Privacy Policy
Last updated: 18 October 2026. This policy describes The Hidden Door website as it currently works. It does not invent a legal entity, a privacy office, or a contact address that has not been published.
Introduction
The Hidden Door is an informational website about real-world escape room experiences, puzzle concepts, and group inquiries. This Privacy Policy explains what information the website handles, what it deliberately does not collect, and what a visitor should understand before typing anything into a form.
The site is written for people comparing theme ideas and preparing questions. It is not a checkout, a user-account system, or a live reservation desk. Where a privacy law would require the name of a controller, a postal address, a representative, or a data protection officer, those details must come from the operator. They are not stated here because they have not been supplied. Publishing a fictional company record would make this policy less accurate, not more complete.
Information We Collect
In its current build, the website is a set of static pages, style sheets, images, and a small script. It does not ask visitors to create an account. It does not run a comment system. It does not embed analytics, advertising pixels, or payment forms. The information associated with a normal visit is therefore limited to whatever a browser sends to the host in order to load the page, plus one optional preference stored locally if the visitor uses the cookie notice.
“Collect” in this policy means information the website is designed to receive or store. It does not mean every technical fact a hosting company might see in its own logs. Those logs, if they exist, are described under Technical Data. The pages themselves do not include a database of visitors, a mailing list, or a booking record.
Information Provided by Visitors
The Contact page and the Booking Inquiry page contain a form with fields for a name, an email address, an optional phone number, a preferred experience concept, a preferred date, a preferred time, a group size, an event type, and a message. Those fields exist so a visitor can organize a question. They are not connected to a server script that saves the submission. Choosing the submit button opens the visitor’s own email app with a draft addressed to [email protected]. The website does not keep a copy.
If you type into the form, the text remains in your browser until you send the email draft or copy it. Choosing “Review Inquiry” or “Review Message” stops the normal page submission and asks the browser to open a mailto link. If you send that email, your email provider delivers it to [email protected]. Choosing “Copy notes” asks the browser to place a text summary on your clipboard. The website does not receive a copy of the clipboard contents.
Contact and Booking Inquiry Information
A booking inquiry on this website is a draft. It is not an order, a ticket, or a confirmed reservation. The Hidden Door receives your name, email, phone number, preferred date, or message only if you send the email, or if you call +61 2 9553 2111 and give those details yourself. This website does not keep an inquiry file that can be read, corrected, or deleted from these pages.
Phone and email are published on the Contact page. This website still does not store the form. Do not include payment card numbers, identity documents, passwords, or information about other people unless you have a proper reason to share it. The mailto draft is not an encrypted upload channel on this site.
Technical Data
Requesting a page ordinarily causes a browser to share technical data with the server that hosts the files, such as an IP address, a time, the address of the requested file, and basic browser information. That exchange is part of how the web delivers a page. This project does not add its own analytics beacon on top of that exchange, and it does not publish the name of a hosting provider, a log format, or a retention schedule for server logs.
If the operator later chooses a host, that host may process connection data under its own terms. Those terms are not reproduced here, because naming a vendor that is not actually in use would be misleading. Visitors who need the identity of the host, the region where pages are served, or the period for which logs are kept should treat those items as information the owner still needs to supply.
Cookies and Similar Technologies
The website does not set analytics cookies, advertising cookies, or
social-media cookies. The script uses the browser’s localStorage to
remember how you answered the cookie notice. The stored key is
thd_cookie_choice. The value is either “accepted” or
“rejected.” That record lets the notice stay closed on later pages
in the same browser. It is not an HTTP cookie, but it is a similar
local technology and is described in the Cookie Policy.
Accept, Reject, and Save preferences all write that one key and then hide the notice. Reject does not turn off a tracker, because no tracker is loaded. It records that you did not want optional storage, and the only storage used to remember that decision is the key itself. If you clear site data for this origin, the notice can appear again. No preference is sent to The Hidden Door.
Purposes of Processing
The pages are processed in the ordinary sense that a browser downloads them so you can read about escape room concepts, group inquiries, and the limits of the booking form. The local notice preference is stored only to respect the choice you made about the banner. The inquiry form is processed only on the device, for validation and for an optional clipboard copy.
The website is not used to build a marketing profile, to score leads, to measure advertising conversions, or to decide eligibility for a room. No automated decision about a visitor is made. A legal basis such as consent, contract, or legitimate interests is not declared in the abstract, because the operator has not identified the applicable law or the controller. When those facts are known, they should be added in plain language rather than copied from another business.
Communications
The website does not send email, SMS, or push notifications by itself, and it does not add visitors to a newsletter. The inquiry button opens a draft in your email app to [email protected]. A conversation starts only if you send that email or call +61 2 9553 2111. The site does not confirm receipt, a response time, or opening hours.
