Lock Challenge stores the information required to let creators manage locks and let players solve them in a browser.
Creator data
We store your account email, the locks and content you create, and the settings needed to publish and manage those locks.
Player attempts
Players do not need an account. Lock Challenge records anonymous attempt and completion data so creators can see how their locks are played. Players and attempts are not metered.
How answers are protected
Discrete lock answers are stored as bcrypt hashes. Verification happens on the server, so the correct answer is not included in the page sent to a player's browser. Location-based locks require server-side parameters so a submitted position can be checked.
Your controls
Creators can manage their published locks and hidden content from the dashboard. For privacy or account questions, including deletion of your data, write to contact@lockchallenge.com.
Deleting your account
You can delete your account yourself, from your profile. Your sign-in goes at once and your locks stop opening for players. Three things are kept. Your payments, because accounting law requires it, with the email address they were made under. What you had paid for and is still running, so that signing up again with the same address, once that address is confirmed, gives it back. And a copy of your content for 30 days, in case the deletion was a mistake, after which it is erased for good.
Payments
Payments are processed by Stripe. Card details are entered on Stripe's own form and never reach our servers: we store the customer and subscription identifiers Stripe gives us, the product bought, the amount and the date, which is what a receipt and an invoice need.
Player email addresses
A creator can ask players for an email address at the moment of the reveal. When they do, the address is stored with that lock and shown only to its creator, who can export the list. The creator decides what that address is used for and is responsible for it; Lock Challenge never sends marketing to those addresses. Ask the creator of the lock to delete yours, or write to contact@lockchallenge.com and we will.
Connected apps
If you connect Lock Challenge to an assistant such as ChatGPT or Claude, that assistant can, at your request, read, create, change and delete the locks, games and recipient lists of your account. It receives the data needed to answer you, including your locks' answers and statistics; webhook signing secrets are never sent to it. Access requires your consent on a Lock Challenge page and can be withdrawn at any time from the "Connected apps" section of your profile, which takes effect immediately. What the assistant does with that data on its side is governed by its own privacy policy.
Recipient lists
A creator can save lists of people to invite to a lock, with their email address and, optionally, their first and last names. A list is visible only to the creator who saved it, is used only to send the invitations that creator asks for, and can be deleted at any time. The creator is responsible for having the right to contact those people. To have your address removed from a list, ask the creator, or write to contact@lockchallenge.com and we will.