Keyhole Games

Privacy

How we use your details

Plain language, short, and kept up to date. Last updated 26 October 2026.

Keyhole Games is run by Keyhole Games, ABN 72 151 694 685, PO Box 1093, Nambour QLD 4560. On this page, "we", "us" and "our" mean BOXA Network.

Promise

Never sold

We do not sell or rent your details, and we do not share them with advertisers.

Location

No location

Nothing on this site asks for your location or keeps it.

Your call

Ask any time

See what we hold, fix it or have it deleted, through the contact form.

What we record when you play and browse

We count what happens on this site with our own tools, on our own server. It is anonymous: no name, no email, no account, no IP address, no location and no tracking cookies. The one identifier is a random code your browser makes up and keeps in its local storage (not a cookie). Our server stores only a one-way scrambled form of it, so we can count how many different devices play, come back or leave a puzzle, and tell ten plays by one device from ten different people. We cannot look a person up from it, but because it identifies a device, we treat it as personal information and handle it under this page. Clear this site's data in your browser and it goes; the next visit counts as a new device.

  • Puzzle results. For every daily and every puzzle: that it was opened, whether it was finished, how long it took, wrong tries, hints used, whether the player gave up, the kind of device, and any stars or tags you give it. We use these to fix a broken puzzle, to see which ones people enjoy, and to bring back puzzles few people played.
  • Where players stop. Which step of a puzzle was on screen when a player left, so we can see where a puzzle loses people.
  • The path to a game. How many visits go from a page to a game's page, and on to the start of checkout once games are on sale. Counts only, never tied to who you are. Payments themselves are covered under "If you make a player account".
  • Where visits come from. The site that sent you, any campaign tag in the link, and the code on a share card or shared link, so we can tell which share worked.
  • Return visits. Whether a device comes back the next day, a week later and a month later.
  • How the site is running. Errors in a page's code (the error message and the script file name, with web addresses removed), whether your phone plays the 3D version of a game or the flat one, and how long a game takes to start.

For visits we keep the page you opened (without anything after the question mark), the website you came from and any campaign tags in the link. For plays we also keep the day, which puzzle, how it ended, the time, wrong tries, hints and the kind of phone (iPhone, Android, phone or computer). If you open a shared result, we keep which game and day it was shared for. These records are deleted after 400 days. A browser that sends Do Not Track or Global Privacy Control is not counted in the visit records; a play result still counts toward that puzzle's numbers.

Your streaks, the puzzles you have played, your sound and Calm mode settings and the keys you have found stay on your own device, in your browser. We do not receive them.

We do not sell any of this and never use it for advertising.

We also use Google Analytics to count visits and see which pages and games people look at, so we know what to build next. It sees your browser, rough location (city level) and the pages you visit, never your email or your answers. It also counts game purchases: which game and the price, never who bought it. We do not use it for advertising.

What we collect through our forms

  • Your email address, when you ask to hear about a game launch.
  • Which game you asked about.
  • Whether you ticked the box to hear about other new games.
  • The time you signed up and the page you were on, so we can show we have your consent.
  • If you use the contact form: your name if you give it, your email and your message, used only to reply to you.
  • Our forms use a hidden check to stop bots, and nothing else.

