Terms & conditions

1. Purpose and audience

EscapeDash provides escape room operators with a custom mini escape game, embedded on their website through a widget and renewable every month on request. Visitors who complete the mission receive the escape room’s promo code by email; the Customer gets the winners’ addresses, under the conditions set out in section 10.

The service is reserved for businesses acting in the course of their trade. Consumer withdrawal rights therefore do not apply.

2. The service

• One game per room, then a new game per month on request. Each subscribed room gets a first mini game at signup. After that, you can request a new mini game per room from your dashboard, at most one per calendar month; changes requested to adjust a game do not count. Each game is written from the information you provide about the room. It is reviewed by our team before being sent to you.
• Customer review. Each new game is submitted to you before going live: you can play it, approve it or request changes from your dashboard.
• Widget. The game is shown on your website through one line of code, compatible with any website that accepts HTML. Installing it on your website remains your responsibility.
• Winners and coupons. A player who completes the mission receives your promo code by email only, limited to one code per email address, per room and per month. Winners appear in your dashboard.

3. Account

You agree to provide accurate, up-to-date information and to keep your credentials confidential. Any action taken from your account is deemed to be taken by you. Tell us immediately about any unauthorised use.

4. Free trial

The subscription starts with a 7-day free trial, giving you time to install the widget. A payment card is required at signup; it is not charged during the trial. Unless you cancel before the trial ends, the subscription continues and the first payment is taken automatically. If you cancel during the trial, nothing is charged.

5. Prices and payment

• Monthly: €99 per month for the first room, €49 per month for each additional room.
• Yearly: 10 months paid for 12, paid in one go at the start of each yearly period.

Prices are in euros excluding taxes; applicable VAT is added where due. Payment is made by card, in advance at the start of each period, through our provider Stripe. An invoice is issued for each payment.

Adding a room mid-period: the amount for the time remaining until the end of the period (proration) is charged immediately.

Late payment: after a failed charge and an unanswered reminder, we may suspend the display of the games until payment is made. Under Article L441-10 of the French Commercial Code, any amount unpaid when due bears interest at three times the French legal interest rate and gives rise to a fixed €40 recovery fee.

We may change our prices: any change is notified to you by email at least 30 days before it applies, from the next period. You may cancel before that date if you do not accept it.

6. Term and cancellation

The subscription is entered into for the chosen period (one month or one year) and renews automatically for the same period.

You can cancel at any time from your dashboard or by email. Cancellation takes effect at the end of the current period: the service stays active until then, and the current period is not refunded, including on the yearly plan.

EscapeDash may terminate the subscription in the event of a serious breach by the Customer (in particular unlawful use of the service or of players’ data) not remedied within 15 days of a formal notice sent by email, or immediately in the event of a breach that makes it impossible to continue the service.

When the subscription ends, the widget stops showing the games. What happens to players’ data is set out in section 10.11.

7. Promo codes and coupons

The promo code sent to winners is the Customer’s own: you create it in your own booking tool and enter it in your dashboard. You freely set its value and conditions, and you undertake to honour it under the conditions announced to players.

EscapeDash only passes the code on to winners. EscapeDash is not a party to the relationship between the Customer and its clients and cannot be held liable for the use of the code, its refusal or its commercial conditions. It is up to you to check that the offer complies with applicable rules (in particular on commercial practices and promotional games).

8. Customer obligations

• provide accurate information about your rooms and hold the rights to the texts, photos and trademarks you send us;
• install the widget on your website and inform your visitors about the processing of their data (see section 10.10);
• use players’ email addresses only in line with their choice: in particular, never send marketing to a player who did not tick the consent box;
• not use the service for unlawful purposes, nor attempt to bypass its technical limits.

9. Intellectual property

EscapeDash retains all rights in the service, the widget, its code and its interface. For the duration of the subscription, EscapeDash grants the Customer a non-exclusive, non-transferable right to display on its website the games produced for it. The Customer grants EscapeDash the right to use the materials it provides (texts, photos, logo) solely to produce and display its games.

Unless the Customer expressly objects, EscapeDash may mention the escape room’s name and logo as a customer reference.

10. Personal data – data processing agreement (Art. 28 GDPR)

This section is the data processing agreement required by Article 28 of Regulation (EU) 2016/679 (GDPR). For players’ data collected through the widget, the Customer is the controller and EscapeDash is the processor. For the Customer’s own account data, EscapeDash is the controller, as described in its privacy policy.

10.1 Subject matter, duration, nature and purpose

EscapeDash processes players’ data on the Customer’s behalf in order to run the mini games, email the promo code to winners, record and pass on their choice about marketing, and make this information available to the Customer in its dashboard. Operations performed are collection, recording, storage, consultation, sending emails and erasure. Processing lasts for the duration of the subscription, then until deletion under section 10.11.

10.2 Data and data subjects

• Data subjects: visitors to the Customer’s website who play the mini game (“players”).
• Data: winners’ email addresses; game data (progress, answers, dates and times, language); marketing choice and its date. No sensitive data is collected and EscapeDash does not store players’ IP addresses.

