Privacy Policy

Effective October 27, 2026 · Last updated October 27, 2026

1. Who is responsible and what this covers

Passmantle ("we," "us") is the project responsible for this website and the information described here. This policy covers passmantle.com, its Google Cloud hosted version, the waitlist, and the privacy request form. Contact the Passmantle team through the form below.

The game, creator tools, accounts and rewards shown on the page are product previews. This launch does not open game accounts, accept payments or collect quest photos. We will update the policy before making services available that collect different information.

2. What we collect and why

• Waitlist: your email address, the time of your submission, your agreement to receive updates, and the version of this policy shown when you joined. We use these to maintain the waitlist and send Passmantle launch and product updates. The same email is stored once, using a normalized address to detect duplicates.
• Privacy requests: your email address, the request type, any message you choose to write, the submission time and policy version. We use these to review your request, verify it where needed and respond.
• Website requests: Google Cloud processes technical request information, including IP addresses, browser or device information, requested URLs, timestamps and response status, to deliver and protect the site and investigate failures. We do not include submitted emails or message contents in our application logs.

Providing an email is optional unless you want to join the waitlist or submit a privacy request. Do not put passwords, payment details, identity documents or other sensitive information in the message box.

3. Cookies, fonts and analytics

This website does not set first-party cookies, use advertising pixels or run a visitor analytics service. It does not track your activity across other websites.

The website loads Fredoka and Nunito typefaces from Google Fonts. Your browser connects to Google to request those fonts, which shares technical information such as your IP address, browser headers and the font resource requested. Google's handling is explained in its Google Fonts privacy information. Your submitted email and privacy message are not sent to Google Fonts.

4. Storage, service providers and disclosure

We use Google Cloud Run to host the website and Google Cloud Storage to keep signup and privacy request records in a private bucket configured in the United States (us-central1). Google processes this information to provide hosting, storage and security services. Technical support or infrastructure processing may involve other locations.

Signup records are not publicly accessible. The website's service identity can create records in the bucket; it cannot list or read them. Authorized project administrators can access records to operate the waitlist and handle requests. We use HTTPS and Google Cloud's storage encryption, although no system can guarantee absolute security.

We may disclose information when reasonably necessary to meet a legal obligation, protect people or the service, or investigate abuse. We do not sell, rent or share waitlist information for third-party advertising. We will describe any additional email delivery provider in this policy before using it to process waitlist addresses.

5. How long we keep information

• Waitlist records become eligible for automatic deletion 365 days after they are created, unless you request removal sooner.
• Privacy request records become eligible for automatic deletion after 90 days. This is separate from any earlier removal of the waitlist record concerned.
• Cloud Storage lifecycle deletion is asynchronous. Deleted records can remain recoverable to administrators for a further seven days under the bucket's soft-delete policy.
• Google Cloud's default request logging bucket is configured to retain logs for 30 days. Certain security or administrative audit records can follow separate Google Cloud retention rules.

We may retain information longer where necessary to meet a legal obligation or resolve a specific security issue. If this happens, access remains restricted.

6. Your choices and privacy requests

You can ask to leave the waitlist, request a copy or correction of your signup information, or ask a privacy question using the form below. Choose “Remove my waitlist signup” to withdraw your agreement to receive updates. If an update email is sent, it will also explain how to stop receiving updates.

Requests are reviewed by the Passmantle team. We may need to confirm that you control the email address before providing information or making a change. Submitting the form records your request; it does not immediately delete data or send an automatic email. Privacy rights can also depend on where you live.

7. Age and policy changes

The website and waitlist are intended for people aged 13 and older. We do not knowingly collect signup information from children under 13. If you believe a child has submitted information, use the form to request its removal.

We will post changes here and update the date above. If a change materially affects how we use existing waitlist information, we will provide an appropriate notice or obtain consent where required before applying it.