Privacy & cookie policy
This policy explains what personal data Exitdex processes, why, and what rights you have. In short: we only ask for personal data when you send us something or sign in, we use no advertising trackers, and no analytics service is loaded unless you accept one.
Who is responsible
The data controller for this site is the company stated in the legal notice. For privacy matters, write to .
Forms you submit
When you suggest a correction to a venue or claim a listing, we process what you enter: your message, and your name and email address if you choose to give them (both are optional), plus any language or accessibility details you tick. We use this only to review the suggestion and reply to you.
If you send a group booking request, we process your name, email address, group size, city and, if you provide them, a date, phone number and message. We use this only to handle your request.
If you ask to be notified about an escape room kit, we store your email address only to tell you when it becomes available.
You can ask at any time for a submission to be deleted; your personal data is then erased or anonymised.
Account, reviews and saved lists
Signing in is optional and uses your Google account; we receive your name, email address and profile picture and use them only to operate your account. We do not share or sell them.
Ratings and reviews require an account and are published on the site together with your account name. Your saved venue lists are only visible to you. If you ask us to delete your account, the associated data is removed.
Cookies
The site sets NEXT_LOCALE to remember your language for the session, and one strictly necessary first-party cookie, er_consent, which stores your cookie choice for 180 days. Sign-in cookies (next-auth.*) are only set when you sign in and last up to 30 days.
No analytics or marketing cookies are set unless you choose "Accept all" in the cookie banner. As of today no analytics service is loaded at all; if one is added, it will only run with that consent. You can change your choice at any time via "Manage cookies" in the footer.
Server logs
Like nearly every website, our servers keep technical access logs (IP address, browser identifier, requested page, timestamp) to secure the service and diagnose faults. Logs are kept briefly and are not used to profile visitors. Traffic passes through Cloudflare, which processes connection data as our service provider.
Anonymous usage statistics
We keep a simple count of a few actions that show us which listings are useful: clicks through to a venue’s own website or a room’s booking page, and visits to our print-at-home kit and group-booking pages. These counts are anonymous and aggregate only. We store a running total per listing per day and nothing that identifies you: no cookie, no IP address, no profile. Because it cannot be traced to a person, it needs no consent and is unaffected by your cookie choice.
Information about venues
The site publishes business information about escape room venues: names, addresses, opening details, rooms and prices. It comes from openly licensed sources and the venues’ own public websites, and concerns businesses rather than private individuals. A venue can have its information corrected or removed by contacting us.
Your rights
Under the GDPR you can request access to your data, rectification, erasure, restriction of processing and portability, and you can object to processing based on legitimate interest. You can also lodge a complaint with your national data protection authority. To exercise these rights, write to .
Changes
We will update this policy as the service evolves and state the date of the last change here. Last updated: 22 July 2026.