If you make a player account

  • Your email and a password. The password is stored scrambled (hashed), so nobody can read it, us included.
  • Your scoreboard name. It is the only part of your account anyone else sees, so a nickname is fine.
  • Your saved progress in each game: the puzzles and cases you have solved and when, your attempts, hints used and time taken.
  • While you are signed in, the server keeps your IP address and browser type with your session to protect the account. They go when you sign out or the session ends.
  • A sign-in history: when you sign in, we note the time, how you signed in (email or Google) and the kind of device, for example "iPhone Safari". Never your IP address or where you are. It helps us spot someone else using your account, and we keep it for 12 months.
  • A list of the emails we send you: the subject, when, and whether it went, kept for 12 months so we can help if one goes missing. We never keep what the email said, so no password reset link is stored.
  • If you play a daily while signed in, your result goes on that day's board under your scoreboard name, and your account keeps which puzzles you have finished, so you are not given the same one twice, and your streaks. All of it is deleted with your account. Guests are counted, never named.
  • If you buy a game, our payment provider Stripe takes the payment. We receive your email, the game, the amount, the date and a link to your receipt, and never your card number. Stripe's privacy policy applies to the payment itself.
  • If you buy a gift card, we keep the email you paid with (to send the code), the amount, and the names and message you put on the card. When the card is redeemed, we keep which account redeemed it and when, and the account's balance history.
  • If you host a game during the Launch Party (25 October to 30 November 2026), we record that your account hosted, the first day and how many games, to give the Founder credit and badge. Nothing else is kept for it, and it is deleted with your account.
  • A play record: when you open each game, the puzzles and cases you finish and when, your finish times, and your purchases and refunds. It keeps your account running and lets us check a refund request fairly. Starting a game again does not erase it, and it is in Download my data. It holds no location and no IP address.
  • You can delete your account and everything saved with it from the account page at any time. Records of purchases are kept, separated from your account, for as long as tax law requires, and the play record for any game you bought stays with that purchase, without your account, so a payment dispute can still be answered. That play record is deleted five years after the account is.
  • If your account has not been used for three years and holds no purchases or balance, we email you and close it 30 days later unless you sign in. Accounts with games you bought or money on the balance are kept.
  • Your sign-in history and the list of emails we sent you are in Download my data, with everything else we keep.

In our games

  • Ratings and comments. When you rate a game at the end, we keep your stars, any tags and comment, how long you played, whether you played solo or with others, and the kind of device. If you are signed in, the rating is linked to your account. If not, it is linked to a random number your phone makes up, which we store scrambled. Rating the same game again replaces your earlier rating. Comments are emailed to us so a person reads them.
  • Stopping spam. We also keep your connection's IP address, scrambled with a secret key so it cannot be read back. It is used only to stop the same person flooding the ratings.
  • If you delete your account, your rating stays in that game's average, with your name and account removed.

Party games

Our party games are played in a party room. Murder in the Dark, Snooze Bandit, Spot the Blow-in and Which Would Ya? are free; the Party Pack 01 games need the host to own the pack. To open a room you need a player account. Everyone else joins with the room's QR code or code, signed in or as a guest.

  • Guests. Pick a nickname or take one of our fun names. Please don't use your real name. We don't ask guests for an email or anything else, and nothing is saved to a guest: no account, no scores, no history.
  • What a room holds while it's open: each player's nickname (or scoreboard name), any secret role or card dealt to them, votes, answers and scores, and in some games short lines that players type (like Two Truths and a Lie).
  • Who sees it. Your role and cards show only on your phone. Lines you type show only on the phones in your room, after the host has had a chance to check them, and the host can hide any line. We don't read what's typed, and nothing from a party room is ever shown on our website, scoreboards or social media.
  • Filtering. Typed lines go through an automatic filter that also blocks links, email addresses and phone numbers. Keep what you type about you: no addresses, phone numbers, schools or other people's full names.
  • How long. Lines you type are deleted when you leave the room or the host removes you, and all of them the moment the party ends: when the host ends it, or when the room closes after 12 hours without play. Roles, cards and votes go when the room closes too (Murder in the Dark roles within a day). Nicknames and scores are deleted within a day of the room closing. Party games add nothing to your account.
  • Reports. If a player reports a line, it comes off every phone in the room straight away. We keep a note that a line was reported, in which room and game and when, for two years, so we can look after the games. The line itself is deleted when the room closes. We never record who reported it or who wrote it.
  • Security logs and backups. Like every website, our host keeps a security log of connections to the site (the internet address, the type of device and the pages asked for) for about 7 days. It doesn't record what anyone types, their nickname or their votes. Our firewall keeps the address of a device it has blocked for 30 days. Whole-site backups, kept for 30 days so we can recover from a fault, can include a party that was running when the backup was taken.
  • If something upsets you, tell the host, who can hide it, and tell us through the contact form. You can also report serious online harm to the eSafety Commissioner at esafety.gov.au.

