Privacy Policy

Effective Date: September 8, 2026
Last Updated: September 17, 2026

Cruise Mystery Files is operated by PodOps Media Inc., doing business as MyPodOps ("MyPodOps," "Cruise Mystery Files," "we," "us," or "our").

Cruise Mystery Files is an independent entertainment product. We are not affiliated with, sponsored by, endorsed by, or produced by any cruise line, cruise ship operator, port, travel agency, or other travel provider, unless we specifically say otherwise.

We take a straightforward approach to privacy: we collect the information we reasonably need to answer your questions, manage reservations and orders, deliver and operate your game, support you, and meet our legal and financial obligations. We do not sell your personal information, and we do not use the Cruise Mystery Files website for cross-site behavioral advertising.

This Privacy Policy explains what information we collect, why we collect it, how we use and disclose it, how long we keep it, and the choices and rights available to you.

1. What this policy covers

This Privacy Policy applies to Cruise Mystery Files services operated by MyPodOps, including:

• cruisemysteryfiles.com;
• sailing and voyage searches;
• coverage requests;
• priority lists and waitlists;
• Founder Reservations and pre-orders;
• payments and refunds associated with Cruise Mystery Files;
• Cruise Mystery Files mobile applications for iOS and Android;
• game activation, downloads, sessions, progress, and offline play;
• transactional and opted-in marketing email;
• customer support; and
• physical game fulfillment and shipping when available.

The broader MyPodOps platform may have different features and data practices and is also subject to the MyPodOps Privacy Policy.

2. What we collect

The information we collect depends on what you choose to do.

Browsing the website

You do not need an account to browse the Cruise Mystery Files website.

We do not currently use third-party advertising pixels, session-recording software, or cross-site behavioral analytics on the Cruise Mystery Files website.

Our infrastructure may automatically receive standard technical information necessary to deliver and secure the site, including:

• IP address;
• date and time of a request;
• page or resource requested;
• browser type;
• browser user-agent string;
• device or operating-system information made available in a normal web request;
• response status; and
• technical error or security information.

Our content-delivery and infrastructure access logs are currently configured to be deleted automatically after 90 days.

Sailing inquiries, priority lists, coverage requests, and Founder Reservations

When you ask about a sailing, request coverage, join a priority list or waitlist, or place a Founder Reservation, we may collect:

• your name;
• your email address;
• shipping country;
• shipping address when needed for fulfillment;
• party size;
• the age band of the youngest investigator;
• cruise line;
• ship;
• departure date;
• sailing or voyage selected;
• game selected or recommended;
• reservation status;
• and other information you voluntarily provide with your request.

We may also retain a snapshot of the information shown to you when you submitted the request, such as:

• ship;
• sailing date;
• game;
• reservation price or deposit;
• expected shipping period; and
• other material reservation terms.

We keep this snapshot so that a later change to our catalog, pricing, sailing data, or product information does not change the record of what you were shown or agreed to.

Campaign and referral information

If you arrive through a campaign, referral, promotional, or similarly tagged link, we may store the campaign parameters contained in that URL with your submission.

We use this information to understand which Cruise Mystery Files campaigns, announcements, or referrals resulted in inquiries or reservations.

We do not use these campaign parameters to build a cross-site advertising profile about you.

3. Payments

Founder Reservation deposits and other online payments are processed through Stripe.

Stripe hosts the payment page and collects payment-card information directly from you.

Cruise Mystery Files does not receive or store your complete:

• card number;
• card security code;
• full payment credential; or
• bank-account credential used on Stripe's hosted payment page.

We may retain information necessary to administer the transaction, including:

• amount;
• currency;
• payment status;
• refund status;
• Stripe customer, Checkout Session, payment, charge, or refund reference;
• reservation associated with the transaction; and
• transaction timestamps.

Stripe independently processes information it receives through its services according to its own privacy practices.

4. Information processed by the mobile app

When you use the Cruise Mystery Files mobile app, the app may process information necessary to activate, download, play, save, and synchronize your game.

Depending on the features you use, this can include:

• an app/device installation identifier;
• your entitled game and edition;
• release and download status;
• game-session identifier;
• team or session information;
• game progress;
• investigations opened or completed;
• evidence viewed or inspected;
• puzzles attempted or completed;
• hints used;
• deductions reached;
• accusation status and score;
• resolution status;
• achievements, where applicable;
• app version;
• operating system and platform;
• synchronization status;
• notification permission and scheduling state;
• technical errors and diagnostic information; and
• other operational information needed to restore or synchronize a game session.

