Privacy Policy

Overview

This Privacy Policy explains how Dingo Punks collects, uses, stores, and shares information when you use our websites, membership platform, online store, student-facing games, and related services.

Dingo Punks is operated by Ethan Dirks Inc., doing business as Dingo Punks (hereby referred to as we, us, our, and Dingo Punks), a Colorado corporation located at 1118 E San Rafael St., Colorado Springs, CO 80903.

We design Dingo Punks so educators can manage their own accounts, purchases, subscriptions, and classroom access while students can play without creating accounts or providing us with names, email addresses, answers, scores, or other classroom records.

Services Covered by This Policy

Dingo Punks includes several connected services:

DingoPunks.com — our primary website and storefront at dingopunks.com, currently operated using Shopify. Educators use the site to browse Dingo Punks, purchase individual products, and access related information.

The Dingo Punks Account — our teacher-facing account and membership platform at account.dingopunks.com. Educators can create accounts, manage Dingo Punks access, save preferences, manage subscriptions, and generate classroom share codes. The Dingo Punks Account uses services including Google Firebase, Google Analytics, Cloudflare, and Stripe.

The Dingo Punks Game — our student-facing gameplay platform at play.dingopunks.com, where students play Dingo Punks escape rooms using teacher-provided access or share codes.

This Privacy Policy also applies to related communications and services, including educator marketing emails and account-related emails. Marketing email services are currently provided through MailerLite.

The Short Version

For educators and other adult users, we collect the information reasonably necessary to operate accounts, subscriptions, purchases, sharing tools, customer support, analytics, and email communications.

For students, we do not create student accounts and do not collect names, email addresses, student identification numbers, answers, scores, saved game progress, or student profiles.

The student-facing game does process limited technical and analytics information, such as device and browser information and technical identifiers, to operate, secure, analyze, troubleshoot, and improve the service.

We do not sell personal information. We do not use student information for targeted advertising, behavioral advertising, marketing, or commercial profiling.

Information We Collect from Educators and Adult Users

Depending on how you use Dingo Punks, we may collect or process information including your name, email address, billing or shipping information, account identifier, account creation date, authentication status, email-verification status, membership status, renewal or expiration date, cancellation status, transaction information, saved preferences, teacher share codes, rebate information, support communications, technical information, and other information necessary to operate your account, purchases, or membership.

On the membership platform, we do not send Google Analytics your name, email address, or account identifier. We may record usage events such as features used, games viewed or shared, and plan or upgrade activity, along with your plan type (free or All-Access), to improve the service.

We collect only the information reasonably necessary to provide, secure, maintain, support, and improve Dingo Punks.

Account Information

When you create a Dingo Punks account, we may process your email address, a unique account identifier, account creation information, authentication status, and email-verification status.

If you sign in with Google, Google and Firebase process information necessary to authenticate you, and Dingo Punks may receive information such as your email address and account identifier.

If you use email and password authentication, passwords are handled through Firebase Authentication. Dingo Punks does not store a readable copy of your password.

Membership and Subscription Information

For Dingo Punks membership accounts, we may process information including whether your account is free or paid, subscription status, renewal or expiration date, cancellation status, Stripe customer and subscription identifiers, transaction information, rebate status, and other information necessary to determine and provide your access rights.

Store Purchases

The Dingo Punks online store is currently hosted by Shopify. When you make an individual purchase through the store, Shopify may process information such as your name, email address, billing or shipping address, payment information, transaction information, device or browser information, and activity on the storefront.

Dingo Punks uses store information to process purchases, provide products and services, provide customer support, maintain appropriate business records, prevent fraud, and understand and improve our business.

Shopify may also use cookies and similar technologies as part of normal platform operations. You can review Shopify's cookie policy for additional information.

Payment Information

Payments may be processed through Shopify, Stripe, or another payment processor identified at checkout. Payment processors may collect information such as your name, billing information, payment-card information, and transaction information.

Dingo Punks does not store your full payment-card number. We may receive limited customer, transaction, billing, subscription, and payment-status information from our payment processors so that we can provide purchased products, operate memberships, prevent fraud, and maintain appropriate business records.