Tester applications

If you apply to be a tester, we keep your first name, email, suburb or town, phone type, what you'd like to test, whether you play with kids, and when you applied, so we can choose testers. If you're not picked, your application is deleted after 90 days. If you become a tester, it's kept with your player account and deleted with it. Tester access lasts 60 days unless we extend it, and we email you when it ends.

Score emails, news and offers

Score emails from free games. If you give your email when you start a free game, we use it to send your score when you finish, with a link that saves it to a free player account and gives you $2 off your next game. If you don't finish within a day, we send one reminder. We don't make an account unless you tap the link. We keep your email with that game's result for up to 90 days, then delete it; if you tap the link, it moves to your player account instead. We only send news if you tick the separate news box. Every email has an unsubscribe link. We never ask for an email from party guests or in games for kids.

News and offers. If you ticked "Send me news and offers", we also email you news about new games, deals and gift ideas. If you ticked the older box about other new games, we only email you about new games. We keep a record of when, where and with what wording you ticked the box, so we can show you agreed. When you unsubscribe we keep a note that you did, so we don't add you back by mistake. The news box is for people 16 or older.

How our emails are sent. Every email from us, including password resets and receipts, goes out through Brevo, an email service based in France that keeps its data in the European Union. To deliver an email and deal with any that bounce, Brevo keeps the address it went to, the subject and when it was sent. Brevo also notes whether an email was opened, using a tiny invisible image in the email. We use that only to check that our emails arrive and work, never to build a profile of you or to show you ads. If your mail app does not load images, no open is recorded. To stop news emails, use the unsubscribe link in any of them; account emails stop when you delete your account.

What we do with it

  • A launch alert means one email when that game goes live.
  • If you ticked the box, we also email you about other new games. Not often.
  • Every email has an unsubscribe link. Use it and you will not hear from us again.

What we never do

  • We do not sell or rent your details, and we do not share them with advertisers.
  • We do not track your location. Nothing on this site asks for it or keeps it. The Test your phone page works the same way: its location, camera, microphone and motion readings stay on your phone, and we only count which tests passed.
  • We do not follow you from site to site, and we do not build a profile of you.

Where it is kept, and who helps us

Sign-ups, results and player accounts are stored on our website server. Some providers help us run the site: our web host, our email service Brevo, Stripe for payments, and a bot check on our forms. Some of them keep data outside Australia. We pick providers that protect it, and they may use it only to do their job for us.

Your rights, in plain words

We handle your details the way the Australian Privacy Principles in the Privacy Act 1988 ask, whether or not the law requires it of a business our size. In practice:

  • We take only what a feature needs, and tell you why (this page).
  • We use it only for that, or for something you would expect. We never sell it.
  • Marketing is by consent. We email news and offers only if you ticked the box, and every email has an unsubscribe link that works.
  • Providers overseas. If a provider keeps your details outside Australia, we choose one that protects them, and we say so above.
  • We keep it safe, and delete what we no longer need. If a breach is likely to cause serious harm, we tell you and the Office of the Australian Information Commissioner (OAIC).
  • You can see it and fix it. Ask through the contact form and we will show you what we hold about you and correct it. We aim to answer within 30 days. Results that carry only a random device number cannot be matched to a person, so there is nothing to look up.
  • You can complain. Tell us first through the contact form and we will try to fix it. If you are not happy with our answer, you can complain to the OAIC at oaic.gov.au.

Questions, corrections or deletion

Send us a message through the contact form and we will show you what we hold, fix it or delete it.

This page covers the website and our games. If a game starts collecting anything new, we add it here first.

Join a game

Type the four letters on the host's screen.

No app and no account needed. Guests always play free.