This Privacy Policy explains what personal information EcoQuest collects, how we use it, and the choices you have. EcoQuest is operated by Rachamim Labs Pty Ltd ("the Company", "we", "us", "our"), a company registered in New South Wales, Australia (ACN 700 315 868). We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
We keep this simple on purpose: EcoQuest is a game, and we collect as little as we can.
1. What we collect
You can play EcoQuest's free zones as a guest, without an account. As a guest you don't give us an email, and we don't create an account for you — we only receive the basic technical information described below. The rest of this section applies once you create an account.
Information you give us
•
Account details — the email address and password you sign up with. Your password is handled by our authentication provider (Supabase) and stored only in encrypted (hashed) form — we never see it. At sign-up we also ask your age range to confirm you're old enough for an account (13+); we record only a yes/no result and do not store your age or date of birth.
•
Messages — anything you send us at support@ecoquest.app.
•
Feedback — anything you send through the in-app feedback form. Feedback is anonymous: it isn't linked to your account or email, and we ask you not to include personal details. We use software tools to help us analyse and summarise feedback so we can improve the game.
Information created as you play
•
Gameplay data — your progress, guesses, scores, streaks, species cards collected, and which zone packs you've unlocked.
Payment information — handled by Paddle, not us
•
When you buy a pack, payment is processed by Paddle, our merchant of record. You enter your card or payment details directly with Paddle. We never see or store your full card number. We receive from Paddle only what we need to grant your purchase and keep records — such as a transaction ID, which packs you bought, the amount, and the status (completed or refunded).
Technical information
•
Basic technical data that any website receives — such as your browser type, general device information, and approximate region — used to keep the Service secure and working.
•
Anonymous analytics — we use Plausible, a privacy-friendly analytics service, to count page views in aggregate so we can see which parts of the game are used. It sets no cookies, collects no personal identifiers, and honours your browser's "Do Not Track" setting. We can see that pages were visited, never who visited them.
2. How we use your information
We use your information to:
•
run your account and save your progress;
•
unlock and deliver the packs you buy, and keep accurate purchase records;
•
provide support and answer your messages;
•
keep EcoQuest secure, prevent fraud and abuse, and fix problems;
•
understand, in aggregate, how the game is used so we can improve it; and
•
meet our legal, tax, and accounting obligations.
We do not sell your personal information, and we do not use it for third-party advertising.
3. Who we share it with
We share personal information only with service providers who help us run EcoQuest, and only as needed:
•
Paddle — payment processing as merchant of record. Paddle handles your payment details under its own privacy policy.
•
Supabase — our database and authentication provider, which stores your account and gameplay data on our behalf.
•
Vercel — hosting and delivery of the EcoQuest website.
•
Plausible — cookieless, privacy-friendly analytics. Plausible receives anonymous page-view counts only — never your email, account details, or any identifier.
•
Resend — our email delivery provider, which sends account-service emails on our behalf (such as the inactivity warning and deletion confirmation described in section 7) and receives your email address for that purpose.
We may also disclose information if required by law, or to protect the rights, safety, and security of our players, the public, or EcoQuest.
4. Children's privacy
EcoQuest accounts are for people aged 13 and over. We ask your age range at sign-up, do not allow account creation below 13, and store only a passed/not-passed result — never an age or date of birth. Younger players can still enjoy EcoQuest's free zones as a guest, which involves no account and no collection of personal information. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, email support@ecoquest.app and we will delete the account and its data. Parents and guardians of teens can contact the same address to review, correct, or delete their teen's information.
We have designed EcoQuest with the best interests of younger players in mind — guest play with no account, the least data we can collect, and no advertising or tracking — consistent with the principles of the Australian Children's Online Privacy Code.
5. Cookies and similar technologies
EcoQuest uses only the cookies and local storage needed to keep you signed in, remember your session, and process payments securely through Paddle. We don't use advertising or cross-site tracking cookies, and our analytics (Plausible) is cookieless — it sets no cookies and stores nothing on your device.
6. Where your information is stored
EcoQuest uses service providers (Supabase, Vercel, Paddle, and Resend) that may store and process data on servers outside Australia, including in other countries. Where information is transferred overseas, we take reasonable steps to ensure it is handled consistently with this policy and applicable privacy law.
7. How long we keep it
We keep your account and gameplay data while your account is active, and we don't keep personal information indefinitely:
•
Inactive accounts are deleted automatically. If you don't sign in for 18 months, we delete your account and its personal data. We email a warning to your address at 17 months so you have the chance to keep the account by signing in.
•
Purchase records are kept, but anonymised. We keep purchase and transaction records for as long as tax, accounting, and legal obligations require. When your account is deleted (by you or by the inactivity process), those records are anonymised — the link between them and you is removed.
•
When we no longer need information, we delete or de-identify it.
8. Security
We take reasonable steps to protect your information — including access controls and storing data with reputable providers — and we intentionally minimise what we hold. No online service can promise perfect security, but we work to keep your information safe and to respond quickly if something goes wrong.
9. Your rights and choices
You can:
•
access the personal information we hold about you;
•
correct it if it's wrong;
•
delete your account and associated data — yourself, at any time, using "Delete my account" on the account screen, or by emailing us; and
•
ask questions about how we handle your information.
To do any of these, email support@ecoquest.app. We'll respond within a reasonable time. Note that we may need to keep certain purchase records to meet legal obligations even after you delete your account. Depending on where you live, you may have additional rights under your local privacy laws (for example, the GDPR in Europe); we honour those rights where they apply.
10. Changes to this policy
We may update this policy from time to time. We'll change the effective date at the top and, for significant changes, give reasonable notice.
11. Contact us
Questions or requests about your privacy? Email support@ecoquest.app — it reaches Rachamim Labs Pty Ltd directly. See also the contact page.