For questions about your personal information, write to the person in charge of protecting it: info@missionmysteria.com.
01. Personal information
The public site's contact form collects the information you voluntarily provide to us: your first and last name, your organization and its type, your email address, your phone number and your message. This information is used only to respond to your request and follow up on it.
If you create a player account, we collect your email address, your password — stored only in hashed form, never in plain text — and your agent name. You may add to your profile a city, a short bio, the address of a profile picture and your display preferences.
While you play, we record your progress: the missions started and completed, the steps cleared, right and wrong answers, hints used, your points, your playing time, the date of your last activity and the events you take part in.
Each time you accept the safety terms, at sign-up and at the start of every mission, we keep the text accepted, its version, the date and the type of browser used, as proof of your acceptance.
To protect your account, each sign-in is recorded with its IP address, browser type and date. You can review your sessions and end them from your account.
A security log also keeps track of what happens at the door of your account — sign-up, sign-ins, refused attempts, password changes, sign-outs, ended sessions and the deletion of the account — with the email address, the IP address and the browser type, never a password. It is kept for one year.
We may also collect limited technical data, such as the pages viewed, the approximate IP address, the device type, the browser, language preferences and interactions with the site, in order to ensure security and improve the user experience.
Neither the site nor the game asks for your location.
02. Use and retention
The information collected is used to respond to your requests, prepare follow-ups, coordinate projects, improve our services, protect the site and meet our legal obligations.
The information tied to your account is used to run the game: identify you, save your progress, display rankings, organize the events you take part in, protect your account and keep proof of your acceptance of the safety terms.
We use no information for targeted advertising.
We retain the information only for as long as is reasonably necessary for the purposes described, unless a longer period is required by law, accounting, contract management or the protection of our rights.
03. Sharing and disclosure
We do not sell your personal information. Some information may, however, be shared with providers who help us operate the site, manage forms, host data, analyze performance or communicate with you.
When providers are involved, we aim to limit the information shared to what is necessary and to work with partners who apply reasonable security measures.
Our hosting and database providers store and process the information collected by the site and the game outside Québec, notably in the United States. The site's images are hosted in Canada, as are the visit statistics.
Depending on the game's settings, your agent name, profile picture, points and playing time may appear in rankings seen by other players, for example those at the same event. You can hide your name and picture in rankings from your account settings.
04. Security, consent and your rights
We apply reasonable administrative, technical and organizational measures to protect personal information against unauthorized access, use, disclosure or destruction.
In accordance with the laws applicable in Québec and Canada, you may request access to your personal information, its rectification, the withdrawal of your consent where possible, or ask a question about its processing.
You can edit your profile at any time from your account. You can also delete your account there yourself, confirming with your password: your profile, your runs, your registrations to events, your sessions and your acceptances of the safety terms are then erased; the security log, for its part, is kept until the end of its year. To get a copy of your information or have it corrected, write to us at info@missionmysteria.com; we may verify your identity before acting on your request.
05. Cookies, storage and statistics
This site uses only the cookies necessary for its operation, its security and the editing of its content. No advertising, retargeting or social network cookies are set.
The public site's pages set none. When you sign in to the game, three necessary cookies keep your session active and protect your actions: a short-lived access cookie, a renewal cookie valid for 14 days and a request-forgery protection cookie valid for 14 days. They are deleted when you sign out.
In the game, your browser also keeps your map settings and whether sound effects are on in its local storage.
Traffic statistics are measured by a self-hosted instance of the open-source software Umami, without cookies and without persistent identifiers: only anonymous page views are counted. There is no session recording, no heat mapping and no tracking from one site to another.
Only the public site's pages are measured. The game and the pages that require signing in are not: the browser sends no measurement for them.
You can view the status of cookies from the “Cookies” link at the bottom of the site. You can also configure your browser to refuse or delete certain cookies.
06. Maps in the game
The game's maps use OpenStreetMap data. Their tiles are fetched by our servers: your browser does not connect to OpenStreetMap.
If you choose the “Satellite” view, the images are loaded directly from Esri (ArcGIS), which then receives the technical information needed for the connection, including your IP address. The same is true of that view's thumbnail, shown when you open the map-style picker. The link to a mission's starting point opens Google Maps only when you choose it.
07. Minors
A person under 18 may create an account or play a mission only with the agreement of a parent or guardian. We do not knowingly collect information about a person under 14 without the consent of the person having parental authority.
A parent or guardian may write to us at info@missionmysteria.com to see a child's information or have their account deleted.
08. Changes and contact
We may modify these terms to reflect developments in our services, our tools, our suppliers or legal requirements. The update date indicates the most recent version.
For any questions, contact Mission Mysteria at info@missionmysteria.com or by phone at (450) 275-9891.
Mission Mysteria's person in charge of the protection of personal information can be reached at info@missionmysteria.com. If you are not satisfied with our answer, you may contact the Commission d'accès à l'information du Québec.
