Privacy Policy
Last updated: 10 September 2026
Who is responsible for your data
Escape Grid is operated by Pankaj Kumar Behera, trading as Escape Grid. Pankaj Kumar Behera is the data controller for the personal data described in this notice. Contact us any time via the Support page.
What we collect
Guest players are stored only on your device. If you create an account we collect: your email address and login credentials (or your Google/Apple sign-in identifier), display name, avatar, country, XP, currencies, level progress, purchases and leaderboard scores; support messages you send us; gameplay and usage events; and technical data such as IP address, device and browser type.
Why we use it and our legal basis
To create and secure your account and sync progress across devices (performance of our contract with you); to rank you fairly on leaderboards, detect cheating and fraud, and tune difficulty (our legitimate interests); to deliver purchases and memberships you buy (contract); to answer support requests (contract and legitimate interests); to show optional rewarded ads (consent — you choose to watch them); and to comply with tax and accounting law (legal obligation).
Who we share it with
Payments are processed by our reseller and Merchant of Record, Paddle.com, which receives your email, name, billing address and payment details to sell the product, manage subscriptions, collect tax and issue invoices; Paddle's own privacy policy applies to that processing. We also use service providers for hosting, database, authentication and analytics who process data only on our instructions; professional advisers (legal, accounting); and authorities where the law requires it. We do not sell personal data.
Analytics and advertising
We record gameplay events (levels started, completed, hints used) to tune difficulty and detect bugs. Events are tied to your account id only when you are signed in. Rewarded ads are strictly optional and only shown when you choose to watch one.
How long we keep it
Account and progress data are kept while your account is active and deleted within 30 days of you deleting your account. Purchase and invoice records are kept for 7 years to meet tax and accounting obligations. Support messages are kept for 2 years. Analytics events are anonymised or deleted after 24 months. Security and anti-cheat logs are kept for 12 months. Data no longer needed is deleted or anonymised.
Security
We protect your data with encryption in transit (HTTPS), encrypted storage, role-based access controls, row-level database permissions, server-side verification of scores and purchases, and regular dependency security scans. No system is perfectly secure, so please use a strong, unique password.
International transfers
Our servers and providers may be located outside your country, including in the EU and United States. Where data leaves the UK or EEA we rely on adequacy decisions or standard contractual clauses.
Your rights
Depending on your country you may have the right to access, correct, delete or export your data, to restrict or object to processing, to withdraw consent, and to complain to your local data protection authority. You can delete your account yourself from Settings, or contact Support — we respond within one month.
Cookies and local storage
We use only essential cookies and browser storage to keep you signed in, remember your settings and save guest progress. We do not use marketing cookies. You can clear them at any time in your browser.
Children
Escape Grid is rated for everyone. We do not knowingly collect data from children under the age required by local law without parental consent; contact us if you believe a child has provided data.