Legal
Privacy Policy
Last updated October 20, 2026
1. What we collect
Simple Pixel, LLC (“we”) collects only what we need to run bookings, the waiver and the games.
| What | Details | When |
|---|---|---|
| Booking contact | Name, email, phone, whether you want news from us | When you book |
| Payment | Amount, payment and refund IDs. Square handles your card; we never see or store the full card number | When you pay |
| Player account | Email, name, phone (optional), player ID, and the players you add, including children’s names and whether they are under 18 | When you create an account or join a group |
| Waiver record | Signer’s name, date of birth and email, who the waiver covers, initials, date and time, IP address, browser and device | When you sign |
| Visit and game data | Check-in time, player names and scores in the game system | At the venue |
| Photos and video | Images of players, including from game-room cameras (waiver Section 10) | At the venue |
| Group and party inquiries | Name, email, phone, event details | When you send the form |
| Waitlist | Email, and first name and phone if given | When you join the waitlist |
| Site usage | Vercel visitor statistics: pages viewed, device and browser type, approximate location from IP address, without analytics cookies | When you browse the site |
| Optional Marketing measurement | Google Ads cookies and identifiers, public page information, device/browser and network information such as IP address, accepted inquiry identifier with zero value, and for verified checkout success a booking identifier and payment amount/currency | Enabled by default for eligible fresh California public-page visits, or when you choose to allow it; prior refusals and privacy restrictions override |
| Basic Analytics | Google Analytics cookies and identifiers, fixed page names, site interactions and operation outcomes, public section activity, successful inquiry form type, verified reservation type, checkout and verified paid purchase amounts/currency, opaque purchase identifier, device/browser and network information such as IP address | On for eligible California public-page visits separately from Marketing; earlier refusals need an explicit policy-transition save and privacy restrictions override. Other regions require a choice |
| Privacy choice | Your measurement choices, their date and policy version, stored on this browser | When you make a privacy choice |
| Optional Meta measurement | Public page and meaningful content views, booking button clicks, form starts, Meta cookies/click identifiers, browser and network information, opaque event identifiers, accepted inquiry type, checkout and verified positive USD purchase amount. With contact matching on, email and unambiguous international phone numbers supplied for an accepted inquiry, signup or booking are normalized and SHA-256 hashed on the server before sharing | Enabled by the shared Marketing setting after both providers are confirmed; eligible fresh California sessions can default on. Contact matching starts on for a fresh eligible Marketing choice without recording an adulthood confirmation. Turning Marketing off stops contact matching; selecting under 18 immediately stops optional measurement. Current-session refusals and privacy restrictions override |
2. How we use it and who we share it with
We use personal information to confirm and manage bookings, take payments and give refunds, check players in, keep waiver records for legal and insurance purposes, run scoring and leaderboards, answer inquiries, and keep the site working. We email news and offers only if you opted in. We do not rent personal information or sell our booking contact list. Google measurement shares information as described below. Marketing is optional; Basic Analytics follows the regional policy and controls in Section 3. We do not send customer names, emails, phone numbers, waiver details or card information through this integration.
These providers run parts of Simple Pixel for us. Google measurement follows the regional policy and applicable choices below:
| Provider | What they do | What they receive |
|---|---|---|
| Square | Payments and refunds | Name, email, phone, payment details |
| Supabase | Database hosting | Booking and payment references, player accounts, waiver records, inquiries and waitlist information |
| Vercel | Website hosting and visitor statistics | IP address and page requests |
| Resend | Sending booking, sign-in and waiver emails | Email address and the email’s contents |
| Google Workspace | Our business email | Anything you email us |
| Google Ads (optional) | Marketing attribution and conversion measurement; personalized ads and enhanced conversions are disabled, and restricted data processing is requested | Cookies/identifiers, public page information, device and network information, opaque inquiry/booking identifier and payment amount/currency; accepted inquiries carry zero value |
| Google Analytics | Understanding use of website and application pages; Google Signals, marketing personalization and additional account data sharing are off | Cookies/identifiers, fixed page names and safe route templates including account, staff and error pages, public section activity, successful inquiry form type, verified reservation type, checkout and verified paid purchase amount and currency, opaque purchase identifier, device and network information. No customer contact details, form contents or signed links |
| Tuopan | The in-venue game and scoring system; its servers are in China | Player names and player ID |
| Meta (optional) | Browser Pixel and server conversion measurement under the shared Marketing choice; optional contact matching for advertising | Public page/referrer and browser/network context (including IP visible to the browser service), Meta cookie/click identifiers, finite event types and opaque event IDs, checkout and verified positive USD purchase value. CAPI sends site origin, an actual browser cookie and user-agent. Contact matching allows server-hashed email and phone; hashes remain personal information. No names, messages, child details or waiver data are sent |
Google may use cookies and other identifiers to connect visits and conversions with marketing. Identifiers and network information may be personal information even though we omit customer contact details. Read how Google uses information from sites that use its services and Google’s privacy policy. We do not enable remarketing, customer-list uploads or enhanced conversions through this integration.
