Privacy Policy

This privacy policy explains what data tiny melon collects when you order a tour through this website or play the app, why we do so, and what your rights are. tiny melon is a product of Tiny Melon, based in Muiden and registered with the Dutch Chamber of Commerce (KvK) under 56258380.

What data we collect

When you order a tour

When you place an order we ask for your email address, so we can send you your access code. Payment is handled by Mollie; we don't store any payment details ourselves.

When you arrive through an ad or a partner (website only)

When you click one of our ads, on Google or in ChatGPT, that platform adds a click code to the address of the page you land on. Only then do we store that code in your browser, and only the code of the platform you came from: arrive through Google and we store nothing from ChatGPT, and the other way round. When you arrive through a partner's link, that link carries a label naming the partner and the campaign, and we keep it the same way. If you don't arrive through an ad or a partner, nothing is stored for this. Codes and labels stay for at most 90 days, and are saved with your order if you book within that time. We don't use them to recognise you, only to see which ad or partner led to a booking. We load no code from any ad platform on this website and use no advertising cookies. This applies to the website only — the app contains no ads and measures nothing for this.

When you play the app

The app generates a random device ID when you install it. We use it to remember your progress in the game and which team you're playing with. There is no account, no password and no login: the app never asks for your name or email address.

Camera

The app uses the camera only to scan QR codes during the game. No photos are stored or sent anywhere.

Why we use this data

• We use your email address to deliver your order and access code. Legal basis: performance of the contract.
• We use your device ID and progress to make the game work and to let you play together. Legal basis: our legitimate interest in providing the service.
• We use the click code from an ad to tell the platform that showed it that the click led to an order — with the amount and the time, without your name or email address. A partner's label we use only ourselves, to count which partner leads to bookings. That shows us which ads and partners work. Legal basis: our legitimate interest in evaluating our advertising.

How long we keep data

We don't keep your data longer than necessary. We keep your email address and order for up to 12 months after your purchase. We delete your game progress no later than 6 months after you've played the tour. We keep invoices for 7 years, because Dutch tax law requires it.

Who we share data with

We never sell your data. We work with a few processors that help us run the service:

• Mollie — payments
• Leaseweb — hosting of the database with game and order data
• AhaSend — sending confirmation emails
• Bunny.net — website hosting
• Apple and Google — distributing the app through their app stores
• Google Ads and OpenAI (ChatGPT) — ad measurement on the website; each platform receives only its own click code, and only when you arrived through that platform's ad, with the amount and the time of your order. Partners see counts at most, never your order.

Your rights

You have the right to access, correct or delete your data, and to object to its use. Want your data deleted? The Delete data page explains how. For other requests, email hi@tinymelon.nl.

If you disagree with something, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Children

tiny melon is made to be played as a family. The app collects no personal data from children: there's only an anonymous device ID, and the order is placed by an adult with an email address.

Changes

We update this policy from time to time. The date at the top shows when we last did.

Contact

Questions about your privacy? Email hi@tinymelon.nl.