Sealed Orders

Sealed Orders is a private game you play with a small group of friends on a trip. This policy explains the data we handle, why we handle it, how long we retain it, and the choices you have. The app is for adults.

• The display name you or your host set for you in a group. • A 4-digit PIN you choose, stored only as a salted, peppered hash — we never store the PIN itself. • A random device token (stored as a hash) that keeps you signed in on your device. • The photos and videos you submit as proof of completing a task. • The text you write: task ideas, completion notes, guesses, and comments. • Reactions (emoji) and the timestamps of your actions.

Solely to run the game inside your private group — assigning tasks, recording completions, scoring, and the end-of-trip reveal. We do not build advertising or marketing profiles.

Data is stored on Cloudflare infrastructure: structured data in Cloudflare D1 and your photos/videos in Cloudflare R2. Traffic is encrypted in transit (HTTPS), and media is served through short-lived signed links.

Photos and videos are retained for 30 days and then automatically deleted. Your account data (name, hashed PIN, hashed device token, and the text you wrote) is kept until you delete it or the trip is removed.

Your data is visible only to the members of your own group. We do not sell your data. We do not use analytics, ads, or third-party tracking SDKs, and we do not share your data with third parties for their own purposes.

You can delete your data at any time from Settings → "Delete my data,"in the app or on the web. This removes your name, photos, and videos; your scores are kept so the game still works for everyone else. To request a copy of your data, or if you have lost access to your device or PIN, email us and we will help.

Sealed Orders is not directed to children. The app is for users aged 18 and older, and we do not knowingly collect data from anyone under 18.

We may update this policy as the app changes. Material changes will be reflected in the "last updated" date above.