Prior-Purchase Rebate Information

If you request a membership rebate based on a previous Dingo Punks purchase, we may collect the marketplace where the purchase occurred, the order number you submit, whether that order number has already been claimed, and the date the rebate was applied.

We use this information to apply the rebate and prevent duplicate redemption.

Favorites and Account Preferences

If you use account features such as Favorites, Dingo Punks stores the game identifiers, ordering information, and other information necessary to preserve those preferences for your account.

Teacher Share Codes

When an educator creates a student share code, we may store the educator's account identifier, the game associated with the code, the generated code, the date it was created, and its expiration date.

These records identify the educator and the game being shared. They do not identify individual students.

Communications with Us

If you contact Dingo Punks, we may collect the information contained in your message and any information reasonably necessary to respond to you, provide support, resolve a problem, or maintain appropriate business records.

Please do not send student records or sensitive student information unless we specifically ask for information through a feature designed to receive it.

Technical Information

Like most online services, Dingo Punks and the companies that provide infrastructure for us may automatically process limited technical information.

Depending on the service, this may include IP address, browser type, operating system, device type, language, timestamps, referring pages, pages or screens viewed, network information, approximate location derived from technical information, cookies or similar identifiers, diagnostic information, and security or abuse-prevention information.

We use technical information to operate the service, maintain security, prevent abuse, troubleshoot errors, understand performance, analyze how the service is used, and meet legal obligations.

Google Analytics

Dingo Punks uses Google Analytics to understand how our services are used and to improve performance, reliability, and design.

Google Analytics may process technical and usage information such as device and browser information, page or screen activity, timestamps, approximate geographic information, and cookies or similar technical identifiers.

We do not intentionally send Google Analytics student names, email addresses, student identification numbers, answers, scores, classroom records, or other directly identifying student information.

On student-facing Dingo Punks services, analytics are used only for internal operational purposes such as measuring usage, maintaining and improving functionality, troubleshooting, statistical reporting, and understanding service performance.

We do not use student-facing analytics for targeted or behavioral advertising, remarketing, advertising personalization, building marketing profiles about students, contacting students, selling student information, or tracking students across unrelated websites or services.

Cookies and Similar Technologies

Dingo Punks and our service providers may use cookies, browser storage, or similar technologies when necessary for authentication, security, service functionality, preferences, fraud and abuse prevention, and analytics.

The exact technologies used vary between the Dingo Punks storefront, membership platform, and student-facing game.

Where applicable law requires consent or another choice before a particular cookie or technology may be used, we will provide that choice.

Student and Children's Privacy

The student-facing Dingo Punks game is designed for classroom use and may be used by children under 13. We intentionally minimize the information processed from students.

Students do not create Dingo Punks membership accounts. We do not ask students to provide names, email addresses, home addresses, telephone numbers, student identification numbers, school records, photographs, voice recordings, answers to educational questions, scores, or saved gameplay progress. We do not create persistent student profiles.

Student Share Codes

A student may receive a temporary game code or link from an educator. The code identifies the game that should launch. It does not identify the student.

Dingo Punks does not create a record connecting a particular student with a particular share code.

Limited Student Technical Information

Certain technical information may still be processed when a student accesses Dingo Punks.

For example, our infrastructure may process an IP address or a cryptographic value derived from an IP address for rate limiting, security, network operations, and prevention of automated code guessing. Cloudflare and other infrastructure providers may also process standard network or server-log information required to deliver the service.

Google Analytics may process limited device, browser, usage, and persistent technical identifier information for the internal analytics purposes described in this Privacy Policy.

How We Use Student Technical Information

Limited technical identifiers associated with student-facing use are used only as reasonably necessary to support the internal operations of Dingo Punks, including maintaining and analyzing service functionality, network communications, security and integrity, abuse prevention, rate limiting, troubleshooting and debugging, optimization, and statistical reporting.

We do not use these identifiers to contact a student, advertise to a student, build a commercial profile of a student, or track a student for unrelated purposes.

COPPA

For student-facing services directed to or used by children under 13, Dingo Punks limits its processing of persistent identifiers to uses that support the internal operations of the service.