We do not use game-progress information to create advertising profiles.

Information stored only on your device

Some information may be stored locally so the game can continue when internet service is unavailable, including while you are at sea.

This may include:

• downloaded case files;
• photographs and evidence;
• puzzles and game presentation data;
• encrypted or sealed game content;
• local game-session state;
• offline progress;
• pending synchronization events; and
• notification schedules.

Cryptographic information needed to unlock an entitled release or verify portions of the game may be stored using platform-provided secure storage, such as:

• Apple Keychain on iOS; and
• Keystore-backed secure storage on Android.

Downloaded content may remain on a device until it is removed through the app, the app's data is cleared, or the app is uninstalled, subject to platform behavior.

5. Camera and optional augmented-reality features

Some Cruise Mystery Files experiences may include optional augmented-reality or image-recognition features.

If a feature requires access to your camera, the app will request the applicable device permission.

Where the feature is designed to recognize a game image or object locally, camera input is used for that gameplay function and is not intended to become a photograph or video uploaded to Cruise Mystery Files.

Critical game progress does not require you to grant camera permission. When an optional AR feature is unavailable or permission is denied, we intend to provide a non-AR alternative.

If a future version changes how camera images are stored, transmitted, or used, we will update this policy and provide any required notice or permission before introducing that use.

6. Location

Cruise Mystery Files may recommend places aboard a ship where a chapter can be enjoyed, but the current service does not require precise GPS location to complete a game.

We do not currently collect precise GPS location for Cruise Mystery Files gameplay.

If a future feature requires precise location information, we will request the appropriate device permission and update this policy before using that information for the new purpose.

7. Notifications

If you allow notifications, the mobile app may schedule or send notifications relating to your game, such as:

• a new investigation becoming available;
• a reminder to continue;
• a story-related notification; or
• an operational message about your case.

You can decline or later disable notification permission through your device settings.

Notification permission is not required to complete the game.

8. Customer support and communications

If you contact us, we may retain:

• your name;
• email address;
• reservation or order information;
• the contents of your message;
• attachments you choose to send; and
• our responses.

We use this information to answer your question, provide support, investigate problems, and maintain an appropriate record of the interaction.

Contacting us for support does not automatically enroll you in marketing.

9. How we use information

We use personal information for purposes reasonably connected with operating Cruise Mystery Files, including to:

• answer sailing and coverage questions;
• identify cruises for which a game is available;
• recommend an age-appropriate mystery;
• administer Founder Reservations, pre-orders, purchases, and refunds;
• associate a reservation with the correct game and sailing;
• maintain reservation and transaction records;
• communicate material information about a reservation or order;
• prepare and fulfill physical products;
• operate the Cruise Mystery Files mobile app;
• activate and deliver entitled game releases;
• save and synchronize game progress;
• provide offline gameplay;
• schedule game notifications;
• provide customer support;
• detect fraud, abuse, duplicate reservations, or technical misuse;
• diagnose errors and maintain service reliability;
• protect our systems, customers, and legal rights;
• maintain tax, accounting, and business records;
• understand which Cruise Mystery Files campaigns generated interest or reservations; and
• send marketing only where you have separately agreed to receive it.

We do not further use information in a manner incompatible with the purpose for which it was collected without providing any notice or choice required by law.

10. Marketing is separate and never assumed

Asking us a question, submitting a coverage request, placing a reservation, purchasing a product, or activating a game is not consent to receive marketing.

Marketing email requires a separate affirmative choice.

Where we provide a marketing checkbox, leaving it unchecked is treated as a decision not to opt in rather than as missing information.

If you opt in, you can change your mind at any time by:

• using the unsubscribe link in a marketing email; or
• contacting us at hello@cruisemysteryfiles.com.

Unsubscribing from marketing does not prevent us from sending transactional communications reasonably necessary to manage:

• a reservation;
• payment;
• refund;
• shipment;
• account or activation;
• security matter; or
• active game.

11. Children and family games

Some Cruise Mystery Files games are designed for families and may be enjoyed by children, including games intended for younger investigators.

Reservations, purchases, activation, account management, and communications with Cruise Mystery Files are intended to be handled by an adult parent, guardian, purchaser, or other responsible adult.

A child does not need to provide Cruise Mystery Files with their personal email address, mailing address, payment information, or other direct contact information simply to participate in a family game.

