Master Key is software that escape rooms and other entertainment venues use to take bookings, collect waivers, run their team and track results. This policy explains what personal information Master Key handles, why, and the choices you have. It is published by Master Key Suite LLC, doing business as Master Key Suite and Master Key (“Master Key”, “we”, “us”).
Venues decide, we provide the tools
Most information in Master Key belongs to a venue: its guests' bookings and waivers, and its staff's schedules and messages. For that information we act as the venue's service provider. We handle it on the venue's instructions and only to run Master Key for them. The venue's own privacy notice explains how it uses your information, and the venue is the first place to go with questions or requests about it.
We decide how to handle a smaller set of information ourselves: details of the people who run venue accounts, messages people send us, and visits to this website.
What we collect
Guests of a venue
- Bookings: your name, email, phone number, party size, any note you add, your answers to the venue's checkout questions, and the link or campaign that brought you to the booking page.
- Waivers: your name, email, phone number, date of birth, team name and any other fields the venue asks for; your signature (drawn, typed or confirmed by a click); the date, your IP address and browser type when you signed; and whether you asked for a copy or agreed to hear from the venue. A parent or guardian can add minors to their waiver with each minor's name and date of birth.
- Games: results, times and team names, and group photos the venue takes and uploads.
- Payments: card payments are handled by Square. Your card number goes directly from your browser to Square and never reaches Master Key. We keep the amount, how you paid (for example card or Apple Pay) and, for gift cards, the last four digits.
Venue staff
- Your name, email, phone number, photo and role, and the dates you joined or left.
- Your shifts, availability, time-clock records, pay rate and declared tips, some of which come from the venue's Square account.
- Team chat messages and attachments, tasks, training and quiz results, evaluations and sign-offs.
- If you turn on notifications, the push subscription your phone or browser creates.
Master Key does not track your location.
Venue owners and people who contact us
Your name, business details and contact information, what you tell us when you email us or book a demo, and the billing details for your venue's plan.
From services a venue connects
A venue can connect Master Key to services it already uses, such as Square, Bookeo, EscapeKit and Mailchimp. When it does, we bring in the records the venue chooses, such as past bookings, players, sales and timecards.
How we use it
- To run Master Key for each venue: bookings, waivers, game results, schedules, messages and reports.
- To send the emails a venue has turned on, such as booking confirmations, reminders, waiver copies and game results, and sign-in emails to staff.
- To keep Master Key secure, prevent fraud and abuse, and fix problems.
- To provide support and to bill venues for their plans.
- To meet legal obligations.
We do not sell personal information, and we do not use guests' or staff's information to advertise Master Key.
Marketing from venues
Master Key does not send newsletters to guests. A venue may send you marketing if you agreed to it, for example on your waiver, usually through its own email service. To stop it, use the unsubscribe link in that venue's email or contact the venue.
Who we share it with
We share personal information only with:
- The venue you booked with or work for.
- Service providers that run parts of Master Key for us under contract: Supabase (database and file storage), Vercel (hosting), Resend (email delivery), Square (payments, for venues that use it), and the push services built into your phone or browser (Apple, Google and Mozilla).
- Services the venue connects, such as Mailchimp or an automation tool it links with webhooks. Those services handle the data under their own policies and the venue's agreement with them.
- Others when the law requires it, or to protect the rights and safety of people, venues or Master Key, or as part of a sale or reorganization of our business.
Cookies and similar technology
- This website uses no analytics or advertising cookies.
- Signing in to Master Key sets cookies that keep you signed in.
- Booking pages keep your booking-in-progress in your browser's session storage, which clears when you close the tab. Your display theme is saved in your browser.
- A screen a venue pairs as a wall display keeps a cookie that identifies that screen.
- A venue can add Google Analytics or a Meta Pixel to its booking pages to measure its own advertising. These load only on that venue's booking pages, never on pages that show your booking or waiver details, and not at all if your browser sends Do Not Track or Global Privacy Control.
How we protect it
- All traffic to Master Key is encrypted with HTTPS.
- Each venue's data is kept separate by database-level access rules, and staff see only what their role allows.
- Passwords and keys a venue enters to connect other services are encrypted before they are stored.
- Group photos and waiver files are kept in private storage; guests see their photos through short-lived links.
No system is perfectly secure. If a breach affects your information, we will tell the venue and, where the law requires, you.
How long we keep it
We keep a venue's information while its account is active and as the venue directs. Signed waivers and payment records are kept as the venue's legal and financial records. Some working data is deleted automatically, such as unfinished checkouts after 30 days. When a venue's account ends, we delete or anonymize its data after the export period in our Terms, unless the law requires us to keep it.
Your choices and rights
You can ask to see, correct or delete your personal information, or ask us to stop using it for a purpose. For a venue's guest or staff records, contact the venue first; we will help the venue respond. For anything else, or if you can't reach the venue, email support@masterkeysuite.com. We will confirm your request and reply within the time the law allows. Depending on where you live, you may have further rights under local law, and we will honor them.
Children
Master Key is not meant for children under 13, and children should not book or sign waivers themselves. A parent or guardian may add a minor to a waiver with the minor's name and date of birth, for the venue's records. If you think a child has given us information, email support@masterkeysuite.com and we will delete it.
Where your information is stored
Master Key is run from the United States and stores its data on servers in the United States.
Changes to this policy
We will post any update here with a new date. If a change is significant, we will tell venues by email before it takes effect.
Contact
Master Key Suite LLC · support@masterkeysuite.com