Proudly ISO 27001 certified.
Independent auditors have confirmed that we meet the international standard for managing information security. Ongoing external audits keep that true. Email hello@playtours.app if you need the digital certificate and our information security policies.
Information security comes first.
We treat the data you put in a game as sensitive. The practices below are how we collect, use, protect, and delete it. For the full legal text, see the privacy policy.
ISO 27001 certified
Documented processes for protecting data, managing risk, and keeping information available. Clients and partners can ask for the certificate. We send it.
No personal data required, by default
Players do not register an account to start playing. If you want names, emails, or extra questions, you add those fields yourself. Leave them off, and the game does not collect them.
Delete when you want. Auto-delete after about 90 days.
Deletion buttons sit on the relevant session pages. We also erase unused game data within about three months. Data is not kept indefinitely.
Encrypted at rest. Your game data is never for sale.
We encrypt data at rest. Authentication and storage run on Google Firebase, which has completed ISO 27001, ISO 27017, ISO 27018, and SOC 1, SOC 2, and SOC 3 evaluations. We do not sell your data, and we do not use game data for anything beyond running your event.
Hosted on a server covered by an EU adequacy decision
Game data sits on a server in a country the European Commission has recognised as providing adequate protection. See the Commission’s adequacy decision. Analytics we collect on the software itself are aggregated, so they cannot identify a person.
Data protection questions
Email hello@playtours.app. Ask about access, erasure, or any other privacy matter. That is also how you reach our data protection officer.
Photos, videos, and results download to your drive. Then delete from PlayTours. ISO 27001. Unused game data is auto-deleted after about 90 days.
Deletion buttons sit on the session pages. Nothing is kept indefinitely.