. We store the message, feedback type, account UUID, a normalised page category, release version, and submission time so authorised Questline administrators can review and prioritise it. Feedback content is kept separate from PostHog analytics and never includes an automatic screenshot, session replay, or raw page URL.

If you explicitly allow contact, administrators may use the email address already held on your account to follow up about that submission; the email is not copied into the feedback record. Feedback is retained for up to 24 months, then deleted or anonymised unless it must be kept to resolve an active support, safety, or legal matter.

Controller and contact

Questline is responsible for the personal data described in this notice.

Retention and your rights

Depending on where you live, you may ask to access, correct, export, erase, restrict, or object to our use of your personal data. You may also complain to your local data-protection authority. You can withdraw analytics consent at any time below; withdrawal takes effect immediately in this browser and is synced to your account when signed in. Withdrawal does not affect earlier lawful processing.

Self-service account deletion immediately locks the account, begins removal of its Supabase sign-in, replaces its email and public handle, deletes feedback, and removes authored Questlines and Quest Pools from public view. If the authentication provider is temporarily unavailable, the account stays locked while that step is retried. Shared Quests and completed Session history remain under “Deleted player” where they are needed to preserve other players’ records.

Self-service deletion does not delete product or reliability analytics already held by PostHog. Those records remain subject to the 12-month product-analytics and 90-day reliability retention periods above. A verified privacy-rights request is handled separately where applicable. Anonymous aggregate records may not be linkable back to an account.