Privacy policy
Last updated 25 October 2026.
Who we are
GameSlot is a Shopify app made by Ecommerce Ally. It lets escape rooms and similar venues take bookings on their Shopify store. In this policy, "you" means the merchant who installs the app, and "customers" means the people who book with you.
What the app accesses in your store
- Products: GameSlot creates and updates one product for each room you set up, and publishes it to your Online Store.
- Orders: when an order contains a booking, GameSlot reads the booked time, group size, price paid, payment status and the customer's name, email and phone, so it can confirm the booking and send booking emails.
- Shop details: your store name, email, currency and time zone, used as starting settings.
What we store
- Your rooms, schedules, closures, settings and game master names.
- Bookings: date and time, room, number of players, price, payment status, the booking customer's name, email and phone, any notes, check-in time and game results.
- Waivers: for each player who signs, their name, date of birth, optional email, a parent or guardian's name for younger players, their signature, the waiver text they agreed to, the time of signing and the IP address it was signed from.
- Short-lived slot holds (deleted within about an hour).
We do not store payment card details. Payments are handled entirely by your Shopify checkout.
How it's used
Only to run bookings for your venue: showing availability, preventing double bookings, sending confirmations, reminders and thank-you emails on your behalf, showing your calendar and reports, and (if you turn it on) showing team names and escape times on your store's leaderboard. We never sell data or use it for advertising.
Where it's kept
Data is stored in a PostgreSQL database on a private server operated for GameSlot. Connections use HTTPS. Customer links to booking and waiver pages are signed so they can't be guessed.
Keeping and deleting data
- When Shopify asks us to delete a customer's data, we remove their name, email, phone and notes from bookings and delete waivers linked to them.
- 48 hours after you uninstall, Shopify asks us to delete your store's data, and we delete everything we hold for your store.
- Customers who want a copy of their data, or want it deleted, should contact the venue they booked with. The venue can request it through Shopify, or contact us.
Sharing
We share data only with the services needed to run the app: our server host and the email delivery service that sends booking emails. Both process the data only to provide their service.
Contact
Questions about privacy: mark@ecommerceally.com.