Where the Children's Online Privacy Protection Act (COPPA) and its rules apply, we rely on applicable provisions permitting limited technical information to be used for internal operations such as service functionality, security, analytics, troubleshooting, and improvement. We do not use student information for behavioral advertising, targeted advertising, marketing, or unrelated profiling.

Student Data Retention

We retain limited student-related technical information only for as long as reasonably necessary to perform the operational purpose for which it was processed.

Short-lived security and rate-limit records are configured to expire automatically. Analytics and infrastructure information is retained, aggregated, de-identified, or deleted according to applicable provider settings and our operational needs and is not intentionally retained longer than reasonably necessary for its disclosed purpose.

Student-Facing Service Providers

Limited student-facing technical information may be processed by companies that provide infrastructure or analytics services to Dingo Punks.

Google LLC / Google Analytics: Used for internal usage measurement, statistical reporting, troubleshooting, and improvement of the service.

Google LLC / Firebase: Used for cloud infrastructure and server functions necessary to resolve teacher-generated share codes, apply security controls, and operate related functionality. Students do not create membership accounts through Firebase.

Cloudflare, Inc.: Used for hosting, content delivery, network infrastructure, and security.

These providers process technical information in connection with the services they provide to Dingo Punks and subject to their applicable contractual and legal obligations. You can review Cloudflare's privacy policy for additional information about its practices.

Parents and Guardians

If you are a parent or guardian and believe that a child has directly provided personal information to Dingo Punks contrary to this Privacy Policy, contact hello@dingopunks.com. We will investigate the request and delete information when appropriate or legally required.

Security and Rate Limiting

We use technical measures to protect Dingo Punks against abuse and unauthorized access. Some public features, including student share-code resolution, may apply rate limits based on network information.

To reduce the amount of raw network information stored for these controls, Dingo Punks may transform an IP address into a cryptographic or otherwise limited identifier before storing a temporary rate-limit record. These records are used for security and abuse prevention and are configured for automatic expiration.

How We Use Educator and Adult-User Information

We may use educator and adult-user information to create and authenticate accounts; verify email addresses; process and fulfill individual purchases; provide free and paid membership access; process subscriptions and cancellations; determine membership status; generate and manage share codes; save favorites and preferences; process prior-purchase rebates; prevent fraud and abuse; provide customer support; send account, security, billing, purchase, and renewal notices; send marketing communications; understand and improve Dingo Punks; troubleshoot technical problems; comply with legal obligations; establish, exercise, or defend legal claims; and protect Dingo Punks, our users, and others.

We do not use student technical information for adult marketing activities.

Marketing Email

Educators may receive product news, promotions, educational content, and other marketing communications from Dingo Punks. When you voluntarily subscribe to our mailing list or create a Dingo Punks membership account, we may use the email address you provide for these communications.

Marketing email is currently managed using MailerLite. You can review MailerLite's privacy policy for additional information about its practices.

Every marketing email will provide a way to unsubscribe. You may opt out of marketing at any time without losing your membership, purchased access, or ability to receive necessary account communications.

Even after you unsubscribe from marketing, we may continue sending transactional or relationship messages such as email verification, password resets, receipts, renewal notices, subscription changes, cancellation confirmations, security alerts, important service notices, and legally required notices.

No student mailing list is maintained, and we do not use student information for marketing communications.

When We Share Information

We do not sell personal information. We do not share personal information for cross-context behavioral advertising or targeted advertising.

We may disclose information to service providers that perform functions on our behalf, including Google and Firebase for authentication, databases, analytics, and server infrastructure; Cloudflare for hosting, content delivery, network services, and security; Stripe for subscription billing and payment processing; Shopify for our storefront and individual purchases; MailerLite for email communications; and other vendors reasonably necessary to operate Dingo Punks.

These companies process information according to the services they provide and their applicable agreements and privacy obligations.

Legal and Safety Disclosures

We may disclose information when we reasonably believe disclosure is necessary to comply with applicable law, legal process, or a valid governmental request; enforce our Terms of Service; investigate fraud or abuse; protect the security or integrity of Dingo Punks; protect the rights or safety of our users or others; or establish, exercise, or defend legal claims.

