1. Who is responsible?
RiddleConfetti is operated by MarketGoat in the United Kingdom. MarketGoat is responsible for deciding how personal information is used for this project (the “data controller”). Contact us at riddleconfetti@protonmail.com.
This policy covers riddleconfetti.com, its www version, our earlier riddleconfetti.kingchidz.chatgpt.site address, and messages about RiddleConfetti. The website and email routes are intended for adults aged 18 or older. The downloadable activities are for an adult to choose and supervise.
2. What we use, and why
- Website visits: our hosting providers may process an IP address, browser or device details, requested page, request time and security or error information to deliver, protect and troubleshoot the website. We have not added visitor analytics, advertising pixels, accounts or a payment checkout.
- Messages you send: we receive your email address, any name you include, the message, its date and any attachments. We use them to answer your request, resolve problems or discuss a collaboration you raise.
- Optional adult testing: we use the adult eligibility information, broad player age band, group size, setup and play times, hints used and observations you choose to send. We use these to understand and improve the sample and may reply about the test. Information linked to your email is personal information, even if you leave out your name.
- Creator contact information: for relevant business enquiries, we may record a creator’s publicly listed business name, contact email, website and partnership information from their own public website, along with our correspondence. We do not treat a publicly listed address as agreement to receive repeated messages.
Under UK data protection law, we rely on legitimate interests to operate and secure this website, answer enquiries, improve the sample from adult feedback, assess relevant business collaborations and keep a minimal record of requests not to contact someone. We limit the information to what is needed and consider the effect on the people concerned. We may also retain information where necessary to meet a legal obligation.
Providing feedback is optional and is not a condition of downloading. Downloading, testing or emailing us does not subscribe you to a newsletter. We do not sell personal information or share it for targeted advertising. We do not use automated decisions or profiling that produce legal or similarly significant effects.
3. Keep children’s details out of messages.
Please send adult observations only, without children’s names, exact dates of birth, photographs or recordings. Broad age bands are enough. Do not send sensitive information such as health details. We do not ask children to contact us or create profiles.
If you think a child has sent us personal information, contact us using the email above. We will review it and remove unnecessary child-identifying information from our working records. A parent or guardian may also raise a privacy request.
4. Who helps us run the service?
We use OpenAI’s Sites service and its hosting infrastructure to publish and operate the website. We use Proton Mail to receive and send email, and keep private project records for enquiries, testing and business contacts.
We may use OpenAI’s assistance tools, including Codex, to review relevant messages, summarize feedback and prepare replies. This can involve providing relevant email content to OpenAI. We limit the content to the task and avoid unnecessary identifying or sensitive details. These tools do not make consequential decisions about you.
Providers may process information outside the UK. Sites does not offer a UK-only storage location, and we do not promise that information remains in one country. The applicable provider terms and privacy notices describe their processing locations and protections: OpenAI privacy policy, Sites terms, and Proton Mail privacy policy. Contact us if you need more information about the arrangements relevant to your data.
We may disclose information when legally required, or where necessary and lawful to address fraud, security problems or legal claims. We will ask separately before publishing an identifiable testimonial or quoting private feedback with your identity.
6. How long do we keep it?
We review enquiry and testing records when the discussion or test ends, and during our ongoing project reviews. We delete identifying details when they are no longer needed to answer an open enquiry, verify a test outcome or resolve a related concern. We consider whether the matter is still active, whether a finding still needs to be checked and whether a legal obligation or dispute requires us to retain it. We may keep non-identifying summaries of findings.
For creator correspondence, we review whether there is still an active collaboration or a necessary record of the approach. If you ask not to be contacted, we keep only the minimum suppression details needed to honor that request. Provider-held logs, backups and assistance-tool history follow the applicable service’s retention and deletion arrangements; deleting our working copy may not immediately remove all provider copies.
7. Your choices and rights
You can stop testing or decline to answer any optional question. Depending on the law that applies, you may ask to access or correct your information, have it deleted, restrict its use, object to processing based on legitimate interests, or receive a portable copy where that right applies. You can object to direct marketing at any time. If we rely on consent for a future activity, you can withdraw it without affecting earlier lawful use.
Send your request to riddleconfetti@protonmail.com. We may need proportionate information to confirm that the request concerns your data. We will respond within the applicable legal time limit and explain any lawful reason that prevents us from fulfilling a request in full.
You may complain to the UK Information Commissioner’s Office, or to the relevant privacy regulator where you live. You do not have to contact us before approaching a regulator.
8. Changes to this policy
We will update this page if the service or our use of information changes. The date above shows the latest revision. We will provide an additional notice or obtain permission where a change requires it.