Privacy
Short version: drafts stay on your device. When you buy, we save your hunt so your private link works anywhere, and we keep it only for that. There are no accounts and we do not store your email.
Drafts stay on your device
While you build, the names, spots, clues and messages you type are saved in your browser's local storage, so you can come back and edit. We do not receive them. The PDF is built in your browser too.
Once you buy: your hunt and its private link
When you pay (or start a card checkout), we save a copy of the hunt on our server and give it a private link. That is what lets you reopen and edit it on any phone or laptop. We keep it for that and nothing else.
- Anyone with the link can open and edit the hunt, so keep it private.
- Delete it any time with "Delete my hunt" on the hunt, or email us and we will do it.
- If you start a card checkout and never pay, we delete that copy after about 2 days.
What the hint QR code contains
Each QR code holds a short hint, the card number, the occasion and the theme, packed into the web address. When someone scans it, the page reads that address and shows the hint. Our server does not store it. Web servers can log the page address, but the hint sits after the "#", which browsers do not send.
Payments
Payments are handled by our payment provider. We never see your card details. We do not store your email. Polar, our payment provider and merchant of record, has it for your receipt. We receive confirmation that a payment succeeded and which hunt it was for.
Etsy orders
If you redeem an Etsy order, we ask Etsy whether that order is paid and how many hunts it holds, and check the name you typed against the name on the order. We do not store your name, your email or the order number. We keep only a one-way scrambled form of the order number, so each order gives its hunts once, and the hunt credits it gave. The term 'Etsy' is a trademark of Etsy, Inc. This application uses Etsy's API, but is not endorsed or certified by Etsy.
If our support team sends you a code, we check it against our list and mark it used. The credit is linked to the hunt it made, not to a person. To stop people guessing codes, we count tries per visitor for up to an hour. We store only a one-way scrambled form of your IP address for that count, not the address itself, and old counts are deleted automatically.
Optional AI clue writer
If the "Write it for me" button is on, the spot name (and your inside joke, if you add one) is sent to Anthropic to write one clue. Do not put private details in those fields. To limit abuse we also keep a count of requests against a one-way scrambled form of your IP address for about an hour, then it expires.
Children
Cluemade is for adults planning surprises. A parent may make a hunt for a child. We do not market to children and do not collect any information about them.
Analytics and cookies
We do not use advertising cookies. To see how many people visit, we use Cloudflare Web Analytics. It sets no cookies, collects no personal data and does not track you across sites.
Contact
Questions? [email protected]