Privacy Policy

Overview

Mile Mischief is operated by Mile Mischief. This policy explains how we collect, use, share and protect personal information. Contact mbrashars@gmail.com.

Information we collect

• Account details — name, email and sign-in identifier (passwords stored only as a one-way hash).
• Registered-player and vehicle-group information — seat names and roster membership for your adventure.
• Purchase and order records — route, amount and order status processed by Stripe; we never receive your full card number.
• Adventure progress — stamps, cards, points, achievements and coupon issuance/redemption records needed to run the game.
• Support communications — messages you send us.
• Technical information — IP addresses and request logs used for security and debugging.
• Location during a drive — GPS is used to guide your adventure and trigger stop information. Precise GPS traces are erased on a schedule (see Retention).

Payments

Payments are handled by Stripe. We receive payment status, transaction identifiers and related billing information necessary to fulfill orders and handle refunds. Stripe processes payment information under its own privacy practices.

How we use information

We use information to create accounts, deliver purchased adventures, manage vehicle participants, calculate game progress, prevent duplicate rewards or coupon redemption, provide support, maintain security, comply with legal obligations and improve the service.

Sharing

We share necessary data with providers that operate our hosting, mapping, payments and communications. Sponsors receive only aggregate counts for offer validation — never your payment credentials or personal data. We may disclose information when legally required.

Cookies and analytics

We use a single session cookie to keep you logged in. We do not use advertising SDKs, tracking pixels or third-party analytics.

Retention and security

An automated job runs daily and permanently removes sensitive data: precise GPS coordinates in navigation events after 30 days, live-presence pings after 7 days, and IP addresses in session and funnel logs after 30 days. Stamps, cards and purchase records are kept so your collection and history keep working. We use reasonable technical and organizational safeguards, but no internet service can guarantee absolute security.

Your choices and rights

You may contact mbrashars@gmail.com to request account access, correction or deletion, subject to applicable law and necessary recordkeeping.

Children and changes

Children ride as named seats under an adult's account; we do not create accounts for children. We may update this policy; the effective date above identifies the current version.