When an adult provides the age band of the youngest investigator, we use that information primarily to:

• recommend an age-appropriate game;
• determine eligibility for a particular game; and
• help design and fulfill the appropriate experience.

We do not ask for a child's exact date of birth for this purpose.

Where team or player display names are supported, families may use nicknames or non-identifying names.

We do not knowingly collect personal information directly from a child under 13 in a manner that requires parental consent without obtaining the consent required by applicable law.

If we learn that personal information from a child under 13 was collected in circumstances where legally required parental consent was not obtained, we will take appropriate steps to delete the information or obtain the required consent.

12. Service providers

We use third-party service providers to operate Cruise Mystery Files.

Depending on the service, these may include:

Amazon Web Services (AWS)

We use AWS infrastructure for functions such as:

• website and API hosting;
• content delivery;
• storage;
• databases;
• logging;
• application configuration; and
• security-related infrastructure.

Stripe

We use Stripe to process payments, deposits, and refunds.

SendGrid

We use SendGrid to deliver email, including reservation, payment, refund, waitlist, and other transactional communications.

SendGrid may process information such as the recipient's email address and technical delivery or bounce information as necessary to deliver those messages.

Printing, fulfillment, and shipping providers

When physical Cruise Mystery Files products are ready to be produced and delivered, we may provide printing, fulfillment, postal, or shipping providers with information reasonably necessary to prepare or deliver your order.

This may include:

• recipient name;
• shipping address;
• order contents; and
• shipment-related references.

We do not provide service providers with personal information merely so they can market their unrelated products or services to you.

13. Cookies, analytics, and tracking

Cruise Mystery Files does not use third-party advertising pixels, behavioral advertising networks, or cross-site tracking technologies on its website. We do not use third-party session-recording tools.

Our site uses technologies necessary for:

• security;
• routing;
• activation;
• checkout state;
• remembering service preferences, including your cookie choice; or
• other essential functionality.

Stripe's hosted checkout pages and other third-party destinations may use cookies or similar technologies under their own policies.

Analytics, and your choice

We use Google Analytics 4 to understand which pages of this website are read and which are ignored. It is not used to identify you, and we do not use it for advertising.

Analytics is switched off until you turn it on. When you first visit, a notice asks whether you are willing to be measured. Until you accept — and permanently, if you decline — Google Analytics runs with storage denied: no cookie is set, no identifier is kept, and Google cannot connect one page you read to the next, or recognise you if you come back.

To be precise about what that means: the Google Analytics script is not loaded on this website until you accept. It is not present on the page, so if you decline, or simply close the notice without answering, your browser makes no request to Google at all — no cookie, no identifier, and no transmission of your network address or the pages you read. This is Google's "basic" consent mode. We chose it over the alternative, which loads the script immediately and sends Google an identifier-free signal even while consent is denied.

If you accept and later change your mind, the page reloads without the script, and it is not loaded again on any later visit unless you say so.

You can change your answer at any time: reopen the cookie notice.

What we store when you answer

Two things, and only because a record of consent is worth nothing if it cannot be evidenced:

• A cookie on your device named cmf_consent, holding your choice, a random identifier for that choice, and which version of this notice you were shown. It lasts 180 days, after which we ask again. Clearing your cookies erases it and severs the link to the record below.
• A record on our side holding the same random identifier, your choice, the time, and the version of the notice you were shown — and nothing else. We do not store your network address or your browser's user-agent string against it. These records are deleted automatically after 400 days.

That record is not linked to your name, your email address, or any reservation. Its only purpose is to show, if asked, what was chosen and what wording was on screen at the time.

If we introduce advertising or other tracking technologies in the future, we will update this Privacy Policy and obtain consent where required before using them.

14. We do not sell your personal information

We do not sell your personal information.

We do not currently share personal information for cross-context behavioral advertising or targeted advertising.

We do not provide Cruise Mystery Files reservation data to advertising data brokers.

Because we currently do not sell or share personal information for those purposes, there is presently no sale or targeted-advertising activity for you to opt out of.

If that practice changes in the future, we will update this policy and provide the notices and choices required by applicable law before using personal information in that manner.

15. Legal bases for processing

If privacy law where you live requires us to identify a legal basis for processing, the basis depends on why we are using the information.

We may process information because:

It is necessary to provide a service or take steps you request

For example:

• answering a sailing request;
• creating a Founder Reservation;
• processing a payment;
• delivering a game;
• maintaining your game session;
• fulfilling an order; or
• processing a refund.

