Privacy at Questline

Account and game data

We process the account details needed to authenticate you and the Questlines, Quest Pools, Sessions, and marks you choose to create. Supabase provides our authentication and database services. This product data is used to provide Questline and is not copied into product analytics.

Essential reliability measurement

We collect privacy-minimised performance and failure categories to keep Questline secure and reliable. Routes are reduced to templates, resource identifiers are removed, IP collection is disabled in our analytics payloads, and raw error messages are not sent. PostHog Cloud EU processes these bounded operational events on our behalf. We retain error events for up to 90 days.

Optional product analytics

If you accept, we use PostHog Cloud EU to understand discovery, account activation, creation, sharing, and meaningful play. We use your stable account UUID after sign-in, but never send your email, handle, search terms, authored Quest text, titles, descriptions, Team names, variables, seeds, passwords, or raw URLs. Session replay and automatic click capture are disabled.

Product analytics is retained for up to 12 months. It is used only to improve discovery, creation, sharing, play, and launch quality; it is not used for advertising or automated decisions.

Processors and access

Supabase processes account and product data, while PostHog Cloud EU processes the optional analytics and bounded reliability data described above. Access is limited to authorised Questline operators who need it to run and improve the service.

Controller and contact

Questline is responsible for the personal data described in this notice.

Retention and your rights

Depending on where you live, you may ask to access, correct, export, erase, restrict, or object to our use of your personal data. You may also complain to your local data-protection authority. You can withdraw analytics consent at any time below; withdrawal takes effect immediately in this browser and is synced to your account when signed in. Withdrawal does not affect earlier lawful processing.

An account-deletion request removes or anonymises account-linked product data subject to legal and operational retention needs. We also use the account UUID to locate and delete associated product analytics. Anonymous aggregate reliability records may not be linkable back to an account.