We may also share information when the law requires it, with our insurer or lawyers if there is a claim, or with a buyer if the business is sold, under the same protections as this policy.
3. Cookies, measurement and browser privacy signals
The Marketing switch controls Google Ads and Meta Pixel/CAPI together. Eligible fresh California cookie sessions can start Marketing on after both enabled providers are confirmed; other and unknown regions stay opt-in. Contact matching follows eligible Marketing and shares only submitted contact email and phone after server normalization and SHA-256 hashing. Turn Marketing off and Save to stop matching, or select “I am under 18” to immediately stop optional measurement and matching. Earlier saved contact-matching Off choices stay off for the browser session. Default-on does not record that you have confirmed adulthood. We do not collect a birth date for that choice. Known age restrictions, Global Privacy Control, Do Not Track and current-session refusals keep Meta measurement off. Earlier persistent refusals stay off until the new session policy is explicitly adopted. We disable automatic event detection and automatic website matching; contact matching uses only the approved server fields after an accepted outcome. The nonce-selected signed grant, matching preference, denial barrier and random preference-write marker use browser-session cookies with no Max-Age or Expires. An automatic California default is marked as a default, not affirmative consent, and is not used as an opt-in in another region. A successfully saved Marketing Off blocks future Google Ads and Meta browser events and new server measurement requests for this cookie session. We also attempt to clear the relevant first-party measurement cookies. We do not keep a server measurement queue or a server consent database. Delivery and short retries occur only in the current request; closing the browser or a later payment completion can leave a purchase unmeasured. Withdrawal cannot recall events already sent or in flight, or centrally invalidate a copied signed token and matching write marker. The signature has a separate maximum 180-day replay-safety expiry; this does not make the cookie persistent. Hashing does not make contact details anonymous.
Necessary cookies keep you signed in to your player account, support staff sign-in and unlock the site before launch. Google measurement can also use cookies as described here. New measurement choices and clearly marked automatic defaults use first-party browser-session cookies shared across tabs, with no persistent expiry. Reloading, navigation, a new tab or another window in the same cookie session keeps the choice, including Marketing Off. A new browser-cookie session without an unreviewed legacy choice starts the eligible California defaults again. Closing one tab is not a reset. Browser session-restore features may retain session cookies across restart, so restarting the browser is not a guaranteed reset. This is a cookie-session definition, not a Google Analytics session. If cookies cannot be saved, optional measurement stays off and a session denial barrier is attempted. The current page stays off after a failed save. Retry before reloading if the browser cannot save a denial; an older allowed choice may otherwise remain. Vercel visitor statistics do not use analytics cookies.
On eligible California public pages, Basic Analytics stays on independently of Marketing. Marketing defaults on only for eligible fresh visits; its switch turns Google Ads and Meta Marketing off together without turning Basic Analytics off. Saving waits for the enabled providers, and a failed save leaves the panel open with an error rather than claiming success. We do not label Basic Analytics as necessary booking storage: it uses Google Analytics cookies and is our regional site-measurement policy. Basic Analytics has no on/off control in the California settings. Earlier persistent choices, including Marketing or Analytics refusals, are retained until you explicitly save the disclosed session-policy transition. Saving adopts the new duration and removes the old local preference where browser access allows. A current-session Marketing Off choice stays off through this session; a fresh eligible California cookie session can start Marketing on again. If Basic Analytics was previously refused, the panel explains that Save turns Basic Analytics on. Marketing follows your displayed switch. A failed legacy cleanup may require reviewing the transition again later. Unknown locations and other regions remain opt-in. There, “Accept Cookie” explicitly allows both; use to allow or withdraw Basic Analytics separately, then Save. That regional flow does not offer an off control for eligible California settings. Use to change Marketing. Privacy signals and known age restrictions override both products. None of these choices removes the ability to book. Consent to marketing emails does not grant Google measurement consent.
We resolve only a regional policy from Vercel's country and region headers; we do not request your device's precise location. A missing or failed policy lookup keeps the fresh-visitor defaults off. An old, expired or unreadable saved choice is not treated as a fresh visit. Global Privacy Control and Do Not Track keep optional Google measurement off. If you select under 18 or an existing waiver flow establishes that the person signing is under 18, we keep a persistent local safety-restriction flag and optional measurement stays off even in new cookie sessions; the flag contains no birth date or age. Signing for a child as an adult does not identify the adult as underage. Automatic defaults are marked california-default and are not represented as affirmative consent. A California Basic Analytics policy save and California Marketing default retain their regional basis; neither becomes an affirmative opt-in in another region.