We have a legitimate business interest

For example:

• operating and securing Cruise Mystery Files;
• preventing fraud or abuse;
• maintaining accurate records;
• diagnosing technical errors; and
• improving service reliability.

We rely on a legitimate interest only where that interest is not overridden by rights that applicable law gives you.

We have a legal obligation

For example:

• tax;
• accounting;
• financial recordkeeping;
• lawful requests from authorities; or
• responding to legally enforceable claims.

You have given consent

For example:

• receiving optional marketing communications;
• granting certain device permissions where consent is required.

Where processing is based on consent, you may withdraw that consent for future processing.

16. Security

We use reasonable administrative, organizational, and technical safeguards designed to protect the information we hold.

Depending on the information and system, safeguards may include:

• encrypted HTTPS connections;
• restricted system and credential access;
• cryptographic integrity checks for game releases;
• secure storage of application secrets;
• platform secure storage such as Apple Keychain and Android Keystore-backed storage;
• separation of production and testing environments where appropriate;
• authentication and authorization controls; and
• logging and monitoring designed to identify security or operational problems.

No method of electronic transmission or storage can be guaranteed to be completely secure.

We therefore cannot promise absolute security.

17. How long we keep information

We retain personal information for different periods depending on why we have it.

Website access logs

Our content-delivery access logs are currently deleted automatically after 90 days.

Sailing inquiries, waitlists, and reservations

We retain these records for as long as reasonably necessary to:

• answer the request;
• administer the reservation;
• fulfill an order;
• resolve disputes;
• detect fraud; and
• maintain required business records.

Payment and refund records

Transaction records may be retained for the period reasonably necessary to meet:

• accounting;
• tax;
• fraud-prevention;
• chargeback;
• dispute; and
• other legal obligations.

Deleting other information about you may not require us to delete a financial record that applicable law requires or permits us to retain.

Marketing consent records

We may keep records showing whether you opted in, opted out, or unsubscribed so that we can respect and demonstrate your communication preference.

Game and app records

Game-session and activation records may be retained while needed to:

• provide your active game;
• restore or synchronize progress;
• support a completed session;
• resolve technical issues; or
• maintain legitimate transaction or fraud-prevention records.

Information stored solely on your own device may remain there until removed through the app, app data is cleared, or the app is uninstalled.

When information is no longer reasonably necessary and we have no legal or operational reason to retain it, we will delete it, anonymize it, or otherwise remove it from active use.

18. International processing

Cruise Mystery Files is operated from the United States.

If you access the service from another country, information may be transferred to or processed in the United States or other jurisdictions in which our service providers operate.

Privacy and data-protection laws in those jurisdictions may differ from the laws where you live.

Where applicable law requires a particular safeguard for an international transfer, we will use an appropriate lawful mechanism.

19. When we may disclose information for legal or protective reasons

We may disclose information where reasonably necessary to:

• comply with applicable law, regulation, court order, subpoena, or other legally enforceable process;
• respond to a lawful request from a governmental authority;
• investigate suspected fraud, abuse, or unlawful conduct;
• protect the security or integrity of Cruise Mystery Files;
• protect the rights, safety, or property of MyPodOps, our customers, or others;
• enforce applicable terms or agreements; or
• establish, exercise, or defend legal claims.

We will not treat a voluntary request as legally compulsory merely because it comes from an authority.

20. Business transfers

If PodOps Media Inc., MyPodOps, Cruise Mystery Files, or relevant assets are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of some or all of the business, information associated with the affected service may be disclosed or transferred as part of that transaction.

Any successor handling that information will remain subject to applicable privacy law and any commitments that continue to apply.

21. Your privacy rights

Depending on where you live and which privacy laws apply, you may have rights concerning personal information about you.

These may include the right to:

• know whether we process information about you;
• request access to information we hold about you;
• obtain a copy of certain information;
• correct inaccurate information;
• request deletion;
• request portability of certain information;
• restrict or object to certain processing;
• withdraw consent for future processing;
• opt out of certain targeted advertising, sale, sharing, or profiling where applicable; and
• appeal certain decisions relating to a privacy request where applicable law provides that right.

You may also have the right to complain to a privacy or data-protection regulator.

We will not discriminate against you because you exercise a privacy right provided by applicable law.