If you copy your notes and later send them through a channel that the operator publishes in the future, that later message would be a new communication. It is not covered by a claim that this form already delivered anything. The site also does not confirm receipt, response time, or opening hours.
Data Sharing
The Hidden Door pages do not sell personal information, rent a visitor list, or pass form contents to a partner. There is no form payload to share. The notice preference stays in your browser and is not included in a request back to the site.
Technical delivery of the files may involve the operator’s hosting arrangement once a host is chosen. That is infrastructure, not a list of advertising partners. No payment company, booking platform, or customer-relationship tool is integrated into these files, so none of those companies receive inquiry data from this website.
Service Providers
A static website can be placed on a web host, a content-delivery network, or a similar provider. This policy does not name one, because the project does not confirm which provider is in use. If a provider processes IP addresses or request logs, it does so as part of serving the files, not because the pages instruct it to build a marketing audience.
Fonts used on the site are stored locally in the project. The pages do not call a third-party font service, an embedded map, a video platform, or a chat widget. Adding any of those later would require an update to this policy and to the Cookie Policy before the tool is presented as part of the experience.
Data Retention
Inquiry text is not retained by the website, because it is not submitted to a server. Clipboard contents, browser history, and autofill data are controlled by your browser and device, not by these pages. The notice preference remains in localStorage until you clear it, change it with the Cookie Policy controls, or remove site data.
No fixed number of days is stated for hosting logs. A number would be an invention unless the operator and the host have agreed to it. When that period is known, it should be written here as a fact. Until then, the accurate statement is that this website does not operate its own visitor archive.
Security
The pages do not ask for payment card numbers, government identifiers, or account passwords, and visitors should not provide them. The form opens an email draft. It is not a secure upload channel on this website. Do not treat it as a place to send confidential information.
Local storage can be read by scripts on the same origin and can be cleared by the visitor. It is not a vault. The only value written by this site is the notice choice. Standard browser and device security still matters for anyone using a shared computer, because another person with access to that browser profile could see form fields that were left filled in.
User Rights and Choices
Depending on where you live, privacy law may give you rights to access, correct, delete, or restrict personal information, or to object to certain uses. This policy does not pretend that a particular statute applies, and it does not name a regulator. The practical limit on this website is that the inquiry form creates no record for the operator to retrieve. A request to delete a booking file cannot be completed here, because no booking file exists.
You can refuse the notice, accept it, or save a preference from the banner or from the Cookie Policy page. You can also clear localStorage in your browser. Those choices are immediate and do not require an email. Privacy questions about a message you actually sent can go to [email protected] or to Shop 2A, 546 King Street, Newtown NSW 2042. This website still has no stored inquiry file to delete.
Third-Party Links
The current pages link among themselves and to the legal documents. They do not link out to ticket sellers, review platforms, or social networks. If an external link is added later, that other site would have its own privacy practices, and leaving The Hidden Door would mean those practices apply instead of this policy.
Photographs on the site show escape-room spaces and puzzle props. They are not photographs of Shop 2A, 546 King Street, and they are not presented as pictures of Hidden Door staff. Credits and licenses are listed on the About page. The policy does not grant anyone a right to reuse those images beyond ordinary browsing of the site. Image rights are also covered, in general terms, by the Terms & Conditions.
Children's Privacy
The website is a general explanation of escape room concepts. It is not directed at children, and it does not offer accounts, prizes, or a child-specific experience. The inquiry form is meant for an adult who is preparing a question. This website does not store form entries. If an email is sent, that message leaves through the visitor’s own email provider.
Age suitability for an actual visit is not stated on the experience pages. A parent or guardian who needs to know whether a particular concept is appropriate should treat that as a question for a confirmed operator, not as something this policy can answer. No minimum age is invented here.
Updates
This policy can be replaced when the website changes in a way that matters to privacy. Examples include storing inquiries on a server, adding analytics, or naming a legal entity. The date at the top of the page is the date of this version. Older copies are not stored as a public archive on the site.
Continued browsing after an update does not, by itself, create a booking or a marketing subscription. The form’s current behavior is to open an email draft. If a later version stores messages on a server, that change should be described here first.
Privacy Contact
Privacy questions can be sent to [email protected] or by post to Shop 2A, 546 King Street, Newtown NSW 2042, Australia. A data protection officer is not named on this website. Using the on-page form delivers a privacy request only if you send the email draft. The website itself does not store it.
You can also read this policy and decide whether to store the notice preference. Questions that need a person can use the published email, phone, or postal address. The website does not keep a copy of an unsent draft.