SideQuest

Privacy Policy

Last updated: March 10, 2026

1. Information We Collect

Account Information: When you sign up directly, we collect your name and email address. If you sign in using Google or Facebook, we receive your name and email address from that provider. We do not receive or store your Google or Facebook password. Third-Party Sign-In: When you authenticate via Google or Facebook, we may receive a unique identifier, your name, email address, and profile picture URL from the provider. We use this information solely to create and manage your SideQuest account. Event Information: We collect event details you provide, including event name, date, venue, and guest lists. Guest Information: Guests provide their name when joining an event. We do not require guests to create accounts or provide email addresses. Photos and Videos: Photos and videos uploaded through the Photo Wall are stored temporarily as described in our data retention policy. Photos and videos uploaded by guests are visible to all participants of the same event.

2. How We Use Your Information

We use your information to: • Provide and maintain the Service • Authenticate your identity (including via Google and Facebook sign-in) • Process payments and send transaction receipts • Send important service-related communications • Display guest-uploaded photos to all participants of the same event • Improve our Service based on usage patterns • Respond to your support requests Legal Bases for Processing (GDPR): We process your data based on: (a) performance of our contract with you, (b) our legitimate interests in improving the Service (including analytics), and (c) your consent where required.

3. Data Retention & Automatic Deletion

We believe in data minimization. Your event data is automatically deleted 180 days after your event date. This includes: • All uploaded photos • Guest names and team assignments • Game scores and leaderboard data • Event settings and configurations Your account information (name and email) is retained until you request deletion.

4. Data Sharing

We do not sell, rent, or trade your personal information. We do not share your data for cross-context behavioral advertising. We share data only with: • Google: If you choose to sign in with Google, your authentication is processed through Google's OAuth 2.0 service. Google receives information that you are signing in to SideQuest. See Google's Privacy Policy at https://policies.google.com/privacy. • Facebook (Meta): If you choose to sign in with Facebook, your authentication is processed through Meta's Login service. Meta receives information that you are signing in to SideQuest. See Meta's Privacy Policy at https://www.facebook.com/privacy/policy. • Microsoft: We use Microsoft Clarity to understand how users interact with our site. Clarity captures session recordings, heatmaps, and interaction data (mouse movements, clicks, scrolls). Clarity operates in cookieless mode and does not set tracking cookies. This data is processed by Microsoft and is anonymized. See Microsoft's Privacy Statement at https://privacy.microsoft.com/privacystatement. • Stripe: For payment processing (as a data processor) • Amazon Web Services: For hosting and data storage (as a data processor) We may disclose information if required by law or to protect our rights.

5. Cookies & Tracking

We use essential cookies for authentication and session management, including cookies set during Google or Facebook sign-in flows. We use Microsoft Clarity, a user behavior analytics tool provided by Microsoft. Clarity captures session recordings, heatmaps, and user interaction data (such as mouse movements, clicks, and scroll behavior) to help us understand how users interact with our site and improve the user experience. Clarity operates in cookieless mode and does not set tracking cookies. The data collected is anonymized and does not include sensitive information such as passwords or payment details. Clarity data is processed by Microsoft and is subject to Microsoft's Privacy Statement (https://privacy.microsoft.com/privacystatement). You can learn more about Clarity at https://clarity.microsoft.com. Our legal basis for using Clarity is legitimate interest in improving our Service. You have the right to object to this processing by contacting us at contact@sidequestevents.co or by using browser settings or extensions that block analytics scripts.

6. Your Rights Under GDPR, CCPA, and Other Laws

Depending on your jurisdiction, you may have the following rights: For all users: • Access your personal data • Request correction of inaccurate data • Request deletion of your account and data • Export your event data before automatic deletion • Opt out of marketing communications Additional rights under GDPR (EU/EEA/UK residents): • Right to restrict processing • Right to data portability • Right to object to processing • Right to withdraw consent at any time • Right to lodge a complaint with your local data protection authority Additional rights under CCPA (California residents): • Right to know what personal information is collected • Right to request deletion of personal information • Right to opt out of the sale of personal information — we do not sell your personal information • Right to non-discrimination for exercising your privacy rights To exercise any of these rights, contact us at contact@sidequestevents.co. We will respond within 30 days (or as required by applicable law).

7. International Data Transfers

Your data is processed and stored in the United States using Amazon Web Services. If you are located outside the United States, your information will be transferred to and processed in the United States. We rely on standard contractual clauses and other lawful transfer mechanisms to ensure your data is protected.

8. Security

We implement industry-standard security measures including encryption in transit (HTTPS), secure authentication, and access controls. However, no system is completely secure, and we cannot guarantee absolute security.

9. Children's Privacy

SideQuest is not intended for children under 13 (or 16 in the EU/EEA). We do not knowingly collect information from children. If you believe we have collected such information, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or sending you an email. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at: Agentic Labs contact@sidequestevents.co For EU/EEA-specific inquiries, you may also contact your local data protection authority.