Privacy Policy
Last updated: 20 October 2026
This policy covers vacabyte.com — the site you are reading. It explains what we collect, why, how long we keep it and what you can ask us to do about it. Our products have their own terms where they collect anything further.
Who is responsible
VacaByte OÜ, registry code 12908822, registered in Estonia, is the controller of the personal data described here. For anything in this policy, including the requests listed under Your rights, write to info@vacabyte.com.
What we collect, and why
When you contact us or order a quest
The contact form and the Halloween quest form send us what you type into them: your
name, email address, phone number and company, and for a
quest order the details of the event — the date you want to play, how many players, the
languages, your riddles and answers, and the prizes. It goes to our own servers at
api.vacabyte.dev and is used to answer you and to prepare what you asked for.
The legal basis is our legitimate interest in replying to someone who has approached us, and, once you order, the steps taken at your request before a contract. Nothing here is sold, and we do not use it for advertising.
When you browse the site
If you accept them, we use cookies to measure how the site is used and to advertise to people who have visited. Nothing optional runs until you choose: the tag manager that loads Google Analytics and the LinkedIn Insight Tag is not fetched at all until you accept, and refusing keeps it that way. The legal basis is your consent, which you can withdraw at any time via Cookie settings at the bottom of any page.
Cookies
Before you choose, this site sets no cookies at all. After you choose, these are the ones that can appear.
| Cookie | Set by | What it does | Lasts |
|---|---|---|---|
vb_consent | VacaByte (this site) | Remembers your cookie choice. Essential, so it is set whatever you choose. | 6 months |
_ga, _ga_DFW1G74RTM | Google Analytics (this site) | Tells repeat visits apart and groups them into sessions, so we can count visitors and see which pages are read. | About 13 months |
bcookie, li_gc, lidc | LinkedIn (on linkedin.com) | Recognises your browser so we can show VacaByte ads to people who have visited. LinkedIn may set others if you are signed in to it. | Up to 12 months |
Refusing, or withdrawing later, stops anything further being sent and deletes the Google Analytics cookies from this site. The LinkedIn cookies belong to linkedin.com rather than to us, so we cannot delete them for you — your browser settings, or LinkedIn's own guest controls, will.
Who else sees it
We pass personal data to these, and no one else:
- Google (Google Ireland Ltd / Google LLC) — analytics about site usage, only with your consent.
- LinkedIn (LinkedIn Ireland Unlimited Company) — advertising audiences, only with your consent.
- Cloudflare — hosts and serves this site, and so processes the request data any web server sees.
Google and LinkedIn may process data outside the European Economic Area, including in the United States, under the European Commission's standard contractual clauses and the EU–US Data Privacy Framework. We do not sell personal data to anybody.
How long we keep it
- Enquiries and quest orders: while we are in contact and for up to three years after, so that we can pick up a conversation and meet our accounting obligations.
- Cookies: for the periods in the table above, or until you clear them.
Your rights
Under the GDPR you may ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable form. Where we rely on consent you can withdraw it at any time, which does not affect what was done beforehand. Email info@vacabyte.com and we will answer within one month.
If you think we have got this wrong, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, info@aki.ee, aki.ee.
Changes
If what we do changes, this page changes with it and the date at the top moves. A change that widens what we use cookies for will ask for your consent again.