Business Transfers

If Ethan Dirks Inc. is involved in a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or transfer of the Dingo Punks business, relevant information may be transferred as part of that transaction, subject to applicable law.

What We Do Not Do

Dingo Punks does not sell personal information, sell student information, use student data for behavioral advertising, use student data for targeted advertising, create student marketing profiles, require students to create membership accounts, collect student answers or scores, knowingly use student information to market products directly to students, or rent mailing-list information to advertisers.

Data Retention

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and for legitimate business, legal, security, accounting, tax, fraud-prevention, and dispute-resolution purposes.

Retention periods vary depending on the type of information. Account information may be retained while your account exists. Preferences may be deleted when your account is deleted. Temporary share codes expire according to their configured lifespan. Temporary security and rate-limit records are configured for automatic expiration. Purchase, transaction, and subscription records may be retained for accounting, tax, fraud-prevention, payment, chargeback, and legal purposes. Support communications may be retained when reasonably useful for customer support or legal records. Marketing information may be retained as necessary to maintain subscription preferences and records of unsubscribe requests.

We may retain aggregated or de-identified information that can no longer reasonably identify an individual.

Account Deletion

You may request deletion of your Dingo Punks membership account by contacting hello@dingopunks.com.

Account deletion may remove information such as favorites and account preferences. Deleting a membership account does not necessarily require Dingo Punks, Shopify, Stripe, or other service providers to erase records that must or may reasonably be retained for transaction records, accounting, taxes, fraud prevention, chargebacks, legal compliance, security, dispute resolution, or enforcement of agreements.

Deleting your Dingo Punks account is separate from unsubscribing from marketing emails. You may request both.

Your Privacy Choices and Requests

You may contact us to request information about personal data associated with your account, correction of inaccurate information, deletion of your account and eligible personal information, or additional information about how your data is used.

We may need to verify your identity before completing a request. We may deny or limit a request where permitted or required by law, including where information must be retained for tax, accounting, fraud-prevention, security, payment, or legal purposes.

Where applicable privacy law provides additional rights, we will honor those rights as required.

Colorado Privacy

Dingo Punks is based in Colorado. Colorado law provides privacy protections that may apply to certain personal-data processing and includes specific protections relating to minors' online data.

Dingo Punks does not sell personal data or process student information for targeted advertising. Our student-facing practices are designed to minimize the information processed from minors and to use limited technical information only for disclosed operational purposes such as functionality, analytics, security, and abuse prevention.

Colorado residents may contact hello@dingopunks.com with privacy questions or requests.

Security

We use administrative, technical, and organizational measures that we believe are reasonable for the nature of the information we process. These measures include authentication, server-side access controls, security rules, restrictions on client access to membership and billing information, rate limiting, limited technical identifiers for abuse prevention, and established infrastructure and payment providers.

No internet service or method of electronic storage can be guaranteed to be completely secure. If we learn of a security incident requiring notification under applicable law, we will provide the notices required by law.

Third-Party Links

Dingo Punks may contain links to websites or services that we do not operate. This Privacy Policy does not govern those third parties when you leave Dingo Punks and interact with their services independently. We encourage you to review the privacy practices of third-party services before providing information to them. We are not responsible for the privacy practices of third-party websites or services that we do not control.

International Users

Dingo Punks is operated from the United States. If you access Dingo Punks from another country, information may be processed in the United States or other locations where our service providers operate.

Where applicable law imposes additional requirements, we will comply with those requirements to the extent they apply to our processing.

Changes to This Privacy Policy

We may update this Privacy Policy as our services, providers, technology, business practices, or legal obligations change. The current version will display its effective or last-updated date.

If a change materially affects how we handle information associated with registered accounts, we may provide additional notice by email, through Dingo Punks, or by another reasonable method. We will provide any additional notice or consent required by applicable law.

Contact

This Dingo Punks Privacy Policy is effective as of September 21, 2026 and was last updated on October 8, 2026.

For privacy questions, requests, concerns, or account-deletion requests, contact hello@dingopunks.com.

Ethan Dirks Inc. DBA Dingo Punks
1118 E San Rafael St.
Colorado Springs, CO 80903
United States