Privacy & cookies
Who is responsible
National Treasure Hunt is the data controller. Contact hello@nationaltreasurehunt.co.uk about anything on this page.
What we collect
Receipts, telling you if you win, finding your squares
They are your entry — we cannot run the draw without them
Remembers which squares are yours before you have given us an email address
Handled entirely by Stripe. We never see or store your card number
Creating the entry and verifying eligibility
Sending you one email when a hunt opens, if you ticked the box
Sent to Mapbox to deliver the map tiles
What we do not do
- We do not sell or rent your details to anyone.
- We do not run advertising trackers or third-party analytics profiling.
- We do not add free-entry entrants to a marketing list.
- We only email you about new hunts if you ticked the box asking us to. It is never ticked for you, and every such email has an unsubscribe link.
Who else sees it
- Stripe — payment processing. They receive your payment and contact details directly.
- Resend — sends our email. They process your email address to deliver it.
- Mapbox — serves the map tiles. Your browser requests them directly, so Mapbox sees your IP address. Their map software also stores an anonymous usage ID in your browser and sends usage statistics to Mapbox; it is not linked to your name, email or squares.
- Our hosting provider — stores the database.
Cookies and local storage
We do not use advertising or analytics cookies. We store two things in your browser: a random ID identifying your squares, and your chosen square colour and sound preference. Both are strictly necessary or purely cosmetic, and clearing your browser data removes them — along with your ability to see your squares on that device without the email link.
The map is essential to the service, since choosing a square means choosing a place on it. Mapbox's map software stores an anonymous usage ID in your browser; clearing your site data removes it, and blocking events.mapbox.com stops it being sent without affecting the map.
An admin session cookie is set only for logged-in administrators.
How long we keep it
Entry and payment records are kept for 7 years because they are financial records. Email addresses are kept while a hunt you entered is running, and afterwards for as long as we need to resolve any question about the result.
Your rights
You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Email hello@nationaltreasurehunt.co.uk. We will respond within one month.
One limit worth stating plainly: we cannot delete the record of a square while the hunt containing it is still running, because that record is the entry itself and deleting it would remove you from the draw.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.
Last updated 13 September 2026.