Analytics page visits include account, staff, invited booking, join, check-in, kiosk and venue display pages, as well as pages that cannot be found or loaded. We use fixed generic page titles and route templates: booking codes, invite tokens, signatures, account identifiers, query strings and unknown requested paths are omitted from those page views. Visiting a confirmation page does not itself record a purchase; a purchase requires a verified successful payment. Marketing measurement remains limited to public pages.
If you allow site analytics, we retain recognized source and medium tags and the origin of recognized search or social referrers to distinguish how visitors find us. Google ad click identifiers are included in Analytics only if you also allow marketing measurement. We omit referrer paths, search terms, free-text campaign tags, signed booking links and other query parameters. This landing metadata is held only in page memory by our integration.
If you allow site analytics, we also measure clicks on known public section links and when a section heading is at least half visible for one second. These events use fixed public page paths and section names, without link query strings, arbitrary fragments, form contents or customer identifiers.
Site analytics also records fixed categories for interface actions and whether our server accepted an operation, including on account, staff, registration and check-in pages. We record catalogued control identifiers, interaction types and coarse outcomes; we do not read field values, button text, customer names, signed URLs, passwords or signatures. Focusing a field is counted at most once per page visit, rather than recording typing. An accepted operation is not automatically a new account, a delivered email or a purchase. Only the separate verified purchase event records a paid sale.
We recognize a small fixed set of QA campaign names paired with QA source and test medium for our own verification. We do not forward arbitrary campaign text, unique test tokens or other query parameters.
With site analytics allowed, a successfully delivered group or party inquiry records only its fixed form type. Entering checkout records the displayed order amount and currency. A paid purchase records the final amount, currency and opaque booking identifier only after our server verifies the signed booking and completed payment. Verified reservations are also counted by regular or invite booking type, including free reservations, without assigning revenue. Inquiries and checkout starts are not sales. Free bookings do not generate paid purchase events.
Withdrawing stops new pageview, section, click or conversion events from our integration and attempts to remove its first-party Google cookies. Already-loaded Google code may still make limited requests until you refresh the page; we offer a refresh control without automatically interrupting your booking. It does not delete information already received by Google, or cookies set on Google’s own domains. You can also clear cookies in your browser.
Global Privacy Control and Do Not Track: when your browser sends either signal, we keep optional Google measurement off, even if a previous browser choice allowed it. Necessary functions and Vercel’s cookie-free visitor statistics continue to work. These controls apply regardless of where you visit from.
4. How long we keep it, and children
| Record | Kept for |
|---|---|
| Waiver records | At least 3 years after the waiver expires; for a minor, until at least 3 years after they turn 18 |
| Booking and payment records | 7 years, for tax and accounting |
| Player accounts | Until you ask us to delete the account |
| Marketing email list | Until you unsubscribe |
| Group inquiries and waitlist | 2 years |
| Browser privacy choice | Up to 6 months, or until you replace or clear it |
Preference-session duration is separate from Google or Meta measurement-cookie and report retention. Session choices use no IP/account preference lookup; hosting and enabled measurement still receive the network and identifier data disclosed above. Google measurement data and cookies follow the relevant product’s retention controls and published policies. Learn about Google Ads data retention. Read about Google Analytics retention controls; these user/event settings do not set the lifespan of aggregated reports or cookies. Withdrawing consent does not erase data already retained by a provider; contact us about applicable access or deletion requests.
Children: Simple Pixel welcomes players 8 and older, but this website is meant for adults. A parent or guardian enters a child’s name when adding them to an account or signing the waiver for them. We don’t knowingly collect personal information directly from children under 13. If you think a child has sent us their information, email us and we’ll delete it.
Security: we protect data with encrypted connections, access limited to staff who need it, and providers that meet industry security standards. No system is perfectly secure, so we can’t guarantee it.
5. Your choices, changes and contact
- News and offers: use the unsubscribe link in any marketing email, or email us. You’ll still get emails about your bookings.
- Measurement choices: use to change Marketing, or for optional Analytics in opt-in regions. Eligible California Basic Analytics is governed by the regional policy above. You do not need to sign in; Global Privacy Control, Do Not Track and known age restrictions remain honored.
- See, correct or delete your information: email hello@playsimplepixel.com from the address on your booking or account. We reply within 45 days. We can’t delete waiver or payment records we must keep (Section 4), but we won’t use them for anything else.
- California privacy choices: you can ask about disclosures of your information and exercise applicable privacy rights by emailing us. We do not provide our booking contact list to other companies for their own direct marketing. Google measurement may be regulated under applicable privacy laws. Marketing can be changed through Privacy choices; Basic Analytics follows the regional policy and separate opt-in-region controls in Section 3. Contact us about applicable rights.
- Changes to this policy: we post the new version here with its effective date at the top. For significant changes, we also email everyone with a player account.
- Contact: Simple Pixel, LLC, 299 Bassett Street, Suite 250, San Jose, CA 95110 · hello@playsimplepixel.com · (925) 917-5751.