22. California and other U.S. state privacy rights

Residents of California, Maryland, and certain other U.S. states may have additional rights under state privacy laws when those laws apply to us or to particular processing.

Those rights may include:

• access;
• correction;
• deletion;
• portability;
• information about categories of information collected or disclosed;
• opt-out rights relating to sale, sharing, targeted advertising, or certain profiling; and
• protection against discriminatory treatment for exercising privacy rights.

Cruise Mystery Files currently does not sell personal information or share it for cross-context behavioral advertising.

If a state law applies to us, we will honor the rights it provides.

23. European Economic Area and United Kingdom

If you are located in the European Economic Area, United Kingdom, or another jurisdiction providing comparable data-protection rights, you may have rights to:

• access your personal data;
• correct it;
• have it erased in certain circumstances;
• restrict processing;
• object to certain processing;
• receive certain data in portable form;
• withdraw consent; and
• lodge a complaint with your local data-protection supervisory authority.

Withdrawal of consent does not affect the lawfulness of processing that occurred before consent was withdrawn.

24. How to make a privacy request

You may ask us to access, correct, delete, or provide a copy of personal information associated with you, subject to applicable law and information we are permitted or required to retain.

You can submit a request at:

cruisemysteryfiles.com/privacy-request/

You may also contact:

hello@cruisemysteryfiles.com

Depending on your request, we may ask for information reasonably necessary to locate the relevant records and verify that the request relates to you.

We do not require you to provide unnecessary sensitive identification simply to make a privacy request.

Where appropriate, we may verify control of the email address associated with a reservation, activation, or other record before acting on the request.

Submitting a privacy or deletion request does not cancel an active Founder Reservation, order, payment, shipment, or refund request. Those are separate commercial matters and must be cancelled or changed through the applicable reservation or customer-support process.

25. Deleting your Cruise Mystery Files data

Cruise Mystery Files does not currently require a traditional user account with a password or login in order to play.

Instead, personal information may be associated with records such as:

• a Founder Reservation or order;
• an email address;
• a game activation;
• a device association;
• an entitled game release;
• synchronized game progress;
• completed game sessions;
• technical or support records; and
• marketing preferences.

You can request deletion of eligible Cruise Mystery Files data at:

cruisemysteryfiles.com/delete-my-data/

You do not need to have the mobile app installed to submit a request.

After you submit a deletion request, we may require verification of the email address or other information reasonably necessary to protect against unauthorized deletion.

A deletion request may result in deletion or de-identification of information such as:

• device and activation associations that are no longer required;
• synchronized game progress;
• game-session records;
• puzzle, hint, deduction, score, and completion data;
• non-required profile or contact information;
• marketing information; and
• other personal information that we no longer have a lawful or legitimate reason to retain.

Some information may need to be retained after a deletion request where reasonably necessary for purposes such as:

• tax and accounting obligations;
• payment and refund records;
• chargebacks and payment disputes;
• fraud prevention;
• security;
• compliance with law; or
• establishing, exercising, or defending legal claims.

Where information must be retained for one of these reasons, we will limit its use to the purpose that requires its retention.

Deleting Cruise Mystery Files data does not automatically cancel a Founder Reservation or order. If you also want to cancel an eligible reservation or request a refund, contact:

hello@cruisemysteryfiles.com

26. Third-party links and services

Cruise Mystery Files may contain links to:

• cruise-line websites;
• Stripe;
• app stores;
• social platforms;
• travel resources; or
• other third-party websites and services.

Those services operate under their own privacy policies and practices.

This Privacy Policy does not control what another company does with information you provide directly to that company after leaving our service.

27. Changes to this policy

Cruise Mystery Files is developing, and our privacy practices may change as we add features, physical fulfillment, mobile capabilities, or service providers.

When we update this Privacy Policy, we will change the Last Updated date at the top.

If a change materially affects how we use personal information we already hold, we will provide notice appropriate to the nature of that change and obtain consent where applicable law requires it.

We will not treat a material expansion in the use of existing personal information as authorized merely because a new version of this policy was posted.

28. Contact us

Cruise Mystery Files is operated by:

PodOps Media Inc. d/b/a MyPodOps

Privacy inquiries and requests:

hello@cruisemysteryfiles.com

Cruise Mystery Files website:

cruisemysteryfiles.com

MyPodOps:

mypodops.com

For questions about this Privacy Policy, requests concerning information we hold about you, or concerns about our privacy practices, contact us at the email address above.