10.3 Documented instructions

EscapeDash only processes data on the Customer’s documented instructions. These Terms, the service settings and the Customer’s actions in its dashboard (for example deleting a winner) constitute those instructions. If EscapeDash considers that an instruction infringes data protection law, it informs the Customer immediately. EscapeDash never uses players’ data for its own purposes and never sells or rents it.

10.4 Confidentiality

EscapeDash ensures that persons authorised to process the data have committed to confidentiality or are under a statutory obligation of confidentiality, and only access it to the extent necessary.

10.5 Security

EscapeDash implements technical and organisational measures appropriate to the risk (Art. 32 GDPR), including:

• encryption in transit (HTTPS/TLS);
• access control through authentication, with isolation: each Customer only accesses the data of its own games; administrative access restricted to authorised persons;
• database hosted in the European Union;
• logging of operations and of emails sent;
• data minimisation: no storage of IP addresses, no tracking cookies, limited retention periods and automatic deletion.

10.6 Sub-processors

The Customer gives EscapeDash a general authorisation to engage the following sub-processors:

Supabase

Database and account authentication. Data hosted in the European Union (AWS, Paris region, eu-west-3).

Vercel Inc.

Hosting of the website and server functions (including the widget API). United States: transfers covered by the EU–US Data Privacy Framework and the European Commission’s standard contractual clauses.

Stripe Payments Europe Ltd

Subscription payments and invoicing (customers only). Ireland; transfers to the United States covered by the Data Privacy Framework and standard contractual clauses. Stripe processes card data: we never receive or store it.

Resend

Transactional emails (winners’ promo codes, account emails). United States: transfers covered by standard contractual clauses and the Data Privacy Framework.

Cloudflare (R2)

Storage of game illustrations. No personal data is stored there.

EscapeDash informs the Customer by email of any addition or replacement of a sub-processor at least 30 days in advance. The Customer may object on legitimate data protection grounds; failing agreement, it may terminate the subscription at no cost, effective on the date of the change. EscapeDash imposes on each sub-processor data protection obligations equivalent to those of this section and remains liable for their performance. Transfers outside the European Union rely on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

10.7 Data subject rights

EscapeDash helps the Customer respond to players’ requests to exercise their rights (access, rectification, erasure, restriction, objection, portability, withdrawal of consent). The Customer can delete a winner directly from its dashboard. If a player contacts EscapeDash directly, EscapeDash forwards the request to the Customer without delay and, following its instructions, carries out the rectification or erasure itself.

10.8 Assistance

EscapeDash provides the Customer with the information reasonably needed to carry out, where required, a data protection impact assessment and to consult the supervisory authority, and helps it meet its security obligations.

10.9 Personal data breaches

EscapeDash notifies the Customer of any personal data breach without undue delay and at the latest 48 hours after becoming aware of it, by email, with the information available: nature of the breach, categories and approximate number of data subjects and records concerned, likely consequences, measures taken or proposed. As controller, the Customer is responsible for notifying the CNIL and, where required, the data subjects; EscapeDash assists it.

10.10 Customer obligations

The Customer, as controller, undertakes to:

• inform players about the processing of their data, in particular by mentioning the game in its own privacy policy; the widget also shows a link to the “Players of the mini games” section of EscapeDash’s policy;
• only use for marketing the addresses of players who ticked the consent box, and never contact for marketing a player who did not tick it; offer an easy way to unsubscribe in every marketing message, and act on withdrawals of consent;
• use the promo code and the collected addresses lawfully and fairly;
• handle any data it exports or copies outside the service in compliance with the GDPR, under its sole responsibility.

10.11 End of the contract

When the subscription ends, the Customer may, on request, obtain an export of winners’ email addresses and their marketing choice. EscapeDash then deletes players’ data within 30 days, unless the law requires it to be kept. During the contract, data is deleted automatically according to the periods set out in the privacy policy (emails without consent: 12 months after the win; with consent: 3 years after collection; game data: 12 months; email log: 6 months).

10.12 Audits

EscapeDash makes available to the Customer the information needed to demonstrate compliance with this section. The Customer may have an audit carried out, at its own expense, by itself or by an independent auditor bound by confidentiality, at most once a year unless a breach has occurred, with 30 days’ written notice and without disrupting the service. EscapeDash may first respond by providing documents and its providers’ certifications.

11. Availability and liability

EscapeDash strives to keep the service available but cannot guarantee it will be uninterrupted, in particular during maintenance or in case of an incident at a provider. EscapeDash’s obligation is one of means (best efforts).

EscapeDash is not liable for indirect damage (loss of revenue, customers or reputation), nor for the operation of the Customer’s website or booking tool. Except in case of gross negligence or wilful misconduct, EscapeDash’s total liability under the contract is limited to the amounts paid by the Customer in the 12 months preceding the event giving rise to liability.

12. Changes to these Terms

We may amend these Terms. Material changes are notified to you by email at least 30 days before they take effect; if you do not accept them, you may cancel before that date. Continuing the subscription afterwards constitutes acceptance.

13. Governing law and disputes

These Terms are governed by French law. In the event of a dispute, the parties will first seek an amicable solution (write to us at contact@escapedash.com). Failing that, the courts with jurisdiction over the publisher’s registered office have exclusive jurisdiction, including in the case of multiple defendants or third-party claims.