Privacy notice

Last updated 23 July 2026

This notice covers the LaunchBox Games platform and the Scoop Stack game that runs on it. It is written to be read, not to be survived. If something here is unclear, ask the shop you played at, or contact the operator of this installation.

Two different relationships

If you played a game, the shop whose QR code you scanned decides what is collected and why. LaunchBox Games processes it on their behalf.

If you run a shop and have an account here, LaunchBox Games holds your account details directly.

What is collected when you play

• Your chosen tag. Up to eight letters or numbers that you type. Use initials if you would rather not be identifiable — it appears on a public leaderboard.
• Your score and how you played. Scoops caught, precision, streaks, and the compact list of in-game events used to verify the score was genuine.
• A random device identifier. Generated in your browser, stored only in your browser, and used to enforce limits like "one reward per person per day". It contains nothing about you and is not linked to any advertising identifier.
• A one-way hash of your IP address. The address itself is never stored. The hash exists only to slow down abuse and to spot one device flooding a leaderboard.
• Which QR code you scanned. So the shop can tell whether the counter poster works better than the window sticker.

Email addresses and phone numbers

A shop can choose to ask for one after you win, and can also choose not to ask at all. Where it is asked for:

• It is always optional. Your reward code appears on screen whether or not you give one.
• Agreeing to marketing is a separate tick box that starts unticked. Giving your address so a code can be sent to you is not the same as agreeing to marketing, and the two are recorded separately.
• The exact wording you agreed to is versioned and stored alongside your consent, with the date and time.
• The value is encrypted at rest using authenticated encryption. It is never displayed on a leaderboard and never shared with another shop.
• Nothing is sent automatically. A shop that wants to email you has to export the list and use their own mail provider — and should only include people who ticked the box.

What is not collected

• No third-party advertising or analytics trackers. There are no ad networks in this product.
• No location tracking. Scanning a QR code at a counter tells the shop which poster was scanned, not where you are.
• No camera or microphone access in the game. The staff redemption screen uses the camera to read a QR code, and those frames are processed on the device and never uploaded.
• No purchase or payment card data. LaunchBox never touches a customer's payment.

How long it is kept

• Leaderboard entries stay as long as the shop keeps the board. Daily boards roll over each night; the record is retained for reporting.
• Reward codes are kept so a redemption can always be traced and disputed.
• Contact details are kept until the shop deletes them or you ask for removal.
• Rate-limit records expire automatically within hours.

Your choices

• Ask to be removed. Contact the shop you played at. Deleting a contact record is a single action in their console and it is permanent.
• Get a copy. The shop can export everything held against your contact record as a CSV.
• Play without giving anything. Skip the contact box. The game and the reward both work.
• Clear your device identifier. Clearing this site's data in your browser removes it. A new one is generated next time.

Security

Contact values are encrypted with authenticated encryption using a key held in server configuration, outside the web root. Passwords are hashed, never stored or logged in readable form. Sign-in attempts are rate limited and lock out after repeated failures. Every administrative change is written to an audit log. Traffic is served over HTTPS where a certificate is installed.

Shop accounts

For account holders we hold your name, email, hashed password, business and location details, billing status and invoice history, and an audit trail of changes made in the console. This is used to run the service and bill for it.

Where the data lives

This is self-hosted software. Data sits in the database of whoever runs this installation, on their hosting, under their control. Ask the operator if you need to know the jurisdiction.

Changes

If this notice changes in a way that affects what is collected, the consent wording is re-versioned and existing consents are not silently